last executing test programs: 3.829446717s ago: executing program 2 (id=3431): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="93378e66cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c1", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/18, 0x12}], 0x2}}], 0x2, 0x0, 0x0) 3.744925287s ago: executing program 2 (id=3433): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r3, 0x0, 0x3}, 0x10) 3.744562119s ago: executing program 2 (id=3434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setpriority(0x0, 0x0, 0x1) 1.763907911s ago: executing program 1 (id=3436): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000f80)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r1, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0x5) 1.762868111s ago: executing program 2 (id=3437): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="530000000700004600c7693672b58ade4816"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.625533291s ago: executing program 2 (id=3442): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) 1.621665546s ago: executing program 2 (id=3444): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000400)={0x60, 0x5, 0x5, "a8ac412ad1"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 1.324076261s ago: executing program 0 (id=3449): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.321642954s ago: executing program 0 (id=3450): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 844.747909ms ago: executing program 3 (id=3452): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x100f) 844.475039ms ago: executing program 1 (id=3453): openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) 820.752071ms ago: executing program 3 (id=3454): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="bc963e76ebc00bc0e2e92ff7c7dec255b8c66be4d54e8933e69a976b96e945724d6efb96dc3e8f8a2f75094ce9f61df63d553bf837c91b40533567056d", 0x0, 0x0, 0x0}, 0x38) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 818.114252ms ago: executing program 1 (id=3455): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$tun(r1, 0x0, 0x0) 741.020485ms ago: executing program 3 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xd7}) 740.677255ms ago: executing program 3 (id=3457): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 600.831802ms ago: executing program 3 (id=3458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa301}, @mptcp=@ack={0x1e, 0x13, 0x80, 0x1, "8c0cec4ba6136fae926d2232def5fb"}, @sack={0x5, 0x12, [0x0, 0x0, 0x0, 0x0]}, @exp_fastopen={0xfe, 0x6, 0xf989, "eeb3"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}}}}}}}, 0x0) 364.867717ms ago: executing program 0 (id=3459): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r3, r4, 0x4, r0}, 0x10) 364.640473ms ago: executing program 3 (id=3460): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x0, 0x0, {0xa, 0x0, 0x60}}, 0x1c}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0x4004480c, 0x0) 234.207237ms ago: executing program 0 (id=3461): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x40, 0x700, 0x3, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x6a, 0x0, 0x4, 0x2f, 0x0, @local, @rand_addr=0x64010100}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) 144.851419ms ago: executing program 1 (id=3462): r0 = socket(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 144.603786ms ago: executing program 0 (id=3463): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r3, 0x0, 0x0, 0x0, 0x0, 0x5}) 94.494015ms ago: executing program 1 (id=3464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) 94.151696ms ago: executing program 1 (id=3465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/74, 0x4a) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = io_uring_setup(0x253d, &(0x7f0000000280)={0x0, 0x547a, 0x8, 0x0, 0x3ca}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ew high-speed USB device number 21 using dummy_hcd [ 152.845482][ T1451] usb 6-1: Using ep0 maxpacket: 8 [ 152.850967][ T1451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.865343][ T1451] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 152.867475][ T1451] usb 6-1: config 0 has no interface number 0 [ 152.869106][ T1451] usb 6-1: config 0 interface 125 has no altsetting 0 [ 152.873303][ T1451] usb 6-1: string descriptor 0 read error: -22 [ 152.875276][ T1451] usb 6-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 152.877602][ T1451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.880989][ T1451] usb 6-1: config 0 descriptor?? [ 152.883428][ T1451] hub 6-1:0.125: bad descriptor, ignoring hub [ 152.884866][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 152.885720][ T1451] hub 6-1:0.125: probe with driver hub failed with error -5 [ 152.890572][ T1451] usb 6-1: Found UVC 0.00 device (17dc:0202) [ 152.892247][ T1451] usb 6-1: No valid video chain found. [ 153.217265][ T9] usb 6-1: USB disconnect, device number 21 [ 153.769388][T10873] netlink: 'syz.0.2275': attribute type 2 has an invalid length. [ 153.771569][T10873] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 153.773678][T10873] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2275'. [ 153.885158][ T56] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 153.924848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.044819][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 154.048629][ T56] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 154.053166][ T56] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.055585][ T56] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.057683][ T56] usb 6-1: Product: syz [ 154.058764][ T56] usb 6-1: Manufacturer: syz [ 154.059958][ T56] usb 6-1: SerialNumber: syz [ 154.062399][ T56] usb 6-1: config 0 descriptor?? [ 154.064235][T10869] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.276956][ T8] usb 6-1: USB disconnect, device number 22 [ 154.647845][ T39] kauditd_printk_skb: 68 callbacks suppressed [ 154.647857][ T39] audit: type=1400 audit(1728512001.811:801): avc: denied { getopt } for pid=10888 comm="syz.3.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 154.964873][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 155.055284][ T1160] nci: nci_ntf_packet: unsupported ntf opcode 0xf06 [ 155.514859][ T56] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 155.666581][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.669551][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.672556][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.677840][ T56] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.680372][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.683773][ T56] usb 6-1: config 0 descriptor?? [ 155.891072][T10931] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.004887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 156.098843][ T56] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 156.100846][ T56] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 156.103015][ T56] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 156.117987][ T56] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 156.358295][ T9] usb 6-1: USB disconnect, device number 23 [ 156.364930][ T56] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 156.537396][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.540426][ T56] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.542912][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.546222][ T56] usb 8-1: config 0 descriptor?? [ 156.788474][ T4772] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.792843][ T4772] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.797221][ T4772] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.800869][ T4772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.808651][ T4772] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.811576][ T4772] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.907153][T10942] chnl_net:caif_netlink_parms(): no params data found [ 156.963150][ T56] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 156.979672][ T56] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.0011/input/input34 [ 157.010994][T10942] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.012819][T10942] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.015886][T10942] bridge_slave_0: entered allmulticast mode [ 157.018974][T10942] bridge_slave_0: entered promiscuous mode [ 157.021516][T10942] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.023416][T10942] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.025403][T10942] bridge_slave_1: entered allmulticast mode [ 157.027611][T10942] bridge_slave_1: entered promiscuous mode [ 157.054614][T10942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.054816][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 157.067286][ T56] keytouch 0003:0926:3333.0011: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 157.071308][T10942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.121729][T10942] team0: Port device team_slave_0 added [ 157.125924][T10942] team0: Port device team_slave_1 added [ 157.157542][T10942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.159889][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.167870][T10942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.172192][ T58] usb 8-1: USB disconnect, device number 17 [ 157.172287][T10942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.176129][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.185524][T10942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.249958][T10942] hsr_slave_0: entered promiscuous mode [ 157.252194][T10942] hsr_slave_1: entered promiscuous mode [ 157.254124][T10942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.257504][T10942] Cannot create hsr debugfs directory [ 157.402864][ T39] audit: type=1400 audit(1728512004.651:802): avc: denied { create } for pid=10962 comm="syz.1.2310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.405504][T10942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.410366][ T39] audit: type=1400 audit(1728512004.651:803): avc: denied { ioctl } for pid=10962 comm="syz.1.2310" path="socket:[40210]" dev="sockfs" ino=40210 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.455655][T10965] tls_set_device_offload_rx: netdev not found [ 157.528883][T10969] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer. [ 157.558289][T10942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.751820][T10942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.881178][T10942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.925017][ T5342] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 157.925088][ T4772] Bluetooth: hci5: command 0x1003 tx timeout [ 158.059386][T10942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.064423][T10942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.068032][T10942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.072507][T10997] input: syz0 as /devices/virtual/input/input35 [ 158.073044][T10942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.085188][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.130533][T10942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.139301][T10942] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.143627][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.146193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.158483][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.161078][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.195640][T10942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.248571][T11004] syz.3.2328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.263842][ T39] audit: type=1400 audit(1728512005.511:804): avc: denied { setopt } for pid=11008 comm="syz.1.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.288006][T10942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.318869][T10942] veth0_vlan: entered promiscuous mode [ 158.322782][T10942] veth1_vlan: entered promiscuous mode [ 158.336215][T10942] veth0_macvtap: entered promiscuous mode [ 158.345279][T10942] veth1_macvtap: entered promiscuous mode [ 158.357703][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.361427][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.365462][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.369729][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.373115][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.378065][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.382902][T10942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.394373][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.403042][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.407202][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.410970][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.414567][T10942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.420565][T10942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.427069][T10942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.432908][T10942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.436491][T10942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.439776][T10942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.442959][T10942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.497894][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.500006][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.514019][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.516602][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.598707][ T39] audit: type=1400 audit(1728512005.851:805): avc: denied { accept } for pid=11024 comm="syz.1.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.654993][T10312] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 158.688389][ T39] audit: type=1400 audit(1728512005.941:806): avc: denied { map } for pid=11027 comm="syz.2.2303" path="socket:[41074]" dev="sockfs" ino=41074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.705076][ T39] audit: type=1400 audit(1728512005.941:807): avc: denied { read } for pid=11027 comm="syz.2.2303" path="socket:[41074]" dev="sockfs" ino=41074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.792357][T11035] bridge0: port 3(veth0_to_bridge) entered blocking state [ 158.805081][T10312] usb 5-1: Using ep0 maxpacket: 8 [ 158.806221][T11035] bridge0: port 3(veth0_to_bridge) entered disabled state [ 158.807672][T10312] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.811536][T10312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.814027][T11035] veth0_to_bridge: entered allmulticast mode [ 158.814150][T10312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.818847][T11035] veth0_to_bridge: entered promiscuous mode [ 158.819107][T10312] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.821081][T11035] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.826029][T10312] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.831223][T10312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.831443][T11035] bridge0: port 3(veth0_to_bridge) entered blocking state [ 158.835980][T11035] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 158.845934][ T39] audit: type=1400 audit(1728512006.101:808): avc: denied { setopt } for pid=11038 comm="syz.1.