last executing test programs: 58.380042837s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 48.013301458s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 38.110487524s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 26.383660349s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 16.292506264s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 6.41337401s ago: executing program 3 (id=1661): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 5.830566433s ago: executing program 0 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 4.024058009s ago: executing program 3 (id=1666): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080010000000000b47c17"], 0x48}}, 0x0) 3.889929193s ago: executing program 3 (id=1669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r1, 0x401, 0x0, r1}) 3.677580559s ago: executing program 3 (id=1671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r3, r2, 0x7, 0x0, @void}, 0x10) 3.498569432s ago: executing program 3 (id=1673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.39951316s ago: executing program 3 (id=1674): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x8, 0x5, 0x490, 0x1e0, 0xf0, 0xffffffff, 0x1e0, 0x0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x9, @ipv4=@private=0xa010101, @ipv6=@empty, @port=0x4e23, @port=0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @gre_key=0x1}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff], [], 'wg1\x00', 'ip6gre0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@broadcast, @gre_key=0x1, @gre_key=0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0x0, 0x0, 0xff000000], 'lo\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 2.831201996s ago: executing program 2 (id=1682): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9da}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 2.718142135s ago: executing program 2 (id=1683): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) close_range(r0, 0xffffffffffffffff, 0x0) 2.580777116s ago: executing program 2 (id=1686): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) 1.819220559s ago: executing program 1 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000200)={0xc0, 0x0, 0x1000}) prlimit64(0x0, 0x7, &(0x7f0000000dc0), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.641995446s ago: executing program 1 (id=1697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) 1.419351803s ago: executing program 4 (id=1698): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback={0xfec0ffff00000000}, 0xa}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 1.376380094s ago: executing program 4 (id=1699): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.348917114s ago: executing program 1 (id=1700): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200000007"], 0x1086c0) 1.238313789s ago: executing program 1 (id=1701): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000014006002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x40}}, 0x0) 583.620755ms ago: executing program 4 (id=1702): r0 = fanotify_init(0x0, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x48001018, r1, 0x0) fanotify_mark(r0, 0x1, 0x103b, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x808040, 0x10) 460.826721ms ago: executing program 1 (id=1703): unshare(0x2040400) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) 411.907657ms ago: executing program 4 (id=1704): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x47f6, 0x880e, 0x0, 0x0, 0x0) 321.455809ms ago: executing program 1 (id=1705): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000400)="800034ca269bb23c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) read(r0, &(0x7f00000000c0)=""/123, 0x7b) 287.654688ms ago: executing program 2 (id=1706): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) socket$packet(0x11, 0x3, 0x300) setrlimit(0x8, &(0x7f0000000080)) mlockall(0x2) 192.857582ms ago: executing program 4 (id=1707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 144.433797ms ago: executing program 2 (id=1708): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r3 = pidfd_getfd(r1, r2, 0x0) readlinkat(r3, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) 63.938962ms ago: executing program 4 (id=1709): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0, 0x2010}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 0s ago: executing program 2 (id=1710): syz_open_dev$radio(&(0x7f0000000280), 0x1, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x80, 0x80000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 152.741669][ T9140] bridge_slave_1: entered promiscuous mode [ 152.802938][ T9140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.836151][ T9140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.904524][ T9140] team0: Port device team_slave_0 added [ 152.938554][ T9140] team0: Port device team_slave_1 added [ 152.985822][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.014690][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.044622][ T9140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.063853][ T9140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.071597][ T9140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.099385][ T9140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.170573][ T5867] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.193231][ T9140] hsr_slave_0: entered promiscuous mode [ 153.200787][ T9140] hsr_slave_1: entered promiscuous mode [ 153.309700][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'. [ 153.343002][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 153.358571][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 153.389252][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.421601][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 153.445576][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.463984][ T5867] usb 2-1: Product: syz [ 153.474088][ T29] audit: type=1400 audit(1739063087.214:439): avc: denied { bind } for pid=9265 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.493831][ T5867] usb 2-1: Manufacturer: syz [ 153.498448][ T5867] usb 2-1: SerialNumber: syz [ 153.534062][ T5867] usb 2-1: config 0 descriptor?? [ 153.554876][ T5867] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 153.584013][ T5867] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 154.080587][ T9296] »»»»»» speed is unknown, defaulting to 1000 [ 154.206749][ T5867] em28xx 2-1:0.0: unknown em28xx chip ID (110) [ 154.276458][ T9140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.290516][ T5824] Bluetooth: hci3: command tx timeout [ 154.304777][ T9302] ip6gretap0: entered promiscuous mode [ 154.329959][ T9302] batadv_slave_0: entered promiscuous mode [ 154.349804][ T9302] ip6gretap0: left promiscuous mode [ 154.375993][ T9302] batadv_slave_0: left promiscuous mode [ 154.402173][ T9140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.420003][ T5867] em28xx 2-1:0.0: Config register raw data: 0x6e [ 154.426380][ T5867] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 154.442108][ T9140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.445627][ T5867] em28xx 2-1:0.0: No AC97 audio processor [ 154.480945][ T9140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.626708][ T5867] usb 2-1: USB disconnect, device number 10 [ 154.763485][ T9140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.816162][ T9140] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.832651][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.839741][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.888314][ T9296] lo: entered promiscuous mode [ 154.900559][ T9296] tunl0: entered promiscuous mode [ 154.906207][ T9296] gre0: entered promiscuous mode [ 154.913457][ T29] audit: type=1400 audit(1739063088.654:440): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.947219][ T9296] gretap0: entered promiscuous mode [ 154.954742][ T9296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 154.959772][ T29] audit: type=1400 audit(1739063088.674:441): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.994813][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.999627][ T29] audit: type=1400 audit(1739063088.674:442): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.001934][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.073169][ T9140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.088872][ T9140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.480024][ T5907] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 155.519651][ T9140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.554253][ T29] audit: type=1400 audit(1739063089.294:443): avc: denied { read write } for pid=9354 comm="syz.4.1028" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.600967][ T9140] veth0_vlan: entered promiscuous mode [ 155.652705][ T29] audit: type=1400 audit(1739063089.294:444): avc: denied { open } for pid=9354 comm="syz.4.1028" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.658959][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 155.683896][ T9140] veth1_vlan: entered promiscuous mode [ 155.716329][ T9361] input: syz0 as /devices/virtual/input/input19 [ 155.751062][ T5907] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.767498][ T5907] usb 2-1: config 0 has no interface number 0 [ 155.785955][ T5907] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.822836][ T9140] veth0_macvtap: entered promiscuous mode [ 155.841007][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.869463][ T5907] usb 2-1: Product: syz [ 155.873674][ T5907] usb 2-1: Manufacturer: syz [ 155.878280][ T5907] usb 2-1: SerialNumber: syz [ 155.894679][ T9140] veth1_macvtap: entered promiscuous mode [ 155.917313][ T5907] usb 2-1: config 0 descriptor?? [ 155.937740][ T5907] smsc95xx v2.0.0 [ 155.959544][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.995001][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.041355][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.069408][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.087439][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.108361][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.114470][ T9381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.120885][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.147160][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.172125][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.243918][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.269188][ T5867] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.287502][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.318595][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.347701][ T5907] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 156.361415][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.383137][ T5824] Bluetooth: hci3: command tx timeout [ 156.389392][ T5907] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.409475][ T9140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.439073][ T9140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.449308][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 156.456347][ T9140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.464148][ T5867] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 156.483883][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.493784][ T9140] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.524697][ T5867] usb 5-1: Product: syz [ 156.529551][ T5867] usb 5-1: Manufacturer: syz [ 156.534168][ T5867] usb 5-1: SerialNumber: syz [ 156.541514][ T9140] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.559183][ T9140] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.559881][ T5867] usb 5-1: config 0 descriptor?? [ 156.578669][ T9140] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.749537][ T330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.772150][ T330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.819380][ T5867] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 156.827143][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.848251][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.860021][ T5907] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 156.875480][ T5907] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 156.904476][ T5907] usb 2-1: USB disconnect, device number 11 [ 157.079137][ T901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.230691][ T901] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 157.252023][ T901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.263955][ T901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.289113][ T901] usb 4-1: SerialNumber: syz [ 157.623593][ T5867] gspca_sunplus: reg_w_riv err -71 [ 157.634862][ T5867] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 157.644027][ T9426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.651305][ T5867] usb 5-1: USB disconnect, device number 10 [ 157.800105][ T29] audit: type=1400 audit(1739063091.534:445): avc: denied { read write } for pid=9427 comm="syz.1.1047" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 157.861975][ T29] audit: type=1400 audit(1739063091.564:446): avc: denied { open } for pid=9427 comm="syz.1.1047" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 158.011555][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.050899][ T901] cdc_ether 4-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 158.281971][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.334669][ T901] usb 4-1: USB disconnect, device number 14 [ 158.349990][ T901] cdc_ether 4-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 158.506400][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.606431][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.708685][ T35] bridge_slave_1: left allmulticast mode [ 158.717569][ T35] bridge_slave_1: left promiscuous mode [ 158.723937][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.732078][ T35] bridge_slave_0: left allmulticast mode [ 158.737709][ T35] bridge_slave_0: left promiscuous mode [ 158.743669][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.030587][ T29] audit: type=1400 audit(1739063092.764:447): avc: denied { bind } for pid=9463 comm="syz.1.