last executing test programs: 59.791566165s ago: executing program 3 (id=521): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 54.444478205s ago: executing program 0 (id=641): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 54.444408674s ago: executing program 3 (id=521): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 52.941116132s ago: executing program 0 (id=642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000006"], 0x66) 38.153300276s ago: executing program 3 (id=521): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 38.112478987s ago: executing program 0 (id=666): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) 35.860706073s ago: executing program 4 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000006"], 0x66) 20.758800478s ago: executing program 4 (id=682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x84000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x140, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.718573169s ago: executing program 3 (id=521): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 18.28795086s ago: executing program 4 (id=682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x84000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x140, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.408214161s ago: executing program 3 (id=521): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 14.031865173s ago: executing program 4 (id=682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x84000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x140, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.482915864s ago: executing program 4 (id=682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x84000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x140, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.37423698s ago: executing program 0 (id=666): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) 9.040146602s ago: executing program 1 (id=703): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000200)='~', 0x1) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001000000066348fbe"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.652282446s ago: executing program 2 (id=704): r0 = syz_io_uring_setup(0xec7, &(0x7f00000003c0), &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x0) r3 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x87180f881656de9e, @fd_index}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 8.416119181s ago: executing program 2 (id=705): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getpid() 7.859297521s ago: executing program 4 (id=682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x84000c12) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x140, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.638131923s ago: executing program 0 (id=666): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) 4.620487397s ago: executing program 1 (id=706): mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002980)={0xffffffffffffffff}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$binfmt_elf64(r1, 0x0, 0x0) 4.608474166s ago: executing program 2 (id=707): syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x61}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x5, 0x9fd, 0x84}, 0x48) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000030c0)=ANY=[], 0x18}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000780)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x38, 0x30, 0x6d, 0x30, 0x31, 0x2d, 0x78]}}, {}]}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x800443d2, 0x20000000) 4.282064776s ago: executing program 1 (id=708): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000340)={0x2c, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1}, 0x0, 0x0}) 2.946953895s ago: executing program 0 (id=666): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) 1.662338924s ago: executing program 1 (id=709): ioprio_set$uid(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r3}, &(0x7f0000000040)=""/248, 0xf8, &(0x7f0000000200)={&(0x7f0000000740)={'rmd160\x00'}}) 1.661782982s ago: executing program 3 (id=521): unshare(0x66000080) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="32010000000000102505a8a44000010203010902"], 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x48) 344.148958ms ago: executing program 1 (id=710): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 307.135724ms ago: executing program 2 (id=711): r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000c80)={{}, {r2}}) 176.033728ms ago: executing program 2 (id=712): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000006c0)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="a90500000000fd00000100338bb335529f56ed5c7a535071b312f933e594182008b348bf13f99f647c101d25", 0x2c}], 0x1}}], 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/95, 0x5f}], 0x2}, 0x0) 51.954044ms ago: executing program 2 (id=713): r0 = socket$inet6(0xa, 0x1, 0x100) listen(r0, 0x0) 0s ago: executing program 1 (id=714): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): ort 1(bridge_slave_0) entered blocking state [ 244.856555][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.897901][ T2568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.920371][ T2568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.999107][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.006358][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.976940][ T6023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.546078][ T6023] veth0_vlan: entered promiscuous mode [ 246.646060][ T6023] veth1_vlan: entered promiscuous mode [ 246.953471][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.968542][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.984331][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.990095][ T6289] x_tables: unsorted entry at hook 3 [ 247.007822][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.023655][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.040565][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.269415][ T6023] veth0_macvtap: entered promiscuous mode [ 247.400459][ T29] audit: type=1400 audit(1722453841.177:311): avc: denied { read } for pid=6294 comm="syz.4.245" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.482357][ T29] audit: type=1400 audit(1722453841.177:312): avc: denied { open } for pid=6294 comm="syz.4.245" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 247.517216][ T2568] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.544646][ T29] audit: type=1400 audit(1722453841.187:313): avc: denied { create } for pid=6294 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.608289][ T6093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.633876][ T6023] veth1_macvtap: entered promiscuous mode [ 247.771340][ T2568] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.923779][ T2568] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.121287][ T2568] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.372295][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.384999][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.428884][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.481672][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.492276][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 248.521913][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.561771][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.604489][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.728605][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.763643][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.786473][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.797479][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.820197][ T6023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.862354][ T6023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.891159][ T6023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.007089][ T6023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.024762][ T6023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.040148][ T6023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.049887][ T6023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.105684][ T5223] Bluetooth: hci0: command tx timeout [ 249.945499][ T6093] veth0_vlan: entered promiscuous mode [ 249.993433][ T2568] bridge_slave_1: left allmulticast mode [ 250.007803][ T2568] bridge_slave_1: left promiscuous mode [ 250.028098][ T2568] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.069844][ T2568] bridge_slave_0: left allmulticast mode [ 250.096330][ T2568] bridge_slave_0: left promiscuous mode [ 250.105998][ T2568] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.117933][ T29] audit: type=1400 audit(1722453843.877:314): avc: denied { setopt } for pid=6337 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.208773][ T29] audit: type=1400 audit(1722453843.937:315): avc: denied { bind } for pid=6337 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.274855][ T29] audit: type=1400 audit(1722453844.017:316): avc: denied { write } for pid=6337 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.272961][ T5223] Bluetooth: hci0: command tx timeout [ 252.197454][ T2568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.261452][ T2568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.289517][ T2568] bond0 (unregistering): Released all slaves [ 252.441310][ T6290] chnl_net:caif_netlink_parms(): no params data found [ 252.579271][ T6093] veth1_vlan: entered promiscuous mode [ 253.341925][ T5223] Bluetooth: hci0: command tx timeout [ 255.422051][ T5223] Bluetooth: hci0: command tx timeout [ 258.033134][ T46] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 258.061755][ T2568] hsr_slave_0: left promiscuous mode [ 258.082832][ T2568] hsr_slave_1: left promiscuous mode [ 258.102848][ T2568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.110515][ T2568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.123022][ T2568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.130487][ T2568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.341995][ T2568] veth1_macvtap: left promiscuous mode [ 258.358545][ T2568] veth0_macvtap: left promiscuous mode [ 258.364279][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 258.548133][ T2568] veth1_vlan: left promiscuous mode [ 258.563429][ T2568] veth0_vlan: left promiscuous mode [ 258.571939][ T46] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 258.581027][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.748457][ T46] usb 5-1: Product: syz [ 259.841936][ T46] usb 5-1: Manufacturer: syz [ 259.907415][ T46] usb 5-1: SerialNumber: syz [ 259.918650][ T46] usb 5-1: config 0 descriptor?? [ 259.928201][ T46] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 259.938751][ T46] usb 5-1: Detected FT232H [ 260.120634][ T29] audit: type=1400 audit(1722453853.797:317): avc: denied { listen } for pid=6386 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.218512][ T29] audit: type=1400 audit(1722453853.797:318): avc: denied { connect } for pid=6386 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.344491][ T29] audit: type=1400 audit(1722453853.797:319): avc: denied { write } for pid=6386 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.489431][ T29] audit: type=1400 audit(1722453854.277:320): avc: denied { mount } for pid=6376 comm="syz.4.257" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 261.430917][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.437506][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.764958][ T2568] team0 (unregistering): Port device team_slave_1 removed [ 261.836351][ T2568] team0 (unregistering): Port device team_slave_0 removed [ 262.637906][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.647604][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.788932][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.807142][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.814673][ T6290] bridge_slave_0: entered allmulticast mode [ 262.825481][ T6290] bridge_slave_0: entered promiscuous mode [ 262.900347][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.912387][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.919718][ T6290] bridge_slave_1: entered allmulticast mode [ 262.928321][ T6290] bridge_slave_1: entered promiscuous mode [ 262.939325][ T6093] veth0_macvtap: entered promiscuous mode [ 263.297323][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.328651][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.344563][ T6093] veth1_macvtap: entered promiscuous mode [ 263.385290][ T5346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.436924][ T5346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.532521][ T29] audit: type=1400 audit(1722453857.317:321): avc: denied { mount } for pid=6023 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.647188][ T6290] team0: Port device team_slave_0 added [ 263.692730][ T6290] team0: Port device team_slave_1 added [ 