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.885096][ T5342] Bluetooth: hci6: command tx timeout [ 158.891314][ T39] audit: type=1326 audit(1728512006.141:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.1.2340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d98d7dff9 code=0x7ffc0000 [ 158.898926][ T39] audit: type=1326 audit(1728512006.141:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11040 comm="syz.1.2340" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d98d7dff9 code=0x7ffc0000 [ 159.055041][T10312] usb 5-1: usb_control_msg returned -32 [ 159.056530][T10312] usbtmc 5-1:16.0: can't read capabilities [ 159.124874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.207413][ T1451] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 159.355907][ T1451] usb 7-1: Using ep0 maxpacket: 8 [ 159.359289][ T1451] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.362351][ T1451] usb 7-1: config 0 has no interface number 0 [ 159.364540][ T1451] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.369466][ T1451] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.371849][ T1451] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.375208][ T1451] usb 7-1: config 0 descriptor?? [ 159.379421][ T1451] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 159.581588][ T1451] usb 7-1: USB disconnect, device number 14 [ 159.597767][ T1451] iowarrior 7-1:0.1: I/O-Warror #1 now disconnected [ 159.693892][T11097] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer. [ 159.730053][T11101] @: renamed from vlan0 (while UP) [ 159.818045][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 159.818055][ T39] audit: type=1400 audit(1728512007.071:819): avc: denied { ioctl } for pid=11104 comm="syz.3.2366" path="socket:[40327]" dev="sockfs" ino=40327 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.992600][ T39] audit: type=1400 audit(1728512007.241:820): avc: denied { mounton } for pid=11113 comm="syz.1.2370" path="/98/file0/file0" dev="9p" ino=36574219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.150977][T11123] input: syz0 as /devices/virtual/input/input36 [ 160.174815][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.584842][ T5384] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 160.755221][ T5384] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 160.758539][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.760865][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.763653][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.775735][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.778657][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.781830][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.784309][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.786864][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.789781][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.792585][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.794997][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.798633][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.801080][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.803341][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.806557][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.809062][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.811361][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.814107][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.817449][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.820539][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.824369][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.828643][ T5384] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.831702][ T5384] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.835749][ T5384] usb 8-1: config 0 interface 0 has no altsetting 0 [ 160.840086][ T5384] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 160.843293][ T5384] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 160.846354][ T5384] usb 8-1: Product: syz [ 160.848073][ T5384] usb 8-1: Manufacturer: syz [ 160.849542][ T5384] usb 8-1: SerialNumber: syz [ 160.852659][ T5384] usb 8-1: config 0 descriptor?? [ 160.859187][ T5384] yurex 8-1:0.0: USB YUREX device now attached to Yurex #1 [ 160.965333][ T5342] Bluetooth: hci6: command tx timeout [ 161.060140][ T39] audit: type=1400 audit(1728512008.311:821): avc: denied { write } for pid=11141 comm="syz.1.2381" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 161.064395][ T5409] usb 8-1: USB disconnect, device number 18 [ 161.071718][ T5409] yurex 8-1:0.0: USB YUREX #1 now disconnected [ 161.204862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 161.279497][ T1451] usb 5-1: USB disconnect, device number 10 [ 161.329027][ T39] audit: type=1400 audit(1728512008.581:822): avc: denied { setopt } for pid=11145 comm="syz.0.2384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 161.366019][T11150] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 161.381044][T11150] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 161.754923][ T5402] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 161.857050][T11169] mmap: syz.3.2393 (11169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.965012][ T5402] usb 7-1: config 0 has no interfaces? [ 161.966771][ T5402] usb 7-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 161.969111][ T5402] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.972252][ T5402] usb 7-1: config 0 descriptor?? [ 162.190802][ T5402] usb 7-1: USB disconnect, device number 15 [ 162.244940][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.045007][ T5342] Bluetooth: hci6: command tx timeout [ 163.265313][T11232] loop0: detected capacity change from 0 to 7 [ 163.268284][T11232] Dev loop0: unable to read RDB block 7 [ 163.270401][T11232] loop0: unable to read partition table [ 163.272583][T11232] loop0: partition table beyond EOD, truncated [ 163.275095][T11232] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 163.275095][T11232] ) failed (rc=-5) [ 163.284858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 163.362419][ T39] audit: type=1400 audit(1728512010.611:823): avc: denied { write } for pid=11234 comm="syz.1.2416" name="fd" dev="proc" ino=40477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 163.468574][ T39] audit: type=1800 audit(1728512010.721:824): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2418" name="bus" dev="9p" ino=36574792 res=0 errno=0 [ 163.741274][T11254] bridge0: port 3(syz_tun) entered blocking state [ 163.743130][T11254] bridge0: port 3(syz_tun) entered disabled state [ 163.745161][T11254] syz_tun: entered allmulticast mode [ 163.747585][T11254] syz_tun: entered promiscuous mode [ 163.750441][T11254] bridge0: port 3(syz_tun) entered blocking state [ 163.752222][T11254] bridge0: port 3(syz_tun) entered forwarding state [ 163.865423][ T39] audit: type=1400 audit(1728512011.121:825): avc: denied { shutdown } for pid=11260 comm="syz.2.2428" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.892778][ T39] audit: type=1400 audit(1728512011.141:826): avc: denied { bind } for pid=11257 comm="syz.1.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.913434][T11258] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.921420][T11266] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 163.925667][T11266] netlink: 'syz.2.2430': attribute type 10 has an invalid length. [ 163.930038][T11266] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.932334][T11266] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.937599][T11266] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.939542][T11266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.941602][T11266] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.943532][T11266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.947264][T11266] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 163.979385][T11258] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.988538][ T45] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 164.076060][ T5342] Bluetooth: hci1: unknown advertising packet type: 0x72 [ 164.077257][ T5342] Bluetooth: hci1: Malformed LE Event: 0x02 [ 164.086689][T11258] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.190506][T11258] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.285849][T11258] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.293360][T11258] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.302209][T11258] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.311159][T11258] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.324856][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 164.410401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 164.814896][ T830] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 164.985171][ T830] usb 6-1: Using ep0 maxpacket: 8 [ 164.990169][ T830] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 164.992813][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.995534][ T830] usb 6-1: Product: syz [ 164.997028][ T830] usb 6-1: Manufacturer: syz [ 164.999185][ T830] usb 6-1: SerialNumber: syz [ 165.003335][ T830] usb 6-1: config 0 descriptor?? [ 165.125201][ T5342] Bluetooth: hci6: command tx timeout [ 165.215834][ T830] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.224693][ T830] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 165.243942][ T830] usb 6-1: USB disconnect, device number 24 [ 165.364825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.403066][ T39] audit: type=1804 audit(1728512012.651:827): pid=11323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2451" name="/" dev="pidfs" ino=11619 res=1 errno=0 [ 165.884921][T11353] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 165.887874][T11353] netlink: 'syz.1.2463': attribute type 4 has an invalid length. [ 165.890774][T11353] netlink: 126012 bytes leftover after parsing attributes in process `syz.1.2463'. [ 166.128746][T11358] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2464'. [ 166.383117][T11396] bridge: RTM_DELNEIGH with unconfigured vlan 257 on bridge0 [ 166.405162][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.972181][T11401] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 167.098951][ T11] bond0: (slave bond_slave_0): interface is now down [ 167.102524][ T11] bond0: (slave bond_slave_1): interface is now down [ 167.113964][T11411] netlink: 'syz.1.2486': attribute type 10 has an invalid length. [ 167.127240][ T11] bond0: (slave bond_slave_0): interface is now down [ 167.133670][ T11] bond0: (slave bond_slave_1): interface is now down [ 167.142184][ T11] bond0: now running without any active interface! [ 167.447928][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 167.530337][ T39] audit: type=1326 audit(1728512014.791:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11429 comm="syz.1.2494" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d98d7dff9 code=0x0 [ 167.701678][ T39] audit: type=1400 audit(1728512014.921:829): avc: denied { read } for pid=11435 comm="syz.3.2495" name="btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 167.721050][ T39] audit: type=1400 audit(1728512014.921:830): avc: denied { open } for pid=11435 comm="syz.3.2495" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 167.742597][ T39] audit: type=1400 audit(1728512014.921:831): avc: denied { ioctl } for pid=11435 comm="syz.3.2495" path="/dev/btrfs-control" dev="devtmpfs" ino=1149 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 167.770227][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 167.889555][ T39] audit: type=1400 audit(1728512015.141:832): avc: denied { read } for pid=11450 comm="syz.0.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.013874][T11457] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.015841][T11457] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.018283][T11457] bridge0: entered allmulticast mode [ 168.048035][ T11] bond0: (slave bridge0): link status definitely down, disabling slave [ 168.052286][T11459] bridge0: port 2(bridge_slave_1) entered listening state [ 168.484806][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 169.524852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.564887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.905933][ T39] audit: type=1400 audit(1728512018.161:833): avc: denied { write } for pid=11490 comm="syz.1.2515" path="socket:[42553]" dev="sockfs" ino=42553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 171.336651][ T39] audit: type=1400 audit(1728512018.591:834): avc: denied { setopt } for pid=11515 comm="syz.2.