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.227254][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.263373][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.297714][ T35] bond0 (unregistering): Released all slaves [ 159.389091][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.399937][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.408960][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.425128][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.436974][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.447452][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.488088][ T9478] »»»»»» speed is unknown, defaulting to 1000 [ 159.983548][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 160.006551][ T35] hsr_slave_0: left promiscuous mode [ 160.036798][ T35] hsr_slave_1: left promiscuous mode [ 160.049786][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.057351][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.067946][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.078861][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.103919][ T35] veth1_macvtap: left promiscuous mode [ 160.109928][ T35] veth0_macvtap: left promiscuous mode [ 160.130493][ T35] veth1_vlan: left promiscuous mode [ 160.135824][ T35] veth0_vlan: left promiscuous mode [ 160.687355][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033dd3800: rx timeout, send abort [ 160.697478][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888033dd3800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.776634][ T35] team0 (unregistering): Port device team_slave_1 removed [ 160.824144][ T35] team0 (unregistering): Port device team_slave_0 removed [ 161.136499][ T1201] IPVS: starting estimator thread 0... [ 161.232210][ T9542] IPVS: using max 33 ests per chain, 79200 per kthread [ 161.327206][ T9513] »»»»»» speed is unknown, defaulting to 1000 [ 161.379826][ T9551] IPVS: stopping master sync thread 9552 ... [ 161.379875][ T9552] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 161.491402][ T5820] Bluetooth: hci3: command tx timeout [ 161.552877][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.560550][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.567721][ T9478] bridge_slave_0: entered allmulticast mode [ 161.576214][ T9478] bridge_slave_0: entered promiscuous mode [ 161.583808][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.591454][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.598863][ T9478] bridge_slave_1: entered allmulticast mode [ 161.607093][ T9478] bridge_slave_1: entered promiscuous mode [ 161.785829][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.811686][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 161.835879][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.961355][ T9580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9580 comm=syz.3.1087 [ 161.974022][ T29] audit: type=1400 audit(1739063095.704:448): avc: denied { watch watch_reads } for pid=9579 comm="syz.4.1086" path="/proc/603/smaps" dev="proc" ino=27567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 162.016195][ T9478] team0: Port device team_slave_0 added [ 162.078913][ T9478] team0: Port device team_slave_1 added [ 162.135092][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.159189][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.207245][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.253232][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.269172][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.303317][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.306786][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 162.379148][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 162.460560][ T9478] hsr_slave_0: entered promiscuous mode [ 162.467008][ T9478] hsr_slave_1: entered promiscuous mode [ 162.701708][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 162.751637][ T29] audit: type=1400 audit(1739063096.494:449): avc: denied { write } for pid=901 comm="kworker/1:2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27622 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.901358][ T29] audit: type=1400 audit(1739063096.634:450): avc: denied { create } for pid=9627 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.979849][ T29] audit: type=1400 audit(1739063096.714:451): avc: denied { read } for pid=9627 comm="syz.2.1101" path="socket:[28318]" dev="sockfs" ino=28318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 163.171034][ T9631] »»»»»» speed is unknown, defaulting to 1000 [ 163.513362][ T29] audit: type=1400 audit(1739063097.254:452): avc: denied { write } for pid=9656 comm="syz.2.1108" name="file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.531195][ T9478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.550168][ T9478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.559198][ T5907] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 163.581850][ T9478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.582747][ T5820] Bluetooth: hci3: command tx timeout [ 163.602570][ T29] audit: type=1400 audit(1739063097.254:453): avc: denied { open } for pid=9656 comm="syz.2.1108" path="/261/file0" dev="tmpfs" ino=1358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.667263][ T9478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.735901][ T9633] geneve2: entered promiscuous mode [ 163.738445][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.759849][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.769119][ T29] audit: type=1400 audit(1739063097.504:454): avc: denied { write } for pid=9663 comm="syz.4.1109" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 163.781711][ T5907] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 163.802363][ T9633] geneve2: entered allmulticast mode [ 163.831219][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.875868][ T5907] usb 2-1: config 0 descriptor?? [ 163.898206][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.934446][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.947100][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.954299][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.973084][ T3915] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.980289][ T3915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.630116][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.729842][ T9478] veth0_vlan: entered promiscuous mode [ 164.751570][ T9478] veth1_vlan: entered promiscuous mode [ 164.820623][ T9478] veth0_macvtap: entered promiscuous mode [ 164.838118][ T9478] veth1_macvtap: entered promiscuous mode [ 164.891417][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.911870][ T5868] usb 2-1: USB disconnect, device number 12 [ 164.920890][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.956785][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.968787][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.979208][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.994315][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.004660][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.015831][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.027141][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.092368][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.116144][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.140197][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.151033][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.161634][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.172891][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.184391][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.211467][ T9478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.235942][ T9478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.249097][ T9478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.257822][ T9478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.491375][ T3915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.527446][ T3915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.608026][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.634943][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.649623][ T5820] Bluetooth: hci3: command tx timeout [ 165.876777][ T9747] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.083182][ T330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.611567][ T330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.952688][ T330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.023516][ T330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.101317][ T29] audit: type=1400 audit(1739063101.844:455): avc: denied { ioctl } for pid=9818 comm="syz.4.1148" path="socket:[29766]" dev="sockfs" ino=29766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 168.125833][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.133045][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 168.325406][ T330] bridge_slave_1: left allmulticast mode [ 168.352946][ T330] bridge_slave_1: left promiscuous mode [ 168.358659][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.479436][ T330] bridge_slave_0: left allmulticast mode [ 168.485245][ T330] bridge_slave_0: left promiscuous mode [ 168.502747][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.583542][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.603258][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.613886][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.623021][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.638159][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.645854][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.010163][ T29] audit: type=1400 audit(1739063102.744:456): avc: denied { getopt } for pid=9866 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.373234][ T9881] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1163'. [ 169.453012][ T330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.463601][ T330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.473655][ T330] bond0 (unregistering): Released all slaves [ 169.540784][ T9847] »»»»»» speed is unknown, defaulting to 1000 [ 169.704285][ T29] audit: type=1400 audit(1739063103.434:457): avc: denied { write } for pid=9889 comm="syz.1.1168" path="socket:[30087]" dev="sockfs" ino=30087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.950864][ T9903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1172'. [ 169.980591][ T9909] sock: sock_set_timeout: `syz.1.1175' (pid 9909) tries to set negative timeout [ 170.212519][ T9924] netlink: 'syz.4.1178': attribute type 1 has an invalid length. [ 170.382806][ T330] hsr_slave_0: left promiscuous mode [ 170.398025][ T330] hsr_slave_1: left promiscuous mode [ 170.408085][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.426917][ T330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.462887][ T330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.486359][ T330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.517283][ T29] audit: type=1400 audit(1739063104.254:458): avc: denied { mount } for pid=9940 comm="syz.1.1184" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 170.521797][ T330] veth1_macvtap: left promiscuous mode [ 170.538868][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.552015][ T330] veth0_macvtap: left promiscuous mode [ 170.562454][ T330] veth1_vlan: left promiscuous mode [ 170.580086][ T330] veth0_vlan: left promiscuous mode [ 170.599977][ T29] audit: type=1400 audit(1739063104.344:459): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 170.619624][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.699678][ T5820] Bluetooth: hci3: command tx timeout [ 171.145045][ T330] team0 (unregistering): Port device team_slave_1 removed [ 171.191595][ T330] team0 (unregistering): Port device team_slave_0 removed [ 171.642990][ T9847] chnl_net:caif_netlink_parms(): no params data found [ 171.932247][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.941934][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.949580][ T9847] bridge_slave_0: entered allmulticast mode [ 171.956301][ T9847] bridge_slave_0: entered promiscuous mode [ 171.963938][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.971388][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.978541][ T9847] bridge_slave_1: entered allmulticast mode [ 172.005595][ T9847] bridge_slave_1: entered promiscuous mode [ 172.027032][ T9990] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1202'. [ 172.122782][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.159241][T10000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1204'. [ 172.191500][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.445287][ T9847] team0: Port device team_slave_0 added [ 172.484402][ T9847] team0: Port device team_slave_1 added [ 172.563034][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.573445][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.616658][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.636453][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.645037][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.670972][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.689833][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.770718][ T5820] Bluetooth: hci3: command tx timeout [ 172.838545][ T9847] hsr_slave_0: entered promiscuous mode [ 172.845149][ T9847] hsr_slave_1: entered promiscuous mode [ 173.658777][ T9847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.684469][T10068] 9pnet: p9_errstr2errno: server reported unknown error @ķĪ’0x0000000000000004 [ 173.696801][ T9847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.704491][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 173.726417][T10071] gretap0: entered promiscuous mode [ 173.734240][T10071] macvtap1: entered promiscuous mode [ 173.743211][T10071] macvtap1: entered allmulticast mode [ 173.748666][T10071] gretap0: entered allmulticast mode [ 173.766083][ T9847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.788474][ T9847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.948702][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.004828][ T9847] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.054499][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.061643][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.091553][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.098660][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.222913][ T29] audit: type=1400 audit(1739063107.934:460): avc: denied { write } for pid=10097 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.568506][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.640970][ T9847] veth0_vlan: entered promiscuous mode [ 174.674480][ T9847] veth1_vlan: entered promiscuous mode [ 174.729263][ T5907] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.774690][ T9847] veth0_macvtap: entered promiscuous mode [ 174.801094][ T9847] veth1_macvtap: entered promiscuous mode [ 174.835759][ T29] audit: type=1400 audit(1739063108.574:461): avc: denied { mounton } for pid=10130 comm="syz.2.1240" path="/proc/669/cgroup" dev="proc" ino=30542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 174.851998][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.870517][ T5820] Bluetooth: hci3: command tx timeout [ 174.901436][ T29] audit: type=1400 audit(1739063108.614:462): avc: denied { create } for pid=10133 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 174.905797][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.930953][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.941564][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.951948][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.962847][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.973148][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.984287][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.994768][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.999676][ T29] audit: type=1400 audit(1739063108.614:463): avc: denied { ioctl } for pid=10133 comm="syz.1.1241" path="socket:[30547]" dev="sockfs" ino=30547 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.005265][ T5907] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 175.048436][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.058015][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.075164][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.084350][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.099727][ T5907] usb 5-1: config 0 descriptor?? [ 175.104918][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.120742][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.137878][ T9847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.158890][ T9847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.190858][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.214667][ T9847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.253842][ T9847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.274612][ T29] audit: type=1400 audit(1739063109.014:464): avc: denied { name_bind } for pid=10145 comm="syz.3.1244" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 175.277899][ T9847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.369840][ T9847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.458251][ T5907] usb 5-1: USB disconnect, device number 11 [ 175.560711][ T330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.568566][ T330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.615844][ T330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.640425][ T330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.432532][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 176.526363][T10233] overlay: filesystem on ./bus not supported as upperdir [ 176.638567][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 176.652679][ T29] audit: type=1400 audit(1739063110.394:465): avc: denied { sqpoll } for pid=10239 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.690087][ T29] audit: type=1400 audit(1739063110.424:466): avc: denied { bind } for pid=10239 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 176.724654][ T29] audit: type=1400 audit(1739063110.424:467): avc: denied { listen } for pid=10239 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.096330][ T29] audit: type=1400 audit(1739063110.834:468): avc: denied { create } for pid=10264 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.128456][ T29] audit: type=1400 audit(1739063110.834:469): avc: denied { setopt } for pid=10264 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 177.198675][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.984736][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.188187][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.232114][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.313094][ T11] bridge_slave_1: left allmulticast mode [ 178.318777][ T11] bridge_slave_1: left promiscuous mode [ 178.327199][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.390022][ T11] bridge_slave_0: left allmulticast mode [ 178.395729][ T11] bridge_slave_0: left promiscuous mode [ 178.420532][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 178.429207][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.462907][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 178.730106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.738638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.832196][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.839674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.855022][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.877055][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.902817][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.910088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.920008][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.934735][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.939269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 178.959480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 178.968161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.094985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 179.159497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 179.384338][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 179.384352][ T29] audit: type=1400 audit(1739063113.134:471): avc: denied { read write } for pid=10304 comm="syz.2.1287" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.409659][ T5869] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 179.421492][ T29] audit: type=1400 audit(1739063113.134:472): avc: denied { open } for pid=10304 comm="syz.2.1287" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.444499][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.451893][ T29] audit: type=1400 audit(1739063113.134:473): avc: denied { map } for pid=10304 comm="syz.2.1287" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.474814][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.482472][ T29] audit: type=1400 audit(1739063113.134:474): avc: denied { execute } for pid=10304 comm="syz.2.1287" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.538459][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.547171][ T51] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 179.562455][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.573894][ T11] bond0 (unregistering): Released all slaves [ 179.581391][ T5869] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 179.589991][ T5869] usb 4-1: config 0 has no interface number 0 [ 179.618767][ T5869] usb 4-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 179.637380][T10284] »»»»»» speed is unknown, defaulting to 1000 [ 179.650650][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.673570][ T5869] usb 4-1: Product: syz [ 179.677774][ T5869] usb 4-1: Manufacturer: syz [ 179.710023][ T5869] usb 4-1: SerialNumber: syz [ 179.710358][ T51] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.719714][ T5869] usb 4-1: config 0 descriptor?? [ 179.760477][ T5869] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 179.765764][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.768338][ T5869] dvb-usb: bulk message failed: -22 (4/0) [ 179.841372][ T51] usb 5-1: config 0 descriptor?? [ 179.843344][ T5869] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 179.861605][ T51] cp210x 5-1:0.0: cp210x converter detected [ 179.895340][ T5869] dvb-usb: bulk message failed: -22 (5/0) [ 179.905290][ T5869] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 179.976872][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.988711][ T29] audit: type=1400 audit(1739063113.734:475): avc: denied { ioctl } for pid=10317 comm="syz.1.1290" path="socket:[32852]" dev="sockfs" ino=32852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.002369][ T5869] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0) [ 180.013398][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.043093][ T5869] usb 4-1: media controller created [ 180.078120][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.183599][ T5869] ttusb2: set interface to alts=3 failed [ 180.272414][ T51] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 180.302544][ T5869] DVB: Unable to find symbol tda10086_attach() [ 180.314386][ T5869] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0' [ 180.339523][ T5869] dvb-usb: bulk message failed: -22 (4/0) [ 180.345295][ T5869] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 180.395964][ T5869] dvb-usb: bulk message failed: -22 (5/0) [ 180.433347][ T5869] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 180.451083][ T11] hsr_slave_0: left promiscuous mode [ 180.470681][ T11] hsr_slave_1: left promiscuous mode [ 180.492901][ T5869] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected. [ 180.508016][ T51] usb 5-1: cp210x converter now attached to ttyUSB0 [ 180.521209][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.548950][ T5869] usb 4-1: USB disconnect, device number 15 [ 180.559941][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.608098][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.647725][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.671551][ T5869] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected. [ 180.738138][ T11] veth1_macvtap: left promiscuous mode [ 180.753177][ T901] usb 5-1: USB disconnect, device number 12 [ 180.765569][ T901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 180.776906][ T11] veth0_macvtap: left promiscuous mode [ 180.791726][ T11] veth1_vlan: left promiscuous mode [ 180.801536][ T901] cp210x 5-1:0.0: device disconnected [ 180.820922][ T11] veth0_vlan: left promiscuous mode [ 181.009595][ T5824] Bluetooth: hci3: command tx timeout [ 181.074314][ T29] audit: type=1400 audit(1739063114.814:476): avc: denied { create } for pid=10355 comm="syz.2.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 181.106068][ T29] audit: type=1400 audit(1739063114.814:477): avc: denied { write } for pid=10355 comm="syz.2.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 181.373507][ T11] team0 (unregistering): Port device team_slave_1 removed [ 181.412420][ T11] team0 (unregistering): Port device team_slave_0 removed [ 181.911577][T10284] chnl_net:caif_netlink_parms(): no params data found [ 182.157557][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.158803][ T29] audit: type=1400 audit(1739063115.894:478): avc: denied { ioctl } for pid=10382 comm="syz.3.1312" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 182.175101][T10284] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.202876][T10284] bridge_slave_0: entered allmulticast mode [ 182.211483][T10284] bridge_slave_0: entered promiscuous mode [ 182.219124][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.226264][T10284] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.234115][T10284] bridge_slave_1: entered allmulticast mode [ 182.248527][T10284] bridge_slave_1: entered promiscuous mode [ 182.259179][ T901] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.327671][T10284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.358855][T10284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.442292][ T901] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 182.459689][ T901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.479468][T10284] team0: Port device team_slave_0 added [ 182.489348][T10284] team0: Port device team_slave_1 added [ 182.497856][ T901] usb 3-1: Product: syz [ 182.505727][ T901] usb 3-1: Manufacturer: syz [ 182.514024][ T901] usb 3-1: SerialNumber: syz [ 182.534425][ T901] usb 3-1: config 0 descriptor?? [ 182.546025][T10284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.555928][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.585611][T10284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.614247][T10284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.621894][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.680152][T10284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.715502][T10405] team0: entered promiscuous mode [ 182.724785][T10405] team_slave_0: entered promiscuous mode [ 182.730688][T10405] team_slave_1: entered promiscuous mode [ 182.737773][T10405] batadv_slave_1: entered promiscuous mode [ 182.798017][T10284] hsr_slave_0: entered promiscuous mode [ 182.805148][T10284] hsr_slave_1: entered promiscuous mode [ 183.009663][T10371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.038101][T10371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.090438][ T5824] Bluetooth: hci3: command tx timeout [ 183.093571][ T901] usb 3-1: Firmware: major: 9, minor: 5, hardware type: ATUSB (1) [ 183.241290][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 183.309364][ T901] usb 3-1: failed to fetch extended address, random address set [ 183.375939][ T901] usb 3-1: USB disconnect, device number 8 [ 183.913247][T10284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.004036][T10284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.044663][T10284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.072182][T10284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.248276][T10284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.295165][T10284] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.317358][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.324490][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.366781][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.373947][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.510305][ T29] audit: type=1400 audit(1739063118.244:479): avc: denied { accept } for pid=10490 comm="syz.3.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 184.774867][T10284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.803395][ T29] audit: type=1400 audit(1739063118.544:480): avc: denied { read } for pid=10514 comm="syz.3.1346" path="socket:[33369]" dev="sockfs" ino=33369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.866634][T10284] veth0_vlan: entered promiscuous mode [ 184.888151][T10284] veth1_vlan: entered promiscuous mode [ 184.915492][T10284] veth0_macvtap: entered promiscuous mode [ 184.926498][T10284] veth1_macvtap: entered promiscuous mode [ 184.949823][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.979113][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.988956][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.027297][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.044570][ T29] audit: type=1400 audit(1739063118.784:481): avc: denied { create } for pid=10523 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.049673][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.114164][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.114395][ T29] audit: type=1400 audit(1739063118.794:482): avc: denied { write } for pid=10523 comm="syz.3.1348" path="socket:[33393]" dev="sockfs" ino=33393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.134304][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.169704][ T5824] Bluetooth: hci3: command tx timeout [ 185.191064][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.203283][T10284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.214464][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.225805][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.245360][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.248537][ T29] audit: type=1400 audit(1739063118.794:483): avc: denied { nlmsg_read } for pid=10523 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 185.256581][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.288727][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.299662][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.311558][T10284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.315935][ T29] audit: type=1400 audit(1739063118.984:484): avc: denied { read } for pid=10534 comm="syz.3.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.333415][T10284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.354142][T10284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.365076][T10284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.378429][T10284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.379108][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 185.528205][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.549193][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.561647][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.577591][ T51] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.605826][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.618235][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.618531][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.636928][ T51] usb 3-1: config 0 descriptor?? [ 185.646415][ T51] pwc: Askey VC010 type 2 USB webcam detected. [ 185.704180][ T29] audit: type=1400 audit(1739063119.444:485): avc: denied { mounton } for pid=10284 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 186.055159][ T51] pwc: recv_control_msg error -32 req 02 val 2b00 [ 186.073289][ T51] pwc: recv_control_msg error -32 req 02 val 2700 [ 186.283926][ T51] pwc: recv_control_msg error -71 req 04 val 1000 [ 186.294537][ T51] pwc: recv_control_msg error -71 req 04 val 1300 [ 186.302326][ T51] pwc: recv_control_msg error -71 req 04 val 1400 [ 186.309604][ T51] pwc: recv_control_msg error -71 req 02 val 2000 [ 186.316524][ T51] pwc: recv_control_msg error -71 req 02 val 2100 [ 186.324485][ T51] pwc: recv_control_msg error -71 req 04 val 1500 [ 186.335603][ T51] pwc: recv_control_msg error -71 req 02 val 2500 [ 186.343328][ T51] pwc: recv_control_msg error -71 req 02 val 2400 [ 186.354309][ T51] pwc: recv_control_msg error -71 req 02 val 2600 [ 186.361774][ T51] pwc: recv_control_msg error -71 req 02 val 2900 [ 186.368640][ T51] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.381081][ T51] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.387903][ T51] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.398749][ T51] pwc: Registered as video103. [ 186.407502][ T51] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 186.442840][ T51] usb 3-1: USB disconnect, device number 9 [ 186.666750][ T29] audit: type=1326 audit(1739063120.404:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78078cde9 code=0x7ffc0000 [ 186.716873][ T29] audit: type=1326 audit(1739063120.404:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78078cde9 code=0x7ffc0000 [ 186.740545][ T29] audit: type=1326 audit(1739063120.434:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.4.1365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb78078cde9 code=0x7ffc0000 [ 186.980095][ T3915] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.914329][ T3915] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.092899][ T3915] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.158340][ T3915] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.242710][ T3915] bridge_slave_1: left allmulticast mode [ 188.272618][ T3915] bridge_slave_1: left promiscuous mode [ 188.278323][ T3915] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.318504][ T3915] bridge_slave_0: left allmulticast mode [ 188.327502][ T3915] bridge_slave_0: left promiscuous mode [ 188.341312][ T3915] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.704940][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.722431][ T5868] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.731398][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.742021][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.750709][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 188.762521][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 188.774478][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.900839][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.932003][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.965073][ T5868] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 188.974577][ T5868] usb 4-1: New USB device strings: Mfr=104, Product=1, SerialNumber=0 [ 188.985930][ T5868] usb 4-1: Product: syz [ 188.991350][ T5868] usb 4-1: Manufacturer: syz [ 189.016709][ T5868] usb 4-1: config 0 descriptor?? [ 189.410768][ T3915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.857374][ T5868] input: syz syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000D/input/input21 [ 189.935860][ T5868] input: syz syz Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000D/input/input22 [ 189.979543][ T5868] input: syz syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000D/input/input23 [ 190.012666][ T3915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.032751][ T5868] input: syz syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000D/input/input24 [ 190.069659][ T5868] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Keypad [syz syz] on usb-dummy_hcd.3-1/input0 [ 190.083973][ T3915] bond0 (unregistering): Released all slaves [ 190.110564][ T5868] usb 4-1: USB disconnect, device number 16 [ 190.191790][T10640] »»»»»» speed is unknown, defaulting to 1000 [ 190.739179][ T5907] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 190.832283][T10674] block nbd2: shutting down sockets [ 190.849210][ T5820] Bluetooth: hci3: command tx timeout [ 190.944130][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.989512][ T3915] hsr_slave_0: left promiscuous mode [ 191.000947][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.025621][ T3915] hsr_slave_1: left promiscuous mode [ 191.040109][ T3915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.047561][ T3915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.069852][ T5907] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 191.079149][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.087152][ T5907] usb 5-1: SerialNumber: syz [ 191.109596][ T3915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.123169][ T3915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.163122][ T3915] veth1_macvtap: left promiscuous mode [ 191.168683][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 191.168694][ T29] audit: type=1400 audit(1739063124.904:493): avc: denied { execute } for pid=10682 comm="syz.3.1387" path="/dev/dsp" dev="devtmpfs" ino=1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 191.200952][ T3915] veth0_macvtap: left promiscuous mode [ 191.206591][ T3915] veth1_vlan: left promiscuous mode [ 191.211974][ T3915] veth0_vlan: left promiscuous mode [ 191.345285][ T5907] usb 5-1: 0:2 : does not exist [ 191.377105][ T5907] usb 5-1: USB disconnect, device number 13 [ 191.449223][T10629] Set syz1 is full, maxelem 65536 reached [ 191.609963][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.951789][ T3915] team0 (unregistering): Port device team_slave_1 removed [ 192.028008][ T3915] team0 (unregistering): Port device team_slave_0 removed [ 192.389355][ T51] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 192.414604][T10712] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 192.570905][ T51] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 192.592531][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.605156][ T51] usb 2-1: Product: syz [ 192.610355][ T51] usb 2-1: Manufacturer: syz [ 192.628286][ T51] usb 2-1: SerialNumber: syz [ 192.638888][ T51] usb 2-1: config 0 descriptor?? [ 192.667655][T10640] chnl_net:caif_netlink_parms(): no params data found [ 192.795232][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.803945][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.831298][T10640] bridge_slave_0: entered allmulticast mode [ 192.838388][T10640] bridge_slave_0: entered promiscuous mode [ 192.898140][T10640] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.918731][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.929112][ T5820] Bluetooth: hci3: command tx timeout [ 192.943485][T10640] bridge_slave_1: entered allmulticast mode [ 192.952320][T10640] bridge_slave_1: entered promiscuous mode [ 192.983548][T10640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.004231][T10640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.072175][T10640] team0: Port device team_slave_0 added [ 193.090816][T10640] team0: Port device team_slave_1 added [ 193.160866][T10640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.188559][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.242021][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1407'. [ 193.245308][T10640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.285160][T10640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.304034][T10640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.365770][T10640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.433141][T10640] hsr_slave_0: entered promiscuous mode [ 193.454044][T10640] hsr_slave_1: entered promiscuous mode [ 193.690758][ T51] usb 2-1: Firmware version (0.0) predates our first public release. [ 193.713479][ T51] usb 2-1: Please update to version 0.2 or newer [ 193.792156][ T29] audit: type=1400 audit(1739063127.524:494): avc: denied { mount } for pid=10767 comm="syz.4.1413" name="/" dev="ocfs2_dlmfs" ino=34469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 193.806017][T10768] (syz.4.1413,10768,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 193.863940][ T51] usb 2-1: USB disconnect, device number 13 [ 193.899113][ T29] audit: type=1400 audit(1739063127.544:495): avc: denied { write } for pid=10767 comm="syz.4.1413" name="/" dev="ocfs2_dlmfs" ino=34469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.906941][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.985354][ T29] audit: type=1400 audit(1739063127.544:496): avc: denied { add_name } for pid=10767 comm="syz.4.1413" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.108455][ T29] audit: type=1400 audit(1739063127.544:497): avc: denied { create } for pid=10767 comm="syz.4.1413" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 194.215951][T10783] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1416'. [ 194.219122][ T29] audit: type=1400 audit(1739063127.544:498): avc: denied { associate } for pid=10767 comm="syz.4.1413" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 194.907067][T10640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.928661][T10640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.938379][T10640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.951231][T10640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.010179][ T5820] Bluetooth: hci3: command tx timeout [ 195.109142][T10640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.164073][T10640] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.167870][T10822] ubi31: attaching mtd0 [ 195.184335][T10822] ubi31 error: ubi_attach_mtd_dev: bad VID header (117440512) or data offsets (117440576) [ 195.188497][ T3915] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.201413][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.234886][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.242011][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.521781][T10838] tipc: Started in network mode [ 195.526686][T10838] tipc: Node identity ac1414aa, cluster identity 4711 [ 195.547793][T10838] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.565873][T10838] tipc: Enabled bearer , priority 10 [ 195.633131][T10640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.680984][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.728238][T10640] veth0_vlan: entered promiscuous mode [ 195.770249][T10640] veth1_vlan: entered promiscuous mode [ 195.807368][T10640] veth0_macvtap: entered promiscuous mode [ 195.829084][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.838468][T10856] block nbd1: shutting down sockets [ 195.876403][T10854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.884751][T10640] veth1_macvtap: entered promiscuous mode [ 195.942022][ T5868] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 