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.343419][ T39] audit: type=1400 audit(1728512018.591:835): avc: denied { read } for pid=11515 comm="syz.2.2526" path="socket:[43545]" dev="sockfs" ino=43545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.497726][T11525] kernel read not supported for file /eth0 (pid: 11525 comm: syz.1.2530) [ 171.500681][ T39] audit: type=1800 audit(1728512018.751:836): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2530" name="eth0" dev="mqueue" ino=41147 res=0 errno=0 [ 171.604858][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 171.704188][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2537'. [ 171.987109][ T45] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 172.067398][ T39] audit: type=1400 audit(1728512019.321:837): avc: denied { search } for pid=11563 comm="syz.0.2543" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 172.627453][T11579] sp0: Synchronizing with TNC [ 172.644818][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.721918][T11581] binder: 11580:11581 ioctl c0306201 20000240 returned -22 [ 172.730184][T11566] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 172.732999][T11566] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.2544'. [ 172.737431][T11566] netlink: 'syz.0.2544': attribute type 2 has an invalid length. [ 172.744814][T11566] netlink: 177 bytes leftover after parsing attributes in process `syz.0.2544'. [ 172.762489][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 172.785450][ T8] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 172.837322][T11593] input: syz1 as /devices/virtual/input/input37 [ 172.969590][ T8] usb 8-1: config 0 has an invalid interface number: 20 but max is 0 [ 172.972557][ T8] usb 8-1: config 0 has no interface number 0 [ 172.974509][ T8] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 172.977512][ T8] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 172.983145][ T8] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 172.986482][ T8] usb 8-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 172.989331][ T8] usb 8-1: Product: syz [ 172.991027][ T8] usb 8-1: Manufacturer: syz [ 172.992755][ T8] usb 8-1: SerialNumber: syz [ 172.996261][ T8] usb 8-1: config 0 descriptor?? [ 173.001701][T11577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.005329][ T8] usb-storage 8-1:0.20: USB Mass Storage device detected [ 173.018031][ T8] usb-storage 8-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 173.220664][T11577] netlink: 'syz.3.2549': attribute type 9 has an invalid length. [ 173.222790][T11577] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.2549'. [ 173.229920][ T8] scsi host6: usb-storage 8-1:0.20 [ 173.239513][ T8] usb 8-1: USB disconnect, device number 19 [ 173.269013][T11611] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 173.316007][ T5402] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 173.343604][ T39] audit: type=1400 audit(1728512020.591:838): avc: denied { ioctl } for pid=11614 comm="syz.2.2564" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 173.395145][ T39] audit: type=1400 audit(1728512020.641:839): avc: denied { ioctl } for pid=11616 comm="syz.2.2565" path="socket:[40912]" dev="sockfs" ino=40912 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.456392][ T39] audit: type=1400 audit(1728512020.711:840): avc: denied { unmount } for pid=10942 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 173.485890][ T5402] usb 6-1: Using ep0 maxpacket: 8 [ 173.489113][ T5402] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 173.492815][ T5402] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.495726][ T5402] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.498298][ T5402] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.501658][ T5402] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.504055][ T5402] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.684942][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 173.712255][T11633] netlink: 'syz.2.2573': attribute type 9 has an invalid length. [ 173.713850][ T5402] usb 6-1: GET_CAPABILITIES returned 0 [ 173.714573][T11633] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.2573'. [ 173.716042][ T5402] usbtmc 6-1:16.0: can't read capabilities [ 173.751748][ T39] audit: type=1400 audit(1728512021.001:841): avc: denied { read } for pid=11635 comm="syz.0.2574" path="socket:[43672]" dev="sockfs" ino=43672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.915307][ T8] usb 6-1: USB disconnect, device number 25 [ 173.957599][ T39] audit: type=1804 audit(1728512021.211:842): pid=11655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2583" name="/newroot/208/file0/bus" dev="9p" ino=36574792 res=1 errno=0 [ 174.063544][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2587'. [ 174.167956][T11667] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 174.170528][T11667] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 174.735025][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.075014][ T58] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 175.226206][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 175.235714][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 175.238266][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 175.244303][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 175.250414][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.262415][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.265025][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.476622][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 175.478151][ T58] usbtmc 7-1:16.0: can't read capabilities [ 175.706869][ T5384] usb 7-1: USB disconnect, device number 16 [ 175.774815][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 175.781031][ T5402] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 175.936137][ T5402] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.938803][ T5402] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.942508][ T5402] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.945177][ T5402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.947246][ T5402] usb 6-1: Product: syz [ 175.948339][ T5402] usb 6-1: Manufacturer: syz [ 175.949557][ T5402] usb 6-1: SerialNumber: syz [ 176.169524][ T5402] usb 6-1: 0:2 : does not exist [ 176.180679][ T5402] usb 6-1: USB disconnect, device number 26 [ 176.198284][ T5355] udevd[5355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.496917][T11772] input: syz1 as /devices/virtual/input/input38 [ 176.498659][ T5342] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 176.500901][ T5342] Bluetooth: hci6: Injecting HCI hardware error event [ 176.505219][ T5342] Bluetooth: hci6: hardware error 0x00 [ 176.633534][T11784] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 176.764941][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 176.764952][ T39] audit: type=1400 audit(1728512024.011:851): avc: denied { read } for pid=11794 comm="syz.1.2644" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.774553][ T39] audit: type=1400 audit(1728512024.011:852): avc: denied { open } for pid=11794 comm="syz.1.2644" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.784815][ T39] audit: type=1400 audit(1728512024.011:853): avc: denied { ioctl } for pid=11794 comm="syz.1.2644" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 176.789225][T11799] input: syz1 as /devices/virtual/input/input39 [ 176.804876][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.998405][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2654'. [ 177.053555][T11823] cgroup: fork rejected by pids controller in /syz2 [ 177.531347][ T39] audit: type=1400 audit(1728512024.781:854): avc: denied { add_name } for pid=11850 comm="syz.0.2666" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 177.538363][ T39] audit: type=1400 audit(1728512024.781:855): avc: denied { create } for pid=11850 comm="syz.0.2666" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 177.544435][ T39] audit: type=1400 audit(1728512024.781:856): avc: denied { associate } for pid=11850 comm="syz.0.2666" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 177.742000][T11865] kernel read not supported for file /eth0 (pid: 11865 comm: syz.3.2672) [ 177.744219][ T39] audit: type=1800 audit(1728512024.991:857): pid=11865 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2672" name="eth0" dev="mqueue" ino=44454 res=0 errno=0 [ 177.845010][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 177.905757][T11889] syz_tun: Device is already in use. [ 177.966636][T11895] input: syz0 as /devices/virtual/input/input40 [ 178.028392][ T39] audit: type=1326 audit(1728512025.281:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.0.2686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1077dff9 code=0x7ffc0000 [ 178.034310][ T39] audit: type=1326 audit(1728512025.281:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.0.2686" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1077dff9 code=0x7ffc0000 [ 178.040268][ T39] audit: type=1326 audit(1728512025.281:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.0.2686" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1077dff9 code=0x7ffc0000 [ 178.535321][T11934] syz.0.2700[11934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.535379][T11934] syz.0.2700[11934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.538483][T11934] syz.0.2700[11934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.566255][ T5342] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 178.829217][ T1160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.884832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 178.959248][T11941] tun0: tun_chr_ioctl cmd 1074025675 [ 178.960643][T11941] tun0: persist enabled [ 178.962097][T11941] tun0: tun_chr_ioctl cmd 1074025675 [ 178.963467][T11941] tun0: persist enabled [ 179.043985][ T4772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.045183][ T1160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.055368][ T4772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.074890][ T4772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.092429][T11953] binder: 11952:11953 ioctl c018620c 20000000 returned -1 [ 179.120714][ T4772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.125948][ T4772] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.129521][ T4772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.149875][T11960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2713'. [ 179.163290][ T1160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.300482][ T1160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.357996][T11973] loop4: detected capacity change from 0 to 524287999 [ 179.361646][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.364209][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.377398][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.380765][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.383983][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.387283][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.390723][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.393930][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.396899][T11944] chnl_net:caif_netlink_parms(): no params data found [ 179.400277][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.402837][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.406965][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.409437][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.411842][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.414243][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.418662][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.421094][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.423430][T11973] ldm_validate_partition_table(): Disk read failed. [ 179.429170][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.431766][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.433980][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.436400][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.440262][T11973] Dev loop4: unable to read RDB block 0 [ 179.444546][T11973] loop4: unable to read partition table [ 179.446678][T11973] loop_reread_partitions: partition scan of loop4 (3 xC) failed (rc=-5) [ 179.549768][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 179.552066][T11986] Bluetooth: hci6: Frame reassembly failed (-84) [ 179.602167][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.604154][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.606317][T11944] bridge_slave_0: entered allmulticast mode [ 179.608468][T11944] bridge_slave_0: entered promiscuous mode [ 179.631886][ T1160] bridge_slave_1: left promiscuous mode [ 179.634227][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.645446][ T1160] bridge_slave_0: left allmulticast mode [ 179.647221][ T1160] bridge_slave_0: left promiscuous mode [ 179.649180][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.826530][ T1160] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 179.929841][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 179.997638][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.004256][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.009288][ T1160] bond0 (unregistering): Released all slaves [ 180.013854][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.016099][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.018075][T11944] bridge_slave_1: entered allmulticast mode [ 180.020182][T11944] bridge_slave_1: entered promiscuous mode [ 180.106897][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.179812][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.211229][T11944] team0: Port device team_slave_0 added [ 180.214325][T11944] team0: Port device team_slave_1 added [ 180.263242][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.265851][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.275559][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.323311][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.325372][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.332289][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.372364][T11944] hsr_slave_0: entered promiscuous mode [ 180.374306][T11944] hsr_slave_1: entered promiscuous mode [ 180.377309][T11944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.379799][T11944] Cannot create hsr debugfs directory [ 180.391437][ T1160] hsr_slave_0: left promiscuous mode [ 180.393267][ T1160] hsr_slave_1: left promiscuous mode [ 180.395336][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.397288][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.399687][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.401611][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.423829][ T1160] veth1_macvtap: left promiscuous mode [ 180.425365][ T1160] veth0_macvtap: left promiscuous mode [ 180.426946][ T1160] veth1_vlan: left promiscuous mode [ 180.428313][ T1160] veth0_vlan: left promiscuous mode [ 180.514850][ T5381] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.584825][ T5682] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 180.668349][ T5381] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.670918][ T5381] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.674315][ T5381] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.676713][ T5381] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 180.679533][ T5381] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 180.683735][ T5381] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.688762][ T5381] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.691232][ T5381] usb 5-1: Product: syz [ 180.693045][ T5381] usb 5-1: Manufacturer: syz [ 180.704681][ T5381] cdc_wdm 5-1:1.0: skipping garbage [ 180.712030][ T5381] cdc_wdm 5-1:1.0: skipping garbage [ 180.721433][ T5381] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 180.723026][ T5381] cdc_wdm 5-1:1.0: Unknown control protocol [ 180.756121][ T5682] usb 6-1: config 0 has an invalid interface number: 118 but max is 0 [ 180.758433][ T5682] usb 6-1: config 0 has no interface number 0 [ 180.761916][ T5682] usb 6-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 180.764857][ T5682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.766973][ T5682] usb 6-1: Product: syz [ 180.768574][ T5682] usb 6-1: Manufacturer: syz [ 180.769853][ T5682] usb 6-1: SerialNumber: syz [ 180.772198][ T5682] usb 6-1: config 0 descriptor?? [ 180.782640][ T5682] ftdi_sio 6-1:0.118: FTDI USB Serial Device converter detected [ 180.785759][ T5682] usb 6-1: Detected SIO [ 180.796952][ T5682] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 180.929461][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.931503][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.933475][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.935318][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.937169][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.939091][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.941174][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.942956][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.944702][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.946471][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.948265][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.950033][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.951797][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.953549][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.955441][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.957235][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.959100][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.960888][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.962722][ C3] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 180.964548][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 180.964846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 180.976172][ T74] usb 5-1: USB disconnect, device number 11 [ 180.978014][ C3] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 181.004529][ T5682] usb 6-1: USB disconnect, device number 27 [ 181.009696][ T5682] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.012425][ T5682] ftdi_sio 6-1:0.118: device disconnected [ 181.219000][ T5342] Bluetooth: hci5: command tx timeout [ 181.355118][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 181.445371][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 181.608471][ T5342] Bluetooth: hci6: command 0x1003 tx timeout [ 181.611465][ T4772] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 181.719009][ T12] Bluetooth: (null): Invalid header checksum [ 181.720896][ T12] Bluetooth: (null): Invalid header checksum [ 181.995966][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 181.995977][ T39] audit: type=1400 audit(1728512029.251:890): avc: denied { listen } for pid=12043 comm="syz.0.