195.952406][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.979122][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.002852][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.029658][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.040646][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.051169][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.094748][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.119230][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.126344][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 196.126471][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.182431][ T5868] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=5d.03 [ 196.184262][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.214978][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.215492][T10640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.235167][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.247993][ T5868] usb 3-1: Product: syz [ 196.259176][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.271337][ T5868] usb 3-1: Manufacturer: syz [ 196.272231][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.286006][ T5868] usb 3-1: SerialNumber: syz [ 196.295394][ T5868] usb 3-1: config 0 descriptor?? [ 196.302260][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.349119][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.359178][T10640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.379636][T10640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.390752][T10640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.402902][T10640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.411712][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.439053][T10640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.447782][T10640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.471055][T10640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.551158][ T5907] tipc: Node number set to 2886997162 [ 196.570616][ T5907] usb 3-1: USB disconnect, device number 10 [ 196.689249][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.698458][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.722442][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.834168][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.840524][T10901] input: syz0 as /devices/virtual/input/input25 [ 196.879613][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.959119][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.129148][ T5907] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 197.287586][ T29] audit: type=1400 audit(1739063131.024:499): avc: denied { shutdown } for pid=10929 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.311261][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.352582][ T5907] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 197.380755][ T5907] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.392084][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.420839][ T5907] usb 2-1: Product: syz [ 197.431063][ T5907] usb 2-1: Manufacturer: syz [ 197.440058][ T5907] usb 2-1: SerialNumber: syz [ 197.489152][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.666849][T10906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 198.224963][T10986] sctp: [Deprecated]: syz.4.1466 (pid 10986) Use of int in max_burst socket option deprecated. [ 198.224963][T10986] Use struct sctp_assoc_value instead [ 198.390004][ T29] audit: type=1400 audit(1739063132.134:500): avc: denied { create } for pid=10992 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.470171][ T29] audit: type=1400 audit(1739063132.154:501): avc: denied { setopt } for pid=10992 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.504933][ T5907] cdc_ncm 2-1:1.0: bind() failure [ 198.518713][ T5907] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 198.534268][ T5907] cdc_ncm 2-1:1.1: bind() failure [ 198.539472][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.569502][ T5907] usb 2-1: USB disconnect, device number 14 [ 198.791753][ T3849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.569143][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.721126][ T3849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.790464][ T3849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.855420][ T3849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.972295][ T3849] bridge_slave_1: left allmulticast mode [ 199.977975][ T3849] bridge_slave_1: left promiscuous mode [ 199.985214][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.994052][ T3849] bridge_slave_0: left allmulticast mode [ 200.000044][ T3849] bridge_slave_0: left promiscuous mode [ 200.006180][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.413702][ T3849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.443057][ T3849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.475203][ T3849] bond0 (unregistering): Released all slaves [ 200.499201][T11017] unknown channel width for channel at 909000KHz? [ 200.597091][ T29] audit: type=1400 audit(1739063134.334:502): avc: denied { write } for pid=11025 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.609072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.679654][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.696775][ T29] audit: type=1400 audit(1739063134.394:503): avc: denied { create } for pid=11032 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 200.716684][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.725307][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.736588][ T29] audit: type=1400 audit(1739063134.414:504): avc: denied { setopt } for pid=11032 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 200.766432][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.787979][ T5824] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 200.796701][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.863497][T11051] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1482'. [ 200.925716][T11040] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 201.110644][T11044] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 201.187126][T11035] »»»»»» speed is unknown, defaulting to 1000 [ 201.439256][ T3849] hsr_slave_0: left promiscuous mode [ 201.472888][ T3849] hsr_slave_1: left promiscuous mode [ 201.499938][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.507366][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.524972][ T5907] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 201.580485][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.589651][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.649083][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 201.680961][ T3849] veth1_macvtap: left promiscuous mode [ 201.686638][ T3849] veth0_macvtap: left promiscuous mode [ 201.723485][ T3849] veth1_vlan: left promiscuous mode [ 201.729105][ T5907] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 201.739752][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.765999][ T3849] veth0_vlan: left promiscuous mode [ 201.776441][ T5907] usb 4-1: config 0 has no interface number 0 [ 201.784972][ T5907] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 201.826878][ T5907] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 201.867959][ T5907] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.914934][ T5907] usb 4-1: config 0 interface 52 has no altsetting 0 [ 201.941179][ T5907] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 201.969221][ T5907] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 202.000106][ T5907] usb 4-1: Product: syz [ 202.014595][ T5907] usb 4-1: Manufacturer: syz [ 202.029131][ T5907] usb 4-1: SerialNumber: syz [ 202.045588][ T5907] usb 4-1: config 0 descriptor?? [ 202.286640][ T5907] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 202.297451][ T5907] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5 [ 202.496888][ T1201] usb 4-1: USB disconnect, device number 17 [ 202.676590][ T5869] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 202.693893][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.759773][ T29] audit: type=1400 audit(1739063136.504:505): avc: denied { write } for pid=11106 comm="syz.2.1498" name="file0" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.808589][ T29] audit: type=1400 audit(1739063136.504:506): avc: denied { open } for pid=11106 comm="syz.2.1498" path="/351/file0" dev="tmpfs" ino=1815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.832085][ T29] audit: type=1400 audit(1739063136.524:507): avc: denied { ioctl } for pid=11106 comm="syz.2.1498" path="/351/file0" dev="tmpfs" ino=1815 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 202.858841][ T5824] Bluetooth: hci3: command tx timeout [ 202.885191][ T5869] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.897853][ T5869] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.909130][ T5869] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.918347][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.938293][ T3849] team0 (unregistering): Port device team_slave_1 removed [ 202.938516][ T5869] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.954416][ T5869] usb 2-1: invalid MIDI out EP 0 [ 203.089564][ T3849] team0 (unregistering): Port device team_slave_0 removed [ 203.097951][ T5869] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 203.166612][ T6562] udevd[6562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.272389][ T5869] usb 2-1: USB disconnect, device number 15 [ 203.363646][ T5907] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 203.522527][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 203.542186][ T5907] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 203.552869][ T5907] usb 5-1: config 0 has no interface number 0 [ 203.565514][ T5907] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.588080][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.596482][ T5907] usb 5-1: Product: syz [ 203.600761][ T5907] usb 5-1: Manufacturer: syz [ 203.605388][ T5907] usb 5-1: SerialNumber: syz [ 203.615736][ T5907] usb 5-1: config 0 descriptor?? [ 203.623248][ T5907] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.732796][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.843150][ T5907] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.864283][ T5907] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 204.065385][T11113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.088491][T11113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.267830][T11035] chnl_net:caif_netlink_parms(): no params data found [ 204.343472][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 204.347903][ T5869] usb 5-1: USB disconnect, device number 14 [ 204.374241][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 204.408052][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.420844][ T5869] quatech2 5-1:0.51: device disconnected [ 204.439137][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 204.503180][T11035] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.517798][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.537223][T11035] bridge_slave_0: entered allmulticast mode [ 204.556554][T11035] bridge_slave_0: entered promiscuous mode [ 204.581843][T11035] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.602654][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.615590][T11035] bridge_slave_1: entered allmulticast mode [ 204.623400][T11035] bridge_slave_1: entered promiscuous mode [ 204.632302][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.658528][ T5898] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 204.669205][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.675220][T11163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.679238][ T5898] usb 2-1: config 0 descriptor?? [ 204.715887][T11035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.736730][T11035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.769039][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.787425][T11035] team0: Port device team_slave_0 added [ 204.798646][T11035] team0: Port device team_slave_1 added [ 204.822525][T11035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.829779][T11035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.856553][T11035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.872150][T11035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.879593][T11035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.929076][ T5824] Bluetooth: hci3: command tx timeout [ 204.930150][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 204.940851][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.948977][T11035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.964686][ T5898] usb 2-1: USB disconnect, device number 16 [ 205.036195][T11035] hsr_slave_0: entered promiscuous mode [ 205.045698][T11035] hsr_slave_1: entered promiscuous mode [ 205.383479][T11189] block nbd3: shutting down sockets [ 205.439107][ T5869] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 205.596363][ T29] audit: type=1400 audit(1739063139.334:508): avc: denied { read } for pid=11202 comm="syz.3.1526" name="file0" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 205.639109][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 205.659089][ T29] audit: type=1400 audit(1739063139.334:509): avc: denied { append } for pid=11202 comm="syz.3.1526" name="file0" dev="tmpfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 205.704113][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.717341][ T5869] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 205.737585][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.809702][ T5869] usb 2-1: config 0 descriptor?? [ 205.812857][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.820024][ T5869] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 205.888024][ T5869] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 206.081504][ T5898] usb 2-1: USB disconnect, device number 17 [ 206.104758][ T5898] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 206.193057][T11035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.224209][T11035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.247953][T11035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.268258][T11035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.368515][T11035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.411157][T11035] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.460732][ T3849] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.467810][ T3849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.476534][ T3849] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.483668][ T3849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.579030][T11249] geneve3: entered promiscuous mode [ 206.584294][T11249] geneve3: entered allmulticast mode [ 206.730366][ T901] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 206.811878][T11035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.848962][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.868360][T11035] veth0_vlan: entered promiscuous mode [ 206.893074][T11035] veth1_vlan: entered promiscuous mode [ 206.899155][ T901] usb 5-1: Using ep0 maxpacket: 8 [ 206.908980][ T901] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 206.918057][ T901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.952037][ T901] usb 5-1: config 0 descriptor?? [ 206.959785][T11035] veth0_macvtap: entered promiscuous mode [ 206.982194][T11035] veth1_macvtap: entered promiscuous mode [ 207.010084][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.019843][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.020398][ T5824] Bluetooth: hci3: command tx timeout [ 207.036914][ T5868] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 207.048115][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.079004][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.109356][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.125230][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.137661][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.147751][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.160024][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.171748][T11035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.187592][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.202254][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 207.203093][ T5868] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.216029][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.223664][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.233563][ T5868] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 207.238888][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.242925][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.269703][ T5868] hub 2-1:1.0: bad descriptor, ignoring hub [ 207.275808][ T5868] hub 2-1:1.0: probe with driver hub failed with error -5 [ 207.289079][ T5898] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 207.299056][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.313317][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.323434][ T29] audit: type=1400 audit(1739063141.054:510): avc: denied { append } for pid=11283 comm="syz.3.1548" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.332188][ T5898] usb 3-1: Product: syz [ 207.354898][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.368288][T11035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.379183][ T5898] usb 3-1: Manufacturer: syz [ 207.383984][ T5898] usb 3-1: SerialNumber: syz [ 207.388876][T11035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.403646][ T5898] usb 3-1: config 0 descriptor?? [ 207.411382][T11035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.442050][T11035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.456664][T11035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.465561][T11035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.474451][T11035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.582160][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.597888][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.634919][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.643096][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.823547][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1543'. [ 207.856026][ T5869] usb 2-1: USB disconnect, device number 18 [ 207.886826][ T5898] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 207.893950][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.916036][ T5898] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 207.956557][ T5898] usb 3-1: USB disconnect, device number 11 [ 207.997385][ T901] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.015209][ T901] asix 5-1:0.0: probe with driver asix failed with error -71 [ 208.033639][ T901] usb 5-1: USB disconnect, device number 15 [ 208.168931][ T5869] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 208.328968][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 208.340281][ T5869] usb 2-1: config 0 has no interfaces? [ 208.346170][ T5869] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.362858][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.380287][ T5869] usb 2-1: config 0 descriptor?? [ 208.633513][ T1201] usb 2-1: USB disconnect, device number 19 [ 208.832793][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.928795][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.873428][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.968818][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.393775][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.478268][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.572181][T11378] netlink: 'syz.2.1559': attribute type 2 has an invalid length. [ 210.809069][ T11] bridge_slave_1: left allmulticast mode [ 210.814758][ T11] bridge_slave_1: left promiscuous mode [ 210.855698][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.930847][ T11] bridge_slave_0: left allmulticast mode [ 210.956995][ T11] bridge_slave_0: left promiscuous mode [ 210.998758][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.005534][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 211.018632][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.019235][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 211.034662][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.043960][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.052822][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 211.060805][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.495777][T11430] capability: warning: `syz.2.1577' uses 32-bit capabilities (legacy support in use) [ 211.551164][ T29] audit: type=1400 audit(1739063145.284:511): avc: denied { read } for pid=11431 comm="syz.4.1578" path="socket:[39125]" dev="sockfs" ino=39125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 211.923691][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.935836][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.946044][ T11] bond0 (unregistering): Released all slaves [ 211.965367][T11436] smc: net device caif0 applied user defined pnetid SYZ2 [ 211.985896][T11397] »»»»»» speed is unknown, defaulting to 1000 [ 212.058646][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.428600][ T29] audit: type=1400 audit(1739063146.144:512): avc: denied { getopt } for pid=11461 comm="syz.3.1589" lport=42802 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 212.541109][ T11] hsr_slave_0: left promiscuous mode [ 212.553862][ T11] hsr_slave_1: left promiscuous mode [ 212.565289][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.574182][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.587262][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.595831][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.619041][ T11] veth1_macvtap: left promiscuous mode [ 212.624634][ T11] veth0_macvtap: left promiscuous mode [ 212.630747][ T11] veth1_vlan: left promiscuous mode [ 212.636101][ T11] veth0_vlan: left promiscuous mode [ 212.767965][ T5820] Bluetooth: hci5: sending frame failed (-49) [ 212.784113][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 213.089536][ T5824] Bluetooth: hci3: command tx timeout [ 213.098546][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.364946][ T29] audit: type=1400 audit(1739063147.094:513): avc: denied { ioctl } for pid=11499 comm="syz.2.1603" path="socket:[39333]" dev="sockfs" ino=39333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 213.388717][ T5869] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.417765][ T11] team0 (unregistering): Port device team_slave_1 removed [ 213.457181][ T11] team0 (unregistering): Port device team_slave_0 removed [ 213.559519][ T5869] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 213.567855][ T5869] usb 5-1: config 0 has no interface number 0 [ 213.583380][ T5869] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 4.40 [ 213.599065][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.616800][ T5869] usb 5-1: config 0 descriptor?? [ 213.638328][ T5869] ftdi_sio 5-1:0.230: FTDI USB Serial Device converter detected [ 213.656256][ T5869] ftdi_sio ttyUSB0: unknown device type: 0x440 [ 213.668542][ T1201] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.832444][ T1201] usb 3-1: Using ep0 maxpacket: 16 [ 213.843160][ T5869] usb 5-1: USB disconnect, device number 16 [ 213.863861][ T1201] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 213.880116][ T5869] ftdi_sio 5-1:0.230: device disconnected [ 213.892334][ T1201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.903778][ T1201] usb 3-1: Product: syz [ 213.926276][ T1201] usb 3-1: Manufacturer: syz [ 213.967908][ T1201] usb 3-1: SerialNumber: syz [ 214.014258][T11397] chnl_net:caif_netlink_parms(): no params data found [ 214.021911][ T1201] usb 3-1: config 0 descriptor?? [ 214.068949][ T1201] as10x_usb: device has been detected [ 214.074529][ T1201] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 214.099254][T11510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.106491][T11510] IPv6: NLM_F_CREATE should be set when creating new route [ 214.113797][T11510] IPv6: NLM_F_CREATE should be set when creating new route [ 214.121028][T11510] IPv6: NLM_F_CREATE should be set when creating new route [ 214.128491][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.147711][ T1201] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 214.232442][ T1201] as10x_usb: error during firmware upload part1 [ 214.242537][ T1201] Registered device Sky IT Digital Key (green led) [ 214.280183][T11502] random: crng reseeded on system resumption [ 214.303600][ T29] audit: type=1400 audit(1739063148.024:514): avc: denied { write } for pid=11501 comm="syz.2.1604" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 214.387207][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.396463][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.408586][T11397] bridge_slave_0: entered allmulticast mode [ 214.415407][T11397] bridge_slave_0: entered promiscuous mode [ 214.440758][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.451252][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.468940][T11397] bridge_slave_1: entered allmulticast mode [ 214.480044][T11397] bridge_slave_1: entered promiscuous mode [ 214.571440][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.605060][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.692298][T11397] team0: Port device team_slave_0 added [ 214.720605][T11397] team0: Port device team_slave_1 added [ 214.727289][ T29] audit: type=1400 audit(1739063148.464:515): avc: denied { setopt } for pid=11537 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.779829][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.786793][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.854968][ T1201] usb 3-1: USB disconnect, device number 12 [ 214.872881][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.895480][ T1201] Unregistered device Sky IT Digital Key (green led) [ 214.897617][ T1201] as10x_usb: device has been disconnected [ 214.921858][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.942467][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.989061][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.168486][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.168981][ T5824] Bluetooth: hci3: command tx timeout [ 215.197630][T11397] hsr_slave_0: entered promiscuous mode [ 215.206415][T11397] hsr_slave_1: entered promiscuous mode [ 215.716575][ T29] audit: type=1400 audit(1739063149.454:516): avc: denied { write } for pid=11584 comm="syz.4.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 215.749369][ T29] audit: type=1400 audit(1739063149.484:517): avc: denied { bind } for pid=11584 comm="syz.4.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 215.808537][ T5907] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.972978][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 215.984395][T11397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.992397][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 215.998100][T11601] netlink: 'syz.3.1626': attribute type 21 has an invalid length. [ 216.007893][T11397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.015644][ T5907] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 216.024557][ T5907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.034640][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.046331][T11397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.050845][ T29] audit: type=1400 audit(1739063149.784:518): avc: denied { mount } for pid=11603 comm="syz.4.1627" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 216.062673][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.101686][T11604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.106625][ T5907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.129054][T11397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.172093][ T5907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.183730][ T29] audit: type=1400 audit(1739063149.924:519): avc: denied { bind } for pid=11606 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 216.204917][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.213178][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.252444][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.301656][ T29] audit: type=1400 audit(1739063149.924:520): avc: denied { write } for pid=11606 comm="syz.3.1628" path="socket:[39529]" dev="sockfs" ino=39529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 216.310882][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.382995][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.390125][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.425498][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.432644][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.500488][ T5907] usb 3-1: usb_control_msg returned -32 [ 216.506079][ T5907] usbtmc 3-1:16.0: can't read capabilities [ 216.656277][T11631] block device autoloading is deprecated and will be removed. [ 216.823487][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.878196][T11397] veth0_vlan: entered promiscuous mode [ 216.909599][T11397] veth1_vlan: entered promiscuous mode [ 216.947837][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 216.947851][ T29] audit: type=1400 audit(1739063150.684:522): avc: denied { setopt } for pid=11648 comm="syz.4.