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.004847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.510486][T12058] program syz.1.2747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.943889][T11944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.949591][T11944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.952750][T11944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.956558][T11944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.001176][T11944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.008767][T11944] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.017168][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.019043][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.021548][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.023389][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.045113][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 183.131860][T11944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.162757][T11944] veth0_vlan: entered promiscuous mode [ 183.168381][T11944] veth1_vlan: entered promiscuous mode [ 183.182819][T11944] veth0_macvtap: entered promiscuous mode [ 183.186931][T11944] veth1_macvtap: entered promiscuous mode [ 183.194108][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.200337][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.202796][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.207283][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.209857][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.212503][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.222490][T11944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.228192][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.230990][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.233377][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.236408][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.238871][T11944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.242166][T11944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.246559][T11944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.250638][T11944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.253096][T11944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.255990][T11944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.258166][T11944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.276744][ T58] kernel write not supported for file [eventfd] (pid: 58 comm: kworker/2:1) [ 183.286016][ T4772] Bluetooth: hci5: command tx timeout [ 183.290142][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.307008][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.330445][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.332434][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.719407][ T39] audit: type=1400 audit(1728512030.971:891): avc: denied { append } for pid=12154 comm="syz.1.2770" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 183.804843][ T8] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 183.926522][ T39] audit: type=1400 audit(1728512031.181:892): avc: denied { sendto } for pid=11 comm="kworker/u32:0" daddr=ff02::1:ffaa:aa1c netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 183.955904][ T8] usb 8-1: config 0 has no interfaces? [ 183.957294][ T8] usb 8-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=5f.ca [ 183.959584][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.965584][ T8] usb 8-1: config 0 descriptor?? [ 184.084848][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.171026][ T8] usb 8-1: USB disconnect, device number 20 [ 184.579070][ T39] audit: type=1400 audit(1728512031.831:893): avc: denied { write } for pid=12168 comm="syz.2.2776" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 184.667784][ T39] audit: type=1400 audit(1728512031.921:894): avc: denied { mounton } for pid=12177 comm="syz.1.2781" path="/202/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 184.707162][ T39] audit: type=1400 audit(1728512031.961:895): avc: denied { unmount } for pid=10233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 184.975378][ T8] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 185.124813][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 185.127182][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 185.137994][ T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.140720][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.143179][ T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.147094][ T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.150399][ T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.152749][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.362226][ T8] usb 8-1: GET_CAPABILITIES returned 0 [ 185.363720][ T8] usbtmc 8-1:16.0: can't read capabilities [ 185.365454][ T4772] Bluetooth: hci5: command tx timeout [ 185.571311][ T8] usb 8-1: USB disconnect, device number 21 [ 185.714849][ T74] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 185.864907][ T74] usb 5-1: Using ep0 maxpacket: 8 [ 185.867539][ T74] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.870180][ T74] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 185.872643][ T74] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.875231][ T74] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.878613][ T74] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.881000][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.098396][ T74] usb 5-1: usb_control_msg returned -32 [ 186.099996][ T74] usbtmc 5-1:16.0: can't read capabilities [ 186.164895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.450620][T12276] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -32 [ 186.453135][ T8] usb 5-1: USB disconnect, device number 12 [ 186.944513][ T39] audit: type=1400 audit(1728512034.191:896): avc: denied { getopt } for pid=12286 comm="syz.1.2827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.037392][T12303] netlink: 'syz.2.2831': attribute type 3 has an invalid length. [ 187.039515][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2831'. [ 187.046198][T12297] vivid-007: disconnect [ 187.050877][T12295] vivid-007: reconnect [ 187.120598][ T73] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 187.129834][ T39] audit: type=1326 audit(1728512034.381:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12309 comm="syz.3.2835" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x0 [ 187.204855][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.314886][ T58] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 187.454839][ T4772] Bluetooth: hci5: command tx timeout [ 187.464996][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 187.469044][ T58] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.471582][ T58] usb 7-1: config 0 has no interface number 0 [ 187.473269][ T58] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.477378][ T58] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 187.479846][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.483685][ T58] usb 7-1: config 0 descriptor?? [ 187.489766][ T58] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 187.695005][ T58] usb 7-1: USB disconnect, device number 17 [ 187.697175][ C2] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 187.704128][ T58] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 188.244886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 189.031528][T12367] input: syz0 as /devices/virtual/input/input41 [ 189.059001][ T39] audit: type=1400 audit(1728512036.311:898): avc: denied { ioctl } for pid=12363 comm="syz.3.2855" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 189.284882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.210934][ T39] audit: type=1400 audit(1728512037.461:899): avc: denied { execmem } for pid=12400 comm="syz.0.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 190.324853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 190.409606][T12427] netlink: 'syz.1.2881': attribute type 1 has an invalid length. [ 190.418716][T12427] bond1: entered promiscuous mode [ 190.439128][T12427] team0: Port device team_slave_1 removed [ 190.445866][T12427] bond1: (slave team_slave_1): making interface the new active one [ 190.447969][T12427] team_slave_1: entered promiscuous mode [ 190.451854][T12427] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 190.544781][ T39] audit: type=1400 audit(1728512037.791:900): avc: denied { write } for pid=12444 comm="syz.0.2886" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.652514][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2891'. [ 191.026124][T12473] netlink: 'syz.1.2899': attribute type 9 has an invalid length. [ 191.028147][T12473] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2899'. [ 191.043126][T12473] netlink: 'syz.1.2899': attribute type 9 has an invalid length. [ 191.045247][T12473] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2899'. [ 191.244011][T12480] netlink: 'syz.2.2901': attribute type 4 has an invalid length. [ 191.246121][T12480] netlink: 'syz.2.2901': attribute type 4 has an invalid length. [ 191.248203][T12480] netlink: 126012 bytes leftover after parsing attributes in process `syz.2.2901'. [ 191.366308][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 191.450879][T12499] vlan0: entered allmulticast mode [ 191.452771][T12499] bond0: entered allmulticast mode [ 191.454173][T12499] bond_slave_0: entered allmulticast mode [ 191.472114][T12499] bond_slave_1: entered allmulticast mode [ 191.473044][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 191.492845][T12499] bond0: left allmulticast mode [ 191.494194][T12499] bond_slave_0: left allmulticast mode [ 191.497671][T12499] bond_slave_1: left allmulticast mode [ 191.544314][T12505] xt_hashlimit: size too large, truncated to 1048576 [ 192.404823][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 192.714429][ T39] audit: type=1400 audit(1728512039.961:901): avc: denied { create } for pid=12530 comm="syz.2.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.722309][ T39] audit: type=1400 audit(1728512039.971:902): avc: denied { write } for pid=12530 comm="syz.2.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.728394][ T39] audit: type=1400 audit(1728512039.981:903): avc: denied { nlmsg_write } for pid=12530 comm="syz.2.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.073195][ T39] audit: type=1804 audit(1728512040.321:904): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2930" name="/" dev="pidfs" ino=12848 res=1 errno=0 [ 193.454837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.626744][T12570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.655566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 193.742267][T12570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.798409][T12570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.881213][T12570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.928674][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.930620][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.932819][T12573] netlink: 576 bytes leftover after parsing attributes in process `syz.3.2938'. [ 194.022004][T12570] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.034713][T12570] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.045900][T12570] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.064044][T12570] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.297065][T12578] bridge: RTM_DELNEIGH with unconfigured vlan 257 on bridge0 [ 194.467479][ T5342] Bluetooth: hci6: sending frame failed (-49) [ 194.473395][ T4772] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 194.479263][T12588] Bluetooth: hci6: Frame reassembly failed (-84) [ 194.494811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.552384][T12593] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.034914][ T5385] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 195.184963][ T5385] usb 8-1: Using ep0 maxpacket: 8 [ 195.189231][ T5385] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 195.191671][ T5385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.193830][ T5385] usb 8-1: Product: syz [ 195.197636][ T5385] usb 8-1: Manufacturer: syz [ 195.199000][ T5385] usb 8-1: SerialNumber: syz [ 195.207431][ T5385] usb 8-1: config 0 descriptor?? [ 195.419009][ T5385] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.429307][ T5385] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 195.445318][ T5385] usb 8-1: USB disconnect, device number 22 [ 195.524965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 195.968766][T12603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 196.016676][T12607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.174327][T12607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.308851][T12607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.368610][T12607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.502852][T12607] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.512216][T12607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.522215][T12607] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.532421][T12607] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.574910][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.934868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.449097][T12633] atomic_op