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.987410][T11397] veth0_macvtap: entered promiscuous mode [ 217.000572][T11397] veth1_macvtap: entered promiscuous mode [ 217.014805][T11646] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 217.034927][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.050369][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.062391][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.075406][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.087225][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.107622][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.117655][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.133061][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.150182][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.169356][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.188574][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.208330][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.222011][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.231888][ T5907] usb 3-1: USB disconnect, device number 13 [ 217.235453][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.248394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.256110][ T5824] Bluetooth: hci3: command tx timeout [ 217.271211][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.286120][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.307861][T11397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.328597][T11397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.337415][T11397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.370873][T11397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.479200][T11671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1640'. [ 217.529925][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.541254][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.645491][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.655665][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.184538][T11715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1654'. [ 218.275336][ T29] audit: type=1400 audit(1739063152.015:523): avc: denied { listen } for pid=11718 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.298231][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.305421][ T29] audit: type=1400 audit(1739063152.045:524): avc: denied { accept } for pid=11718 comm="syz.4.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.758738][ T5907] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.878216][ T5869] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 218.939527][ T5907] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 218.954364][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.979840][ T5907] usb 5-1: config 0 descriptor?? [ 219.042407][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 219.062556][ T5869] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 219.090728][ T5869] usb 4-1: config 179 has no interface number 0 [ 219.107647][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 219.128164][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 219.168325][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.208151][ T5869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 219.238165][ T5869] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 219.269387][ T5869] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 219.296920][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.329844][T11742] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 219.338159][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.412364][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.635609][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input27 [ 219.843683][T11742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.853248][T11742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.007163][ T5907] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 220.022895][ T5907] asix 5-1:0.0: probe with driver asix failed with error -71 [ 220.033141][ T5907] usb 5-1: USB disconnect, device number 17 [ 220.078349][ T51] usb 4-1: USB disconnect, device number 18 [ 220.081796][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.093506][ T51] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 220.095635][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 220.378172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.676025][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.733963][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.784693][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.886575][ T12] bridge_slave_1: left allmulticast mode [ 220.892858][ T12] bridge_slave_1: left promiscuous mode [ 220.898779][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.907439][ T12] bridge_slave_0: left allmulticast mode [ 220.913396][ T12] bridge_slave_0: left promiscuous mode [ 220.919215][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.365811][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.376788][ T29] audit: type=1400 audit(1739063155.125:525): avc: denied { setopt } for pid=11790 comm="syz.4.1670" lport=51856 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.400663][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.413774][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.418048][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.438100][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.454387][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.470763][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.582067][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.592663][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.602860][ T12] bond0 (unregistering): Released all slaves [ 221.655932][T11802] netlink: 'syz.4.1675': attribute type 4 has an invalid length. [ 221.681312][T11792] »»»»»» speed is unknown, defaulting to 1000 [ 222.068770][T11805] »»»»»» speed is unknown, defaulting to 1000 [ 222.078706][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 222.272556][T11826] xt_CT: No such helper "pptp" [ 222.329772][T11792] chnl_net:caif_netlink_parms(): no params data found [ 222.458015][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.619954][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.627013][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.656304][T11792] bridge_slave_0: entered allmulticast mode [ 222.679783][T11792] bridge_slave_0: entered promiscuous mode [ 222.768356][ T5867] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 222.808613][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.815724][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.827944][T11792] bridge_slave_1: entered allmulticast mode [ 222.834780][T11792] bridge_slave_1: entered promiscuous mode [ 222.856912][T11862] Bluetooth: MGMT ver 1.23 [ 222.871351][ T12] hsr_slave_0: left promiscuous mode [ 222.896838][ T12] hsr_slave_1: left promiscuous mode [ 222.903466][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.923392][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.938684][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.939763][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.946112][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.968750][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.974075][ T12] veth1_macvtap: left promiscuous mode [ 222.981370][ T5867] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 222.995153][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.007639][ T12] veth0_macvtap: left promiscuous mode [ 223.018462][ T12] veth1_vlan: left promiscuous mode [ 223.025028][ T12] veth0_vlan: left promiscuous mode [ 223.027424][ T5867] usb 3-1: config 0 descriptor?? [ 223.472189][ T5867] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 223.490737][ T5867] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 223.498063][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.570643][ T5820] Bluetooth: hci3: command tx timeout [ 223.662835][ T5867] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 223.883886][ T12] team0 (unregistering): Port device team_slave_1 removed [ 223.925907][ T12] team0 (unregistering): Port device team_slave_0 removed [ 224.074971][ T5867] cp2112 0003:10C4:EA90.000E: error setting SMBus config [ 224.086003][ T5867] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 224.106021][ T5867] usb 3-1: USB disconnect, device number 14 [ 224.367783][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.382476][T11891] batadv0: entered promiscuous mode [ 224.389541][T11891] batadv_slave_0: entered promiscuous mode [ 224.395533][T11891] batadv_slave_0: left promiscuous mode [ 224.401522][T11891] batadv0: left promiscuous mode [ 224.417512][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.518335][T11792] team0: Port device team_slave_0 added [ 224.526799][T11792] team0: Port device team_slave_1 added [ 224.532441][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.780201][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.804363][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.852220][ T29] audit: type=1400 audit(1739063158.585:526): avc: denied { read } for pid=11907 comm="syz.1.1705" path="socket:[41459]" dev="sockfs" ino=41459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 224.853355][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.924319][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.941692][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.977986][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.040250][T11792] hsr_slave_0: entered promiscuous mode [ 225.046498][T11792] hsr_slave_1: entered promiscuous mode [ 225.577812][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.627761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.677715][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.727666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.827573][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.877527][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.927444][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.027386][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.077328][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.127262][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.227201][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.277139][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.327087][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.427044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.477002][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.526905][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.626861][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.676798][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.726731][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.826684][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.876620][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.926535][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.026492][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.076421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.126367][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.226311][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.276246][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.326182][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.426157][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.476078][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.526000][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.625931][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.675901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.725818][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.825761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.875705][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.925644][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.025572][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.075528][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.125458][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.225398][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.275345][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.325281][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.425227][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.475187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.525096][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.625053][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.675013][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.724918][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.824855][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.874834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.924735][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.024688][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.074619][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.124561][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.224508][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.274449][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.324381][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.424330][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.474287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.524216][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.624145][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.674082][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.724017][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.823958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.873894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.923840][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.023784][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.073731][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.123651][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.223619][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.273548][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.323490][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.423442][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.473393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.523295][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.623270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.673180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.723122][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.823076][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.872998][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.922928][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.022885][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.072811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.122757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.222705][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.272652][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.322571][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.422535][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.472488][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.522409][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.622327][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.672304][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.722210][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.822171][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.872091][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.922032][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.021979][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.071868][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 