ffff888049f32998 conn xmit_atomic 0000000000000000 [ 197.604969][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.958369][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2983'. [ 198.124830][ T8] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 198.276632][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.279866][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.282909][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.286663][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.289057][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.293427][ T8] usb 7-1: config 0 descriptor?? [ 198.654873][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.694855][ T5409] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 198.714308][ T8] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 198.719440][ T8] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 198.874804][ T5409] usb 8-1: Using ep0 maxpacket: 8 [ 198.877779][ T5409] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 198.879986][ T5409] usb 8-1: config 179 has no interface number 0 [ 198.881643][ T5409] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 198.884456][ T5409] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 198.904808][ T5409] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 198.907752][ T5409] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 198.910689][ T5409] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 198.914090][ T5409] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 198.924773][ T5409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.932451][T12695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.017340][ T39] audit: type=1326 audit(1728512046.271:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.2.2979" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 199.023026][ T39] audit: type=1326 audit(1728512046.271:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12667 comm="syz.2.2979" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 199.094516][T12698] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 199.126677][T12700] veth0_to_hsr: entered promiscuous mode [ 199.130684][T12700] veth0_to_hsr: left promiscuous mode [ 199.161029][ T5409] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input42 [ 199.253922][T12702] veth3: entered promiscuous mode [ 199.344053][ T5409] usb 8-1: USB disconnect, device number 23 [ 199.344101][ C3] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 199.348069][ C3] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 199.351467][ T5409] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 199.694992][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.893659][ T39] audit: type=1326 audit(1728512047.141:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.904783][ T39] audit: type=1326 audit(1728512047.141:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.910734][ T39] audit: type=1326 audit(1728512047.141:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.917090][ T39] audit: type=1326 audit(1728512047.141:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.923041][ T39] audit: type=1326 audit(1728512047.141:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.931758][ T39] audit: type=1326 audit(1728512047.151:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.938610][ T39] audit: type=1326 audit(1728512047.151:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.944861][ T39] audit: type=1326 audit(1728512047.151:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.3.3000" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0914f7dff9 code=0x7ffc0000 [ 199.951160][T12719] bridge0: port 3(veth0_to_bridge) entered disabled state [ 199.953159][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.955204][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.957918][T12719] bridge0: entered allmulticast mode [ 199.982500][T12719] bridge0: port 2(bridge_slave_1) entered listening state [ 200.148144][T12724] futex_wake_op: syz.3.3004 tries to shift op by -1; fix this program [ 200.226889][T12726] binder: 12725:12726 ioctl 4018620d 0 returned -22 [ 200.608553][T12736] ip6gre1: entered allmulticast mode [ 200.708479][ T58] usb 7-1: USB disconnect, device number 18 [ 200.734835][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.075332][ T5342] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.078965][ T5342] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.081367][ T5342] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.084504][ T5342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.088759][ T5342] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 201.090724][ T5342] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.166642][T12753] chnl_net:caif_netlink_parms(): no params data found [ 201.238588][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.240484][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.242374][T12753] bridge_slave_0: entered allmulticast mode [ 201.244444][T12753] bridge_slave_0: entered promiscuous mode [ 201.249375][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.251340][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.253242][T12753] bridge_slave_1: entered allmulticast mode [ 201.255456][T12753] bridge_slave_1: entered promiscuous mode [ 201.275781][T12753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.281762][T12753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.309235][T12753] team0: Port device team_slave_0 added [ 201.312732][T12753] team0: Port device team_slave_1 added [ 201.314589][ T58] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 201.337493][T12753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.339344][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.347056][T12753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.350611][T12753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.352414][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.359293][T12753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.384579][T12753] hsr_slave_0: entered promiscuous mode [ 201.387423][T12753] hsr_slave_1: entered promiscuous mode [ 201.389881][T12753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.392481][T12753] Cannot create hsr debugfs directory [ 201.471624][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.474644][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.479701][T12753] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.484820][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.488250][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.490596][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.497804][ T58] usb 6-1: config 0 descriptor?? [ 201.602752][T12753] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.679191][T12753] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.746820][T12753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.774826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.869443][T12753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.873825][T12753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.886458][T12753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.890587][T12753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.921070][ T58] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 201.930621][ T58] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 201.954947][T12753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.999678][T12753] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.022663][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.024566][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.027231][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.029075][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.202718][T12753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.231763][T12753] veth0_vlan: entered promiscuous mode [ 202.241272][T12753] veth1_vlan: entered promiscuous mode [ 202.263579][T12753] veth0_macvtap: entered promiscuous mode [ 202.271296][T12753] veth1_macvtap: entered promiscuous mode [ 202.290668][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.294441][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.298479][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.302232][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.306089][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.309657][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.313144][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.321665][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.327924][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.338250][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.342168][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.345942][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.349842][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.353561][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.357873][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.361493][T12753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.365369][T12753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.370827][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.380064][T12753] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.383462][T12753] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.390497][T12753] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.393841][T12753] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.462663][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.464780][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.501200][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.503423][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.635108][T12771] kernel read not supported for file /eth0 (pid: 12771 comm: syz.3.3026) [ 202.805549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.957623][T12776] syzkaller1: entered promiscuous mode [ 202.959242][T12776] syzkaller1: entered allmulticast mode [ 203.134877][ T5342] Bluetooth: hci6: command tx timeout [ 203.291080][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3022'. [ 203.298137][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3022'. [ 203.574496][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3027'. [ 203.791705][T12806] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 203.793774][T12806] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 203.796623][T12806] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.3031'. [ 203.799021][T12806] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 203.845086][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.006844][ T5409] usb 6-1: USB disconnect, device number 28 [ 204.887359][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.214898][ T5342] Bluetooth: hci6: command tx timeout [ 205.254838][ T58] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 205.424879][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 205.448336][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.450898][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.453533][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.456625][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.460712][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.466144][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.687675][ T58] usb 7-1: usb_control_msg returned -32 [ 205.689255][ T58] usbtmc 7-1:16.0: can't read capabilities [ 205.765592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 205.779540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.881873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 205.924820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.377627][T12876] raw_sendmsg: syz.0.3058 forgot to set AF_INET. Fix it! [ 206.840532][ T5385] usb 7-1: USB disconnect, device number 19 [ 206.883260][T12889] binder: 12887:12889 ioctl c0306201 20000240 returned -22 [ 206.964838][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.018738][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 207.134961][ T74] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 207.287498][ T74] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.291579][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.294876][ T5342] Bluetooth: hci6: command tx timeout [ 207.295630][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.299892][ T74] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.306853][ T74] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.309352][ T74] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.311451][ T74] usb 6-1: Manufacturer: syz [ 207.322145][ T74] usb 6-1: config 0 descriptor?? [ 207.734759][ T74] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 207.736967][ T74] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 207.745415][ T74] appleir 0003:05AC:8243.0014: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 207.767407][T12908] netlink: 'syz.2.3072': attribute type 1 has an invalid length. [ 207.769527][T12908] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.3072'. [ 207.772465][T12908] netlink: 'syz.2.3072': attribute type 2 has an invalid length. [ 207.774516][T12908] netlink: 177 bytes leftover after parsing attributes in process `syz.2.3072'. [ 207.873917][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 208.000390][T12925] input: syz1 as /devices/virtual/input/input43 [ 208.007423][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.009422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 208.249297][ T5385] usb 6-1: USB disconnect, device number 29 [ 208.955847][T12959] binder: 12958:12959 ioctl c0306201 20000380 returned -14 [ 209.044861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.025177][T13019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3115'. [ 210.084853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.652463][T13063] batadv_slave_1: entered promiscuous mode [ 210.660133][T13063] bridge0: entered promiscuous mode [ 210.662900][T13055] bridge0: left promiscuous mode [ 210.664321][T13055] batadv_slave_1: left promiscuous mode [ 211.124808][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.514918][ T5409] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 211.677003][ T5409] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 211.679152][ T5409] usb 7-1: config 0 has no interface number 0 [ 211.680767][ T5409] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 211.683844][ T5409] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.695117][ T5409] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 211.701520][ T5409] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 211.703614][ T5409] usb 7-1: Product: syz [ 211.708264][ T5409] usb 7-1: Manufacturer: syz [ 211.709523][ T5409] usb 7-1: SerialNumber: syz [ 211.715822][ T5409] usb 7-1: config 0 descriptor?? [ 211.717596][T13099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.724467][ T5409] usb-storage 7-1:0.20: USB Mass Storage device detected [ 211.731183][ T5409] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 211.810103][T13131] netlink: 'syz.0.3164': attribute type 7 has an invalid length. [ 211.812217][T13131] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3164'. [ 211.835409][T13131] netlink: 'syz.0.3164': attribute type 3 has an invalid length. [ 211.837481][T13131] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3164'. [ 211.929590][ T5682] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 211.933809][ T5682] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz1] on syz0 [ 211.952983][T13099] netlink: 'syz.2.3148': attribute type 9 has an invalid length. [ 211.955155][T13099] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.3148'. [ 211.965566][ T5409] scsi host6: usb-storage 7-1:0.20 [ 211.973880][ T5409] usb 7-1: USB disconnect, device number 20 [ 212.050814][T13146] UHID_CREATE from different security context by process 95 (syz.0.3165), this is not allowed. [ 212.164814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.207311][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 212.342907][T13174] loop0: detected capacity change from 0 to 128 [ 212.345386][T13174] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 212.346804][T13174] loop0: partition table partially beyond EOD, truncated [ 212.355072][T13174] loop0: p1 size 348879409 extends beyond EOD, truncated [ 212.381513][ T5355] udevd[5355]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 212.418536][T13185] input: syz1 as /devices/virtual/input/input44 [ 212.461185][T13192] netlink: 'syz.3.3194': attribute type 4 has an invalid length. [ 212.656845][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 212.718959][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3205'. [ 212.793809][T13229] cgroup: fork rejected by pids controller in /syz3 [ 212.824927][ T5342] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 212.827436][ T5342] Bluetooth: hci6: Injecting HCI hardware error event [ 212.831651][ T4772] Bluetooth: hci6: hardware error 0x00 [ 212.846322][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.849615][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.853544][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.856309][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.858791][ T9] usb 5-1: Product: syz [ 212.860204][ T9] usb 5-1: Manufacturer: syz [ 212.861784][ T9] usb 5-1: SerialNumber: syz [ 213.111688][ T9] usb 5-1: 0:2 : does not exist [ 213.122369][ T9] usb 5-1: USB disconnect, device number 13 [ 213.133699][ T5355] udevd[5355]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.204810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.247643][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 213.247654][ T39] audit: type=1400 audit(1728512060.501:926): avc: denied { unmount } for pid=10233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.477972][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.489421][T13264] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3222'. [ 213.491996][T13262] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3222'. [ 213.547024][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.599866][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.650364][ T5349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.654186][ T5349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.657341][ T5349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.659086][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.660467][ T5349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.666083][ T5349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.670153][ T5349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.715688][T13276] kernel read not supported for file /eth0 (pid: 13276 comm: syz.1.3228) [ 213.717944][ T39] audit: type=1800 audit(1728512060.971:927): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3228" name="eth0" dev="mqueue" ino=41147 res=0 errno=0 [ 213.986014][ T12] veth0_to_bridge: left allmulticast mode [ 213.988763][ T12] veth0_to_bridge: left promiscuous mode [ 213.990427][ T12] bridge0: port 3(veth0_to_bridge) entered disabled state [ 214.000247][ T12] bridge_slave_1: left promiscuous mode [ 214.001802][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.013598][ T12] bridge_slave_0: left allmulticast mode [ 214.015239][ T12] bridge_slave_0: left promiscuous mode [ 214.016759][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.157330][T13305] syz.1.3233[13305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.157391][T13305] syz.1.3233[13305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.160550][T13305] syz.1.3233[13305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 214.186581][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3244'. [ 214.245329][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.443914][ T39] audit: type=1326 audit(1728512061.691:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.451012][ T39] audit: type=1326 audit(1728512061.691:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.459283][ T39] audit: type=1326 audit(1728512061.711:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.467405][ T39] audit: type=1326 audit(1728512061.711:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.467618][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.473447][ T39] audit: type=1326 audit(1728512061.711:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.481720][ T39] audit: type=1326 audit(1728512061.721:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.481858][ T12] bond_slave_0: left promiscuous mode [ 214.489255][ T39] audit: type=1326 audit(1728512061.741:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.495799][ T39] audit: type=1326 audit(1728512061.751:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.2.3237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad4d7dff9 code=0x7ffc0000 [ 214.503935][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.509269][ T12] bond_slave_1: left promiscuous mode [ 214.511989][ T12] bond0 (unregistering): Released all slaves [ 214.517657][T13272] chnl_net:caif_netlink_parms(): no params data found [ 214.540089][T13311] tun0: tun_chr_ioctl cmd 1074025675 [ 214.541541][T13311] tun0: persist enabled [ 214.574267][T13312] tun0: tun_chr_ioctl cmd 1074025675 [ 214.576527][T13312] tun0: persist enabled [ 214.605920][ T12] tipc: Disabling bearer [ 214.610152][ T12] tipc: Left network mode [ 214.897779][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.899813][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.921332][T13272] bridge_slave_0: entered allmulticast mode [ 214.936902][T13272] bridge_slave_0: entered promiscuous mode [ 215.011074][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.013308][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.028752][T13272] bridge_slave_1: entered allmulticast mode [ 215.040168][T13272] bridge_slave_1: entered promiscuous mode [ 215.134791][ T4772] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 215.273925][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.280121][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.284832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.337790][T13272] team0: Port device team_slave_0 added [ 215.369415][ T12] hsr_slave_0: left promiscuous mode [ 215.371437][ T12] hsr_slave_1: left promiscuous mode [ 215.375316][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.378621][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.384312][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.391571][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.449005][ T12] veth1_macvtap: left promiscuous mode [ 215.454310][ T12] veth0_macvtap: left promiscuous mode [ 215.458541][ T12] veth1_vlan: left promiscuous mode [ 215.460403][ T12] veth0_vlan: left promiscuous mode [ 215.533431][T13346] loop4: detected capacity change from 0 to 524287999 [ 215.535614][ C0] blk_print_req_error: 7 callbacks suppressed [ 215.535623][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.539608][ C0] buffer_io_error: 7 callbacks suppressed [ 215.539616][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.545981][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.548352][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.551421][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.553853][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.556232][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.558601][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.560737][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.563338][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.565866][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.568305][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.570584][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.573497][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.577099][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.579711][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.581789][T13346] ldm_validate_partition_table(): Disk read failed. [ 215.583526][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.585974][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.590786][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.593294][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 215.610167][T13346] Dev loop4: unable to read RDB block 0 [ 215.613696][T13346] loop4: unable to read partition table [ 215.615516][T13346] loop_reread_partitions: partition scan of loop4 (3 xC) failed (rc=-5) [ 215.685371][ T4772] Bluetooth: hci1: command tx timeout [ 215.754898][ T5384] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 215.924819][ T5384] usb 6-1: Using ep0 maxpacket: 8 [ 215.927386][ T5384] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.930028][ T5384] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.932527][ T5384] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.935230][ T5384] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.938522][ T5384] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.940821][ T5384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.005718][ T1160] Bluetooth: (null): Invalid header checksum [ 216.007347][ T1160] Bluetooth: (null): Invalid header checksum [ 216.094839][ T5402] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 216.160084][ T5384] usb 6-1: GET_CAPABILITIES returned 0 [ 216.161547][ T5384] usbtmc 6-1:16.0: can't read capabilities [ 216.247717][ T5402] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.250052][ T5402] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.252716][ T5402] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.255151][ T5402] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.257954][ T5402] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 216.262636][ T5402] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.265168][ T5402] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.267157][ T5402] usb 7-1: Product: syz [ 216.268261][ T5402] usb 7-1: Manufacturer: syz [ 216.271500][ T5402] cdc_wdm 7-1:1.0: skipping garbage [ 216.272889][ T5402] cdc_wdm 7-1:1.0: skipping garbage [ 216.274800][ T5402] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 216.276345][ T5402] cdc_wdm 7-1:1.0: Unknown control protocol [ 216.324826][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.366629][ T5384] usb 6-1: USB disconnect, device number 30 [ 216.408672][ T12] team0 (unregistering): Port device team_slave_1 removed [ 216.484417][ T5402] usb 7-1: USB disconnect, device number 21 [ 216.509302][ T12] team0 (unregistering): Port device team_slave_0 removed [ 217.240163][T13272] team0: Port device team_slave_1 added [ 217.271456][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.274484][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.284597][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.292359][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.296584][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.306555][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.360903][T13272] hsr_slave_0: entered promiscuous mode [ 217.363057][T13272] hsr_slave_1: entered promiscuous mode [ 217.364825][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.376882][T13272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.378954][T13272] Cannot create hsr debugfs directory [ 217.795874][ T4772] Bluetooth: hci1: command tx timeout [ 218.029766][T13272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.048675][T13272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.051786][T13272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.054929][T13272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.086849][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.101243][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.110723][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.112943][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.115705][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.117583][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.134514][T13272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.138166][T13272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.206915][ T5402] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.265372][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.284509][T13272] veth0_vlan: entered promiscuous mode [ 218.292391][T13272] veth1_vlan: entered promiscuous mode [ 218.303193][T13272] veth0_macvtap: entered promiscuous mode [ 218.309064][T13272] veth1_macvtap: entered promiscuous mode [ 218.317563][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.320310][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.322819][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.328106][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.330661][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.333330][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.344797][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.347488][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.351066][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.355778][ T5402] usb 5-1: Using ep0 maxpacket: 8 [ 218.359281][ T5402] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.362591][ T5402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.362966][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.368521][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.369015][ T5402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.371036][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.374182][ T5402] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.377300][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.383879][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.386639][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.389159][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.391833][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.392884][ T5402] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.395210][T13272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.401339][T13272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.401400][ T5402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.403620][T13272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.403637][T13272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.403651][T13272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.406739][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.458115][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.462449][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.481420][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.484466][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.626209][ T5402] usb 5-1: GET_CAPABILITIES returned 0 [ 218.627774][ T5402] usbtmc 5-1:16.0: can't read capabilities [ 218.827948][ T5384] usb 5-1: USB disconnect, device number 14 [ 219.292055][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 219.292065][ T39] audit: type=1326 audit(1728512066.541:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.302680][ T39] audit: type=1326 audit(1728512066.541:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.310045][ T39] audit: type=1326 audit(1728512066.541:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.315624][ T39] audit: type=1326 audit(1728512066.541:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.331110][ T39] audit: type=1326 audit(1728512066.541:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.339634][ T39] audit: type=1326 audit(1728512066.541:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.348116][ T39] audit: type=1326 audit(1728512066.541:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.363690][ T39] audit: type=1326 audit(1728512066.541:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13489 comm="syz.3.3289" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 219.427592][T13496] netlink: 'syz.3.3292': attribute type 9 has an invalid length. [ 219.429677][T13496] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.3292'. [ 219.444828][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.446005][ T39] audit: type=1326 audit(1728512066.701:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.0.3293" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56eaf7dff9 code=0x7ffc0000 [ 219.481116][ T39] audit: type=1326 audit(1728512066.701:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.0.3293" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56eaf7dff9 code=0x7ffc0000 [ 219.548835][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'. [ 219.613750][T13516] ADFS-fs (nullb0): unrecognised mount option "" or missing value [ 219.726374][T13528] input: syz0 as /devices/virtual/input/input45 [ 219.844812][ T4772] Bluetooth: hci1: command tx timeout [ 219.983804][T13544] input: syz1 as /devices/virtual/input/input46 [ 220.060869][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 220.135533][ T5383] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 220.294876][ T5383] usb 6-1: Using ep0 maxpacket: 16 [ 220.298404][ T5383] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.304821][ T5383] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 220.308173][ T5383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 220.311093][ T5383] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 220.313947][ T5383] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.319221][ T5383] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 220.321907][ T5383] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.324028][ T5383] usb 6-1: Product: syz [ 220.325629][ T5383] usb 6-1: Manufacturer: syz [ 220.326929][ T5383] usb 6-1: SerialNumber: syz [ 220.331734][ T5383] usb 6-1: config 0 descriptor?? [ 220.484952][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.606038][ T5383] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 220.611087][ T5383] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 220.622411][ T5383] usb 6-1: USB disconnect, device number 31 [ 220.723339][T13578] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.119954][T13605] netlink: 'syz.2.3338': attribute type 9 has an invalid length. [ 221.122724][T13605] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.3338'. [ 221.457604][T13621] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 221.524929][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.749806][T13634] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 221.924836][ T4772] Bluetooth: hci1: command tx timeout [ 222.432930][T13662] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3358'. [ 222.564895][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 223.156200][T13682] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 223.604892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.591962][T13754] binder: 13751:13754 ioctl 4018620d 0 returned -22 [ 224.645756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.664807][T13760] futex_wake_op: syz.1.3403 tries to shift op by -1; fix this program [ 225.512876][T13784] kernel read not supported for file /eth0 (pid: 13784 comm: syz.2.3411) [ 225.526379][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 225.526390][ T39] audit: type=1800 audit(1728512072.771:961): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3411" name="eth0" dev="mqueue" ino=55731 res=0 errno=0 [ 225.587861][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3415'. [ 225.684870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.954814][ T74] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 226.106118][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 226.109193][ T74] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 226.112461][ T74] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.116024][ T74] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.118512][ T74] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.121775][ T74] usb 6-1: config 0 descriptor?? [ 226.123762][T13801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.530017][ T74] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 226.532898][ T74] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 226.536317][ T74] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 226.599996][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'. [ 226.676874][ T5385] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 226.683274][ T5385] hid-generic 0000:0000:0000.0017: hidraw2: HID v0.00 Device [syz0] on syz0 [ 226.724898][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.764912][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.144834][ T74] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 228.804861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 228.935330][ T830] usb 6-1: USB disconnect, device number 32 [ 229.484826][T13842] 9pnet: p9_errstr2errno: server reported unknown error i6rH [ 229.513945][T13849] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 229.516171][T13849] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 229.524061][T13849] vhci_hcd vhci_hcd.0: Device attached [ 229.527385][T13850] vhci_hcd: connection closed [ 229.530062][ T1160] vhci_hcd: stop threads [ 229.532453][ T1160] vhci_hcd: release socket [ 229.533662][ T1160] vhci_hcd: disconnect device [ 229.726845][ T39] audit: type=1400 audit(1728512076.981:962): avc: denied { lock } for pid=13864 comm="syz.0.3447" path="/117/file0/bus" dev="9p" ino=36574792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.844961][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.868256][ T8] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 230.014892][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 230.023452][ T8] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 230.025746][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.029487][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.033025][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 230.036675][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.041217][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.043560][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.270944][ T8] usb 7-1: usb_control_msg returned -32 [ 230.273023][ T8] usbtmc 7-1:16.0: can't read capabilities [ 230.393341][T13882] loop0: detected capacity change from 0 to 7 [ 230.403033][T13882] Dev loop0: unable to read RDB block 7 [ 230.414171][T13882] loop0: AHDI p1 p2 [ 230.417908][T13882] loop0: partition table partially beyond EOD, truncated [ 230.419923][T13882] loop0: p1 start 6514546 is beyond EOD, truncated [ 230.445977][ T39] audit: type=1326 audit(1728512077.701:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.454233][ T39] audit: type=1326 audit(1728512077.701:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.463336][ T39] audit: type=1326 audit(1728512077.701:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.476721][ T39] audit: type=1326 audit(1728512077.701:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.485558][ T39] audit: type=1326 audit(1728512077.701:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.494108][ T39] audit: type=1326 audit(1728512077.701:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.502714][ T39] audit: type=1326 audit(1728512077.701:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.511277][ T39] audit: type=1326 audit(1728512077.701:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13885 comm="syz.3.3456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff599b7dff9 code=0x7ffc0000 [ 230.885163][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.894896][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.993190][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.070218][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.102004][ T5349] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.107185][ T5349] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.110528][ T5349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.114453][ T5349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.117817][ T5349] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 231.120547][ T5349] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.154376][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.237385][ T8] usb 7-1: USB disconnect, device number 22 [ 231.285813][T13930] chnl_net:caif_netlink_parms(): no params data found [ 231.358892][ T12] bridge_slave_1: left allmulticast mode [ 231.360982][ T12] bridge_slave_1: left promiscuous mode [ 231.363154][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.375107][ T12] bridge_slave_0: left allmulticast mode [ 231.377226][ T12] bridge_slave_0: left promiscuous mode [ 231.381133][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.384899][ T5384] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 231.399073][T13938] [ 231.400006][T13938] ====================================================== [ 231.401923][T13938] WARNING: possible circular locking dependency detected [ 231.403725][T13938] 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 Not tainted [ 231.406089][T13938] ------------------------------------------------------ [ 231.409859][T13938] syz.0.3466/13938 is trying to acquire lock: [ 231.411566][T13938] ffff88802edf3258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x6d/0x3b0 [ 231.414531][T13938] [ 231.414531][T13938] but task is already holding lock: [ 231.416415][T13938] ffff88803daad528 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 231.419068][T13938] [ 231.419068][T13938] which lock already depends on the new lock. [ 231.419068][T13938] [ 231.421820][T13938] [ 231.421820][T13938] the existing dependency chain (in reverse order) is: [ 231.424208][T13938] [ 231.424208][T13938] -> #3 (&d->lock#2){+.+.}-{3:3}: [ 231.426153][T13938] __mutex_lock+0x175/0x9c0 [ 231.427556][T13938] __rfcomm_dlc_close+0x235/0x700 [ 231.429251][T13938] rfcomm_dlc_close+0x1eb/0x240 [ 231.430707][T13938] __rfcomm_sock_close+0xa7/0x230 [ 231.432174][T13938] rfcomm_sock_shutdown+0xd5/0x230 [ 231.433663][T13938] rfcomm_sock_release+0x5d/0x140 [ 231.435206][T13938] __sock_release+0xb0/0x270 [ 231.436570][T13938] sock_close+0x1c/0x30 [ 231.437978][T13938] __fput+0x3f6/0xb60 [ 231.439382][T13938] task_work_run+0x14e/0x250 [ 231.440943][T13938] get_signal+0x1ca/0x2770 [ 231.442423][T13938] arch_do_signal_or_restart+0x90/0x7e0 [ 231.444241][T13938] syscall_exit_to_user_mode+0x150/0x2a0 [ 231.446165][T13938] do_syscall_64+0xda/0x250 [ 231.447550][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.449567][T13938] [ 231.449567][T13938] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 231.452226][T13938] __mutex_lock+0x175/0x9c0 [ 231.454078][T13938] rfcomm_dlc_exists+0x5f/0x1a0 [ 231.456101][T13938] rfcomm_dev_ioctl+0x9e6/0x1ca0 [ 231.458054][T13938] rfcomm_sock_ioctl+0xb4/0xe0 [ 231.460092][T13938] sock_do_ioctl+0x116/0x280 [ 231.462024][T13938] sock_ioctl+0x228/0x6c0 [ 231.463887][T13938] __x64_sys_ioctl+0x18f/0x220 [ 231.465819][T13938] do_syscall_64+0xcd/0x250 [ 231.467652][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.469961][T13938] [ 231.469961][T13938] -> #1 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 231.472777][T13938] __mutex_lock+0x175/0x9c0 [ 231.474655][T13938] rfcomm_dev_ioctl+0x905/0x1ca0 [ 231.476626][T13938] rfcomm_sock_ioctl+0xb4/0xe0 [ 231.478625][T13938] sock_do_ioctl+0x116/0x280 [ 231.480468][T13938] sock_ioctl+0x228/0x6c0 [ 231.482275][T13938] __x64_sys_ioctl+0x18f/0x220 [ 231.484344][T13938] do_syscall_64+0xcd/0x250 [ 231.486418][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.488947][T13938] [ 231.488947][T13938] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 231.492427][T13938] __lock_acquire+0x250b/0x3ce0 [ 231.494387][T13938] lock_acquire.part.0+0x11b/0x380 [ 231.496410][T13938] lock_sock_nested+0x3a/0xf0 [ 231.498276][T13938] rfcomm_sk_state_change+0x6d/0x3b0 [ 231.500369][T13938] __rfcomm_dlc_close+0x28c/0x700 [ 231.502400][T13938] rfcomm_dlc_close+0x1eb/0x240 [ 231.504336][T13938] __rfcomm_sock_close+0xa7/0x230 [ 231.506334][T13938] rfcomm_sock_shutdown+0xd5/0x230 [ 231.508350][T13938] rfcomm_sock_release+0x5d/0x140 [ 231.510500][T13938] __sock_release+0xb0/0x270 [ 231.512367][T13938] sock_close+0x1c/0x30 [ 231.514082][T13938] __fput+0x3f6/0xb60 [ 231.515782][T13938] task_work_run+0x14e/0x250 [ 231.517931][T13938] get_signal+0x1ca/0x2770 [ 231.519939][T13938] arch_do_signal_or_restart+0x90/0x7e0 [ 231.522599][T13938] syscall_exit_to_user_mode+0x150/0x2a0 [ 