330.078830][ C1] rcu: 0-...!: (0 ticks this GP) idle=6a6c/1/0x4000000000000000 softirq=59140/59147 fqs=0 [ 330.090009][ C1] rcu: (detected by 1, t=10502 jiffies, g=40461, q=328 ncpus=2) [ 330.097727][ C1] Sending NMI from CPU 1 to CPUs 0: [ 330.097753][ C0] NMI backtrace for cpu 0 [ 330.097762][ C0] CPU: 0 UID: 0 PID: 11805 Comm: syz.3.1674 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 330.097777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.097784][ C0] RIP: 0010:timerqueue_del+0x67/0x150 [ 330.097806][ C0] Code: 1e 67 f6 49 39 dc 0f 84 af 00 00 00 e8 32 24 67 f6 4c 8d 65 08 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 80 3c 02 00 <0f> 85 a3 00 00 00 48 39 5d 08 74 58 e8 08 24 67 f6 48 89 ee 48 89 [ 330.097818][ C0] RSP: 0018:ffffc90000007dd0 EFLAGS: 00000046 [ 330.097829][ C0] RAX: dffffc0000000000 RBX: ffff88806c91b340 RCX: ffffffff8b52afa0 [ 330.097837][ C0] RDX: 1ffff110170c58fb RSI: ffffffff8b52afae RDI: 0000000000000006 [ 330.097845][ C0] RBP: ffff8880b862c7d0 R08: 0000000000000006 R09: ffff8880352f6c00 [ 330.097852][ C0] R10: ffff88806c91b340 R11: 0000000000000003 R12: ffff8880b862c7d8 [ 330.097860][ C0] R13: 0000000000000000 R14: ffff8880b862c680 R15: 0000000000000000 [ 330.097868][ C0] FS: 00007f06bc8c26c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 330.097881][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.097890][ C0] CR2: 00007f22dcb70ba0 CR3: 00000000595f8000 CR4: 00000000003526f0 [ 330.097897][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.097905][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.097912][ C0] Call Trace: [ 330.097918][ C0] [ 330.097924][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 330.097942][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 330.097959][ C0] ? nmi_handle+0x1ac/0x5d0 [ 330.097977][ C0] ? timerqueue_del+0x67/0x150 [ 330.097992][ C0] ? default_do_nmi+0x6a/0x160 [ 330.098008][ C0] ? exc_nmi+0x170/0x1e0 [ 330.098023][ C0] ? end_repeat_nmi+0xf/0x53 [ 330.098041][ C0] ? timerqueue_del+0x40/0x150 [ 330.098056][ C0] ? timerqueue_del+0x4e/0x150 [ 330.098071][ C0] ? timerqueue_del+0x67/0x150 [ 330.098086][ C0] ? timerqueue_del+0x67/0x150 [ 330.098101][ C0] ? timerqueue_del+0x67/0x150 [ 330.098116][ C0] [ 330.098120][ C0] [ 330.098125][ C0] __remove_hrtimer+0x99/0x290 [ 330.098144][ C0] ? __pfx_advance_sched+0x10/0x10 [ 330.098161][ C0] __hrtimer_run_queues+0x50b/0xae0 [ 330.098176][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 330.098187][ C0] ? read_tsc+0x9/0x20 [ 330.098202][ C0] hrtimer_interrupt+0x392/0x8e0 [ 330.098218][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 330.098237][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 330.098256][ C0] [ 330.098260][ C0] [ 330.098264][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.098281][ C0] RIP: 0010:mutex_spin_on_owner+0x94/0x310 [ 330.098299][ C0] Code: 49 bf 00 00 00 00 00 fc ff df 4d 89 f5 49 c1 ed 03 4d 01 fd 48 85 db 0f 84 71 01 00 00 be 08 00 00 00 48 89 df e8 dc d2 87 00 <48> 89 d8 48 c1 e8 03 42 80 3c 38 00 0f 85 02 02 00 00 48 8b 03 48 [ 330.098310][ C0] RSP: 0018:ffffc9000483fa88 EFLAGS: 00000246 [ 330.098320][ C0] RAX: 0000000000000001 RBX: ffffffff8fef5580 RCX: ffffffff819520f4 [ 330.098328][ C0] RDX: fffffbfff1fdeab1 RSI: 0000000000000008 RDI: ffffffff8fef5580 [ 330.098336][ C0] RBP: ffff88807a5a8000 R08: 0000000000000000 R09: fffffbfff1fdeab0 [ 330.098343][ C0] R10: ffffffff8fef5587 R11: 0000000000000001 R12: 0000000000000000 [ 330.098351][ C0] R13: ffffed100676e000 R14: ffff888033b70000 R15: dffffc0000000000 [ 330.098361][ C0] ? mutex_spin_on_owner+0x94/0x310 [ 330.098379][ C0] ? mutex_spin_on_owner+0x94/0x310 [ 330.098397][ C0] __mutex_lock+0x319/0xb10 [ 330.098416][ C0] ? ct_exit_net+0x26/0x3b0 [ 330.098435][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 330.098449][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 330.098468][ C0] ? __pfx_ct_exit_net+0x10/0x10 [ 330.098482][ C0] ? ct_exit_net+0x26/0x3b0 [ 330.098495][ C0] ct_exit_net+0x26/0x3b0 [ 330.098508][ C0] ? __pfx_ct_exit_net+0x10/0x10 [ 330.098523][ C0] ops_exit_list+0x128/0x180 [ 330.098539][ C0] setup_net+0x4fe/0x860 [ 330.098555][ C0] ? __pfx_setup_net+0x10/0x10 [ 330.098569][ C0] ? down_read_killable+0xcc/0x380 [ 330.098583][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 330.098597][ C0] ? __raw_spin_lock_init+0x3a/0x110 [ 330.098617][ C0] ? debug_mutex_init+0x37/0x70 [ 330.098630][ C0] copy_net_ns+0x2b4/0x6c0 [ 330.098647][ C0] create_new_namespaces+0x3ea/0xad0 [ 330.098668][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 330.098687][ C0] ksys_unshare+0x45d/0xa40 [ 330.098701][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 330.098714][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 330.098732][ C0] __x64_sys_unshare+0x31/0x40 [ 330.098744][ C0] do_syscall_64+0xcd/0x250 [ 330.098757][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.098773][ C0] RIP: 0033:0x7f06bb98cde9 [ 330.098784][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.098795][ C0] RSP: 002b:00007f06bc8c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 330.098806][ C0] RAX: ffffffffffffffda RBX: 00007f06bbba5fa0 RCX: 00007f06bb98cde9 [ 330.098814][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 330.098822][ C0] RBP: 00007f06bba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.098829][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.098836][ C0] R13: 0000000000000001 R14: 00007f06bbba5fa0 R15: 00007ffcead60ee8 [ 330.098848][ C0] [ 330.099748][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g40461 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 330.646661][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 330.656620][ C1] rcu: RCU grace-period kthread stack dump: [ 330.662492][ C1] task:rcu_preempt state:R running task stack:27456 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 330.675975][ C1] Call Trace: [ 330.679245][ C1] [ 330.682179][ C1] __schedule+0xf43/0x5890 [ 330.686606][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 330.691812][ C1] ? __pfx___schedule+0x10/0x10 [ 330.696663][ C1] ? schedule+0x298/0x350 [ 330.700994][ C1] ? __pfx_lock_release+0x10/0x10 [ 330.706021][ C1] ? lock_acquire+0x2f/0xb0 [ 330.710522][ C1] ? schedule+0x1fd/0x350 [ 330.714856][ C1] schedule+0xe7/0x350 [ 330.718924][ C1] schedule_timeout+0x124/0x280 [ 330.723778][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 330.729148][ C1] ? __pfx_process_timeout+0x10/0x10 [ 330.734433][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.740255][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 330.745776][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 330.750543][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 330.755825][ C1] ? rcu_gp_init+0xc82/0x1630 [ 330.760505][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 330.765711][ C1] rcu_gp_kthread+0x271/0x380 [ 330.770394][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.775598][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.780793][ C1] ? __kthread_parkme+0x148/0x220 [ 330.785810][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 330.791097][ C1] kthread+0x3af/0x750 [ 330.795162][ C1] ? __pfx_kthread+0x10/0x10 [ 330.799753][ C1] ? __pfx_kthread+0x10/0x10 [ 330.804338][ C1] ret_from_fork+0x45/0x80 [ 330.808752][ C1] ? __pfx_kthread+0x10/0x10 [ 330.813338][ C1] ret_from_fork_asm+0x1a/0x30 [ 330.818110][ C1] [ 330.821118][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 330.827431][ C1] CPU: 1 UID: 0 PID: 11920 Comm: rm Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 330.837486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.847531][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 330.854215][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 330.873814][ C1] RSP: 0018:ffffc9000488fa40 EFLAGS: 00000293 [ 330.879873][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81adcf0a [ 330.887836][ C1] RDX: ffff888058f84880 RSI: ffffffff81adcee4 RDI: 0000000000000005 [ 330.895798][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 330.903776][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed10170c8d41 [ 330.911741][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 330.919707][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 330.928631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.935208][ C1] CR2: 00007f5cecd19870 CR3: 000000000df80000 CR4: 00000000003526f0 [ 330.943175][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.951138][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.959099][ C1] Call Trace: [ 330.962368][ C1] [ 330.965202][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 330.971523][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 330.976714][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 330.982179][ C1] ? timekeeping_advance+0x72e/0xa90 [ 330.987469][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 330.993105][ C1] ? __asan_memcpy+0x3c/0x60 [ 330.997705][ C1] ? rcu_is_watching+0x12/0xc0 [ 331.002473][ C1] ? update_process_times+0x178/0x2d0 [ 331.007848][ C1] ? __pfx_update_process_times+0x10/0x10 [ 331.013568][ C1] ? update_wall_time+0x1c/0x40 [ 331.018421][ C1] ? tick_nohz_handler+0x376/0x530 [ 331.023528][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 331.028979][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 331.034349][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 331.040058][ C1] ? read_tsc+0x9/0x20 [ 331.044129][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 331.049241][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 331.055394][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 331.061204][ C1] [ 331.064128][ C1] [ 331.067049][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.073209][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 331.079267][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 331.085326][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 331.091399][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 331.096598][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 331.101704][ C1] flush_tlb_mm_range+0x271/0x4a0 [ 331.106725][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 331.112269][ C1] tlb_finish_mmu+0x3c9/0x7b0 [ 331.116944][ C1] exit_mmap+0x40e/0xba0 [ 331.121191][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 331.125963][ C1] ? __pfx_mark_lock+0x10/0x10 [ 331.130743][ C1] __mmput+0x12a/0x410 [ 331.134812][ C1] mmput+0x62/0x70 [ 331.138532][ C1] do_exit+0x9ba/0x2d70 [ 331.142681][ C1] ? do_group_exit+0x1c3/0x2a0 [ 331.147442][ C1] ? __pfx_lock_release+0x10/0x10 [ 331.152473][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 331.157489][ C1] ? __pfx_do_exit+0x10/0x10 [ 331.162072][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.167442][ C1] do_group_exit+0xd3/0x2a0 [ 331.171945][ C1] __x64_sys_exit_group+0x3e/0x50 [ 331.176964][ C1] x64_sys_call+0x151f/0x1720 [ 331.181634][ C1] do_syscall_64+0xcd/0x250 [ 331.186133][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.192024][ C1] RIP: 0033:0x7f5cecc22a90 [ 331.196435][ C1] Code: Unable to access opcode bytes at 0x7f5cecc22a66. [ 331.203441][ C1] RSP: 002b:00007ffcfc1b1f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 331.211848][ C1] RAX: ffffffffffffffda RBX: 00007f5cecd13860 RCX: 00007f5cecc22a90 [ 331.219810][ C1] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 331.227781][ C1] RBP: 00007f5cecd13860 R08: 0000000000000000 R09: 96328bbb0b6478d6 [ 331.235744][ C1] R10: 00007ffcfc1b1de0 R11: 0000000000000246 R12: 0000000000000000 [ 331.243705][ C1] R13: 0000000000000000 R14: 00007f5cecd17658 R15: 0000000000000001 [ 331.251684][ C1] [ 331.255100][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.291944][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.391807][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.441739][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.541669][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.591636][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 336.641570][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.741493][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.791431][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.841366][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available