231.525087][T13938] do_syscall_64+0xda/0x250 [ 231.526977][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.529335][T13938] [ 231.529335][T13938] other info that might help us debug this: [ 231.529335][T13938] [ 231.533119][T13938] Chain exists of: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 231.533119][T13938] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_mutex --> &d->lock#2 [ 231.533119][T13938] [ 231.538249][T13938] Possible unsafe locking scenario: [ 231.538249][T13938] [ 231.541270][T13938] CPU0 CPU1 [ 231.543010][T13938] ---- ---- [ 231.544473][T13938] lock(&d->lock#2); [ 231.545555][T13938] lock(rfcomm_mutex); [ 231.547285][T13938] lock(&d->lock#2); [ 231.548979][T13938] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 231.550616][T13938] [ 231.550616][T13938] *** DEADLOCK *** [ 231.550616][T13938] [ 231.553336][T13938] 3 locks held by syz.0.3466/13938: [ 231.555251][T13938] #0: ffff888033860208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 231.558579][T13938] #1: ffffffff90173448 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x33/0x240 [ 231.561029][T13938] #2: ffff88803daad528 (&d->lock#2){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 231.563534][T13938] [ 231.563534][T13938] stack backtrace: [ 231.565080][T13938] CPU: 0 UID: 0 PID: 13938 Comm: syz.0.3466 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 231.567844][T13938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.570642][T13938] Call Trace: [ 231.571521][T13938] [ 231.572298][T13938] dump_stack_lvl+0x116/0x1f0 [ 231.573573][T13938] print_circular_bug+0x41c/0x610 [ 231.574902][T13938] check_noncircular+0x31a/0x400 [ 231.576222][T13938] ? __pfx_check_noncircular+0x10/0x10 [ 231.577668][T13938] ? lockdep_lock+0xc6/0x200 [ 231.578887][T13938] ? __pfx_lockdep_lock+0x10/0x10 [ 231.580211][T13938] ? __pfx_bpf_trace_run2+0x10/0x10 [ 231.581586][T13938] __lock_acquire+0x250b/0x3ce0 [ 231.582866][T13938] ? __pfx___lock_acquire+0x10/0x10 [ 231.584218][T13938] ? __mutex_trylock_common+0xea/0x250 [ 231.585656][T13938] ? __pfx___mutex_trylock_common+0x10/0x10 [ 231.587191][T13938] ? __rfcomm_dlc_close+0x235/0x700 [ 231.588560][T13938] lock_acquire.part.0+0x11b/0x380 [ 231.589914][T13938] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 231.591336][T13938] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 231.592804][T13938] ? rcu_is_watching+0x12/0xc0 [ 231.594086][T13938] ? trace_lock_acquire+0x14a/0x1d0 [ 231.595625][T13938] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 231.597135][T13938] ? lock_acquire+0x2f/0xb0 [ 231.598330][T13938] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 231.599751][T13938] lock_sock_nested+0x3a/0xf0 [ 231.600980][T13938] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 231.602415][T13938] rfcomm_sk_state_change+0x6d/0x3b0 [ 231.603793][T13938] __rfcomm_dlc_close+0x28c/0x700 [ 231.605118][T13938] rfcomm_dlc_close+0x1eb/0x240 [ 231.606407][T13938] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.607966][T13938] __rfcomm_sock_close+0xa7/0x230 [ 231.609363][T13938] rfcomm_sock_shutdown+0xd5/0x230 [ 231.610753][T13938] rfcomm_sock_release+0x5d/0x140 [ 231.612123][T13938] __sock_release+0xb0/0x270 [ 231.613402][T13938] ? __pfx_sock_close+0x10/0x10 [ 231.614677][T13938] sock_close+0x1c/0x30 [ 231.615780][T13938] __fput+0x3f6/0xb60 [ 231.616832][T13938] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.618211][T13938] task_work_run+0x14e/0x250 [ 231.619430][T13938] ? __pfx_task_work_run+0x10/0x10 [ 231.620765][T13938] get_signal+0x1ca/0x2770 [ 231.621941][T13938] ? __pfx_task_work_add+0x10/0x10 [ 231.623274][T13938] ? __pfx_get_signal+0x10/0x10 [ 231.624549][T13938] arch_do_signal_or_restart+0x90/0x7e0 [ 231.625999][T13938] ? __pfx___sys_connect+0x10/0x10 [ 231.627340][T13938] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 231.628940][T13938] ? rcu_is_watching+0x12/0xc0 [ 231.630211][T13938] syscall_exit_to_user_mode+0x150/0x2a0 [ 231.631674][T13938] do_syscall_64+0xda/0x250 [ 231.632975][T13938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.634555][T13938] RIP: 0033:0x7f56eaf7dff9 [ 231.635729][T13938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.640787][T13938] RSP: 002b:00007f56ebe55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 231.643130][T13938] RAX: fffffffffffffffc RBX: 00007f56eb135f80 RCX: 00007f56eaf7dff9 [ 231.645192][T13938] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000007 [ 231.647513][T13938] RBP: 00007f56eaff0296 R08: 0000000000000000 R09: 0000000000000000 [ 231.650072][T13938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.652308][T13938] R13: 0000000000000000 R14: 00007f56eb135f80 R15: 00007ffe86d6e5c8 [ 231.654765][T13938] [ 231.924905][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.926152][ T5384] usb 6-1: device not accepting address 33, error -71 [ 232.054331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.059158][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.063320][ T12] bond0 (unregistering): Released all slaves [ 232.068176][T13930] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 232.087056][T11966] bridge0: port 3(syz_tun) entered disabled state [ 232.112100][T11966] syz_tun (unregistering): left allmulticast mode [ 232.114469][T11966] syz_tun (unregistering): left promiscuous mode [ 232.125701][T11966] bridge0: port 3(syz_tun) entered disabled state [ 232.391327][ T12] hsr_slave_0: left promiscuous mode [ 232.393252][ T12] hsr_slave_1: left promiscuous mode [ 232.395551][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.397600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.400629][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.402602][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.406071][ T12] veth1_macvtap: left promiscuous mode [ 232.407545][ T12] veth0_macvtap: left promiscuous mode [ 232.409419][ T12] veth1_vlan: left promiscuous mode [ 232.410929][ T12] veth0_vlan: left promiscuous mode [ 232.705808][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.767546][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.964837][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.417288][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.468083][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.536517][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.576974][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.687942][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.739429][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.787778][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.858751][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.994646][ T12] bridge_slave_1: left allmulticast mode [ 233.996298][ T12] bridge_slave_1: left promiscuous mode [ 233.997817][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.001324][ T12] bridge_slave_0: left allmulticast mode [ 234.002830][ T12] bridge_slave_0: left promiscuous mode [ 234.004360][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.006401][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.017382][ T12] bridge_slave_1: left allmulticast mode [ 234.018917][ T12] bridge_slave_1: left promiscuous mode [ 234.020479][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.023347][ T12] bridge_slave_0: left allmulticast mode [ 234.025072][ T12] bridge_slave_0: left promiscuous mode [ 234.026450][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.356048][ T12] bond0 (unregistering): Released all slaves [ 234.363547][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.367615][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.370494][ T12] bond0 (unregistering): Released all slaves [ 234.377014][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.380207][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.383121][ T12] bond0 (unregistering): Released all slaves [ 234.416372][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 234.416383][ T39] audit: type=1400 audit(1728512081.671:973): avc: denied { sys_chroot } for pid=14026 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 234.423317][ T39] audit: type=1400 audit(1728512081.671:974): avc: denied { setgid } for pid=14026 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 234.428751][ T39] audit: type=1400 audit(1728512081.671:975): avc: denied { setrlimit } for pid=14026 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 234.826485][ T12] hsr_slave_0: left promiscuous mode [ 234.828395][ T12] hsr_slave_1: left promiscuous mode [ 234.830244][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.832309][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.834621][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.837549][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.894683][ T12] hsr_slave_0: left promiscuous mode [ 234.897578][ T12] hsr_slave_1: left promiscuous mode [ 234.899465][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.901455][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.903633][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.905650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.909906][ T12] veth1_macvtap: left promiscuous mode [ 234.911413][ T12] veth0_macvtap: left promiscuous mode [ 234.912832][ T12] veth1_vlan: left promiscuous mode [ 234.914252][ T12] veth0_vlan: left promiscuous mode [ 234.916546][ T12] veth1_macvtap: left promiscuous mode [ 234.918024][ T12] veth0_macvtap: left promiscuous mode [ 234.919798][ T12] veth1_vlan: left promiscuous mode [ 234.921290][ T12] veth0_vlan: left promiscuous mode [ 235.044850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.103177][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.163785][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.591610][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.646770][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.094823][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.124836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.164882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 239.204874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.244877][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 241.284897][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available VM DIAGNOSIS: 22:14:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850a76b5 RDI=ffffffff9aae3b40 RBP=ffffffff9aae3b00 RSP=ffffc9000348f1c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000036 R14=ffffffff850a7650 R15=0000000000000000 RIP=ffffffff850a76df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f56ebe556c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff01ac67d60 CR3=0000000021e32000 CR4=00352ef0 DR0=0000000000000400 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=000000007ffbffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc839331f0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d98df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d98df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d98df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d98df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d98df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2d98df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000468 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000000000 0000000000000000 0000000000000468 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000004 RBX=ffff8880278d7c84 RCX=ffffffff816b1e7d RDX=0000000000000000 RSI=0000000000000004 RDI=ffffc9000442f648 RBP=0000000000001e42 RSP=ffffc9000442f6d8 R8 =0000000000000001 R9 =fffff52000885ec9 R10=0000000000000003 R11=00000000000a4012 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=ffffffff9a84d820 RIP=ffffffff81f82e62 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f472168ed00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055be03cbd000 CR3=00000000126f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=1563c6ef1563c6ef 1563c6ef1563c6ef 1563c6ef1563c6ef 1563c6ef1563c6ef 1563c6ef1563c6ef 1563c6ef1563c6ef 1563c6ef1563c6ef 1563c6ef1563c6ef ZMM22=f197d66cf197d66c f197d66cf197d66c f197d66cf197d66c f197d66cf197d66c f197d66cf197d66c f197d66cf197d66c f197d66cf197d66c f197d66cf197d66c ZMM23=7feef43d7feef43d 7feef43d7feef43d 7feef43d7feef43d 7feef43d7feef43d 7feef43d7feef43d 7feef43d7feef43d 7feef43d7feef43d 7feef43d7feef43d ZMM24=45f3331445f33314 45f3331445f33314 45f3331445f33314 45f3331445f33314 45f3331445f33314 45f3331445f33314 45f3331445f33314 45f3331445f33314 ZMM25=d0efa2cbd0efa2cb d0efa2cbd0efa2cb d0efa2cbd0efa2cb d0efa2cbd0efa2cb d0efa2cbd0efa2cb d0efa2cbd0efa2cb d0efa2cbd0efa2cb d0efa2cbd0efa2cb ZMM26=334a3d4f334a3d4f 334a3d4f334a3d4f 334a3d4f334a3d4f 334a3d4f334a3d4f 334a3d4f334a3d4f 334a3d4f334a3d4f 334a3d4f334a3d4f 334a3d4f334a3d4f ZMM27=59de6edb59de6edb 59de6edb59de6edb 59de6edb59de6edb 59de6edb59de6edb 59de6edb59de6edb 59de6edb59de6edb 59de6edb59de6edb 59de6edb59de6edb ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9915000099150000 9915000099150000 9915000099150000 9915000099150000 9915000099150000 9915000099150000 9915000099150000 9915000099150000 info registers vcpu 2 CPU#2 RAX=ffff88806a845c30 RBX=0000000000000cc0 RCX=ffffffff8203c17c RDX=00000000ffffffff RSI=0000000000000cc0 RDI=ffff888100089cc0 RBP=ffffc900032bfd08 RSP=ffffc900032bfcb8 R8 =0000000000001000 R9 =fffffbfff20be600 R10=ffffffff905f37cf R11=0000000000000000 R12=ffff888100089cc0 R13=0000000000000cc0 R14=0000000000001000 R15=00000000f20be600 RIP=ffffffff81e43870 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe5320fe000 CR3=0000000011df2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 000000000000ff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff00ffffffff 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffffea0000dc0000 RCX=ffffffff8b14e6f4 RDX=ffff88805b2aa440 RSI=0000000000000000 RDI=0000000000000001 RBP=ffffc9000560f478 RSP=ffffc9000560f408 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000006 R11=0000000000000000 R12=0000000000000006 R13=ffff88803394f700 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b14e6f4 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0d115546c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020011000 CR3=0000000023ae0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4df1133 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4df1140 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4df113a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4df114e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4df11d4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4df12b2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4f0b488 00007f3ad4f0b480 00007f3ad4f0b478 00007f3ad4f0b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad5a6d100 00007f3ad4f0b440 00007f3ad4f0b458 00007f3ad4f0b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3ad4f0b498 00007f3ad4f0b490 00007f3ad4f0b488 00007f3ad4f0b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000