263.736783][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.791670][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.811720][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.843672][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.874019][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.999740][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.030818][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.279290][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.446151][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.456728][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.467902][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.478489][ T6093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.489398][ T6093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.510011][ T29] audit: type=1400 audit(1722453858.147:322): avc: denied { ioctl } for pid=6400 comm="syz.1.101" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 265.073463][ T6093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.275912][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 265.292011][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 265.303275][ T46] ftdi_sio 5-1:0.0: GPIO initialisation failed: -32 [ 265.340677][ T46] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 265.373433][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.400107][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.501367][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.566292][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.609501][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.674846][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.723827][ T6093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.753896][ T6093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.804992][ T6093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.841806][ T6093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.438581][ T6290] hsr_slave_0: entered promiscuous mode [ 266.474502][ T6290] hsr_slave_1: entered promiscuous mode [ 266.481031][ T6290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.513443][ T6290] Cannot create hsr debugfs directory [ 266.765987][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 266.777148][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 266.785803][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 266.797499][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 266.805878][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 266.813525][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.382568][ T2568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.390602][ T2568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.098242][ T6431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.155674][ T46] usb 5-1: USB disconnect, device number 7 [ 268.250007][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 268.275750][ T46] ftdi_sio 5-1:0.0: device disconnected [ 268.392732][ T2568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.441899][ T2568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.508928][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.861811][ T5233] Bluetooth: hci1: command tx timeout [ 268.984283][ T6453] x_tables: ip_tables: osf match: only valid for protocol 6 [ 269.049315][ T29] audit: type=1326 audit(1722453862.837:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6449 comm="syz.1.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x0 [ 270.624418][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.859191][ T6464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.997800][ T5233] Bluetooth: hci1: command tx timeout [ 271.210132][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.914929][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.022119][ T5233] Bluetooth: hci1: command tx timeout [ 273.185327][ T29] audit: type=1400 audit(1722453866.947:324): avc: denied { ioctl } for pid=6485 comm="syz.1.274" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 273.219678][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 273.252567][ T12] bridge_slave_1: left allmulticast mode [ 273.258260][ T12] bridge_slave_1: left promiscuous mode [ 273.556553][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.678980][ T12] bridge_slave_0: left allmulticast mode [ 273.721726][ T12] bridge_slave_0: left promiscuous mode [ 273.732877][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.744980][ T29] audit: type=1400 audit(1722453867.497:325): avc: denied { mount } for pid=6485 comm="syz.1.274" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 274.143187][ T29] audit: type=1400 audit(1722453867.937:326): avc: denied { ioctl } for pid=6495 comm="syz.2.276" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 274.456656][ T29] audit: type=1400 audit(1722453868.247:327): avc: denied { bind } for pid=6495 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.101806][ T5233] Bluetooth: hci1: command tx timeout [ 275.171465][ T29] audit: type=1400 audit(1722453868.957:328): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.644896][ T52] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.756359][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.776425][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.804946][ T12] bond0 (unregistering): Released all slaves [ 275.894879][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.931476][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.971636][ T52] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 275.991145][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.059157][ T52] usb 2-1: config 0 descriptor?? [ 276.497770][ T6513] trusted_key: syz.0.279 sent an empty control message without MSG_MORE. [ 276.697875][ T52] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 276.748493][ T52] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 276.761689][ T52] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 276.769033][ T52] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 276.775971][ T6290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.826191][ T52] holtek 0003:1241:5015.0001: unknown main item tag 0x0 [ 276.884196][ T52] holtek 0003:1241:5015.0001: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 276.946975][ T52] holtek 0003:1241:5015.0001: no inputs found [ 277.186794][ T52] usb 2-1: USB disconnect, device number 3 [ 277.349414][ T6290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.823402][ T6290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.899626][ T29] audit: type=1400 audit(1722453873.687:329): avc: denied { create } for pid=6530 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.001369][ T29] audit: type=1400 audit(1722453873.727:330): avc: denied { connect } for pid=6530 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.066548][ T6290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.161755][ T29] audit: type=1400 audit(1722453873.827:331): avc: denied { ioctl } for pid=6530 comm="syz.2.282" path="socket:[14138]" dev="sockfs" ino=14138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.297945][ T29] audit: type=1400 audit(1722453873.877:332): avc: denied { write } for pid=6530 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.499542][ T12] hsr_slave_0: left promiscuous mode [ 280.558897][ T12] hsr_slave_1: left promiscuous mode [ 280.611906][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.619529][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.653216][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.660749][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.798377][ T12] veth1_macvtap: left promiscuous mode [ 280.831746][ T12] veth0_macvtap: left promiscuous mode [ 280.859722][ T12] veth1_vlan: left promiscuous mode [ 280.871037][ T12] veth0_vlan: left promiscuous mode [ 281.184877][ T29] audit: type=1400 audit(1722453874.967:333): avc: denied { mounton } for pid=6546 comm="syz.2.284" path="/proc/272/task" dev="proc" ino=13286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 282.261842][ T6560] input: syz0 as /devices/virtual/input/input12 [ 282.660378][ T12] team0 (unregistering): Port device team_slave_1 removed [ 282.730162][ T12] team0 (unregistering): Port device team_slave_0 removed [ 283.662799][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.698579][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.736714][ T6427] bridge_slave_0: entered allmulticast mode [ 283.766267][ T6427] bridge_slave_0: entered promiscuous mode [ 283.907285][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.934106][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.960938][ T6427] bridge_slave_1: entered allmulticast mode [ 283.979609][ T6427] bridge_slave_1: entered promiscuous mode [ 284.466252][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.535651][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.843161][ T6427] team0: Port device team_slave_0 added [ 284.983218][ T6427] team0: Port device team_slave_1 added [ 285.118406][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.132278][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.190089][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.275668][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.294883][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.336527][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.573948][ T6427] hsr_slave_0: entered promiscuous mode [ 285.624421][ T6427] hsr_slave_1: entered promiscuous mode [ 285.634238][ T6427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.675142][ T6427] Cannot create hsr debugfs directory [ 285.711763][ T52] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 285.931659][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 285.973032][ T52] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 286.001799][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.029441][ T52] usb 3-1: Product: syz [ 286.038286][ T52] usb 3-1: Manufacturer: syz [ 286.051984][ T52] usb 3-1: SerialNumber: syz [ 286.061436][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.069927][ T52] usb 3-1: config 0 descriptor?? [ 286.113631][ T52] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 286.149781][ T52] usb 3-1: Detected FT232H [ 287.619039][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.135252][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.142602][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.246338][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.253633][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.292038][ T29] audit: type=1400 audit(1722453883.917:334): avc: denied { create } for pid=6599 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 291.077628][ T29] audit: type=1400 audit(1722453883.947:335): avc: denied { ioctl } for pid=6599 comm="syz.1.291" path="socket:[14570]" dev="sockfs" ino=14570 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 291.183467][ T52] ftdi_sio ttyUSB0: Unable to read latency timer: -110 [ 291.228111][ T52] ftdi_sio ttyUSB0: Unable to write latency timer: -32 [ 291.289049][ T52] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 291.316191][ T52] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 291.614694][ T6616] sg_read: process 48 (syz.1.292) changed security contexts after opening file descriptor, this is not allowed. [ 292.382278][ T29] audit: type=1400 audit(1722453885.387:336): avc: denied { compute_member } for pid=6609 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 292.424401][ T6427] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.445318][ T25] usb 3-1: USB disconnect, device number 9 [ 292.518968][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 292.554175][ T25] ftdi_sio 3-1:0.0: device disconnected [ 292.568684][ T6427] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.719082][ T6427] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.770087][ T6427] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.456395][ T6636] x_tables: unsorted entry at hook 3 [ 293.462755][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.657101][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.681237][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.824596][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.831921][ T5273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.899473][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.906724][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.287725][ T6290] veth0_vlan: entered promiscuous mode [ 294.414665][ T6427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.527386][ T6290] veth1_vlan: entered promiscuous mode [ 294.708478][ T29] audit: type=1400 audit(1722453888.497:337): avc: denied { bind } for pid=6655 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.898605][ T6290] veth0_macvtap: entered promiscuous mode [ 294.946296][ T6290] veth1_macvtap: entered promiscuous mode [ 296.106257][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.161658][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.196834][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.271722][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.311024][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.363834][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.427517][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.496743][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.531601][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.571628][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.609471][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.644120][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.658091][ T5233] Bluetooth: to_multiplier 42238 > 3200 [ 296.671117][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.693757][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.806793][ T6290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.848235][ T6290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.882125][ T6290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.914823][ T6290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.212745][ T29] audit: type=1400 audit(1722453890.927:338): avc: denied { connect } for pid=6676 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 297.306085][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.491682][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.523744][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.702744][ T5233] Bluetooth: hci5: command tx timeout [ 298.767947][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.795569][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.840349][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 300.150583][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 301.425682][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 301.454936][ T25] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 301.496330][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.519168][ T25] usb 3-1: Product: syz [ 301.541026][ T25] usb 3-1: Manufacturer: syz [ 301.556422][ T25] usb 3-1: SerialNumber: syz [ 301.597985][ T25] usb 3-1: config 0 descriptor?? [ 302.250457][ T29] audit: type=1400 audit(1722453896.007:339): avc: denied { create } for pid=6703 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 304.121735][ T29] audit: type=1400 audit(1722453896.017:340): avc: denied { read } for pid=6703 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 304.353016][ T25] usb 3-1: can't set config #0, error -71 [ 304.367835][ T25] usb 3-1: USB disconnect, device number 10 [ 304.678408][ T6427] veth0_vlan: entered promiscuous mode [ 304.780932][ T6427] veth1_vlan: entered promiscuous mode [ 305.219347][ T29] audit: type=1400 audit(1722453899.007:341): avc: denied { write } for pid=6716 comm="syz.2.318" name="renderD128" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 305.886485][ T6427] veth0_macvtap: entered promiscuous mode [ 305.939334][ T29] audit: type=1400 audit(1722453899.087:342): avc: denied { create } for pid=6719 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 305.954702][ T6427] veth1_macvtap: entered promiscuous mode [ 306.179553][ T29] audit: type=1400 audit(1722453899.097:343): avc: denied { setopt } for pid=6719 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.309028][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.337431][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.395918][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.443420][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.316521][ T29] audit: type=1400 audit(1722453900.327:344): avc: denied { create } for pid=6730 comm="syz.3.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 307.387404][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.442807][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.481684][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.515510][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.534139][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.554314][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.600614][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.614696][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.630075][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.653165][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.694225][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.741862][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 307.749562][ T6427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.783148][ T6427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.797254][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.811453][ T6427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.822644][ T6427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.831479][ T6427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.879825][ T6427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.962697][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 307.979728][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 308.015315][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.075901][ T9] usb 4-1: Product: syz [ 308.110951][ T9] usb 4-1: Manufacturer: syz [ 308.125100][ T9] usb 4-1: SerialNumber: syz [ 308.149161][ T9] usb 4-1: config 0 descriptor?? [ 308.228720][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 308.505376][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.534677][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.705724][ T9] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 308.739991][ T9] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 308.796966][ T9] usb 4-1: USB disconnect, device number 6 [ 308.803346][ T2581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.843444][ T2581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.533102][ T29] audit: type=1400 audit(1722453904.487:345): avc: denied { shutdown } for pid=6749 comm="syz.4.261" lport=52026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.148722][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.551947][ T29] audit: type=1400 audit(1722453905.897:346): avc: denied { ioctl } for pid=6755 comm="syz.1.328" path="socket:[15219]" dev="sockfs" ino=15219 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 313.681961][ T29] audit: type=1400 audit(1722453906.037:347): avc: denied { create } for pid=6755 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.751382][ T29] audit: type=1400 audit(1722453906.077:348): avc: denied { read } for pid=6755 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.807409][ T29] audit: type=1400 audit(1722453906.097:349): avc: denied { connect } for pid=6755 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.915285][ T29] audit: type=1400 audit(1722453906.107:350): avc: denied { write } for pid=6755 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 313.979178][ T29] audit: type=1400 audit(1722453906.127:351): avc: denied { create } for pid=6755 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.031667][ T29] audit: type=1400 audit(1722453906.187:352): avc: denied { write } for pid=6755 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 314.099629][ T5208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 314.144738][ T29] audit: type=1400 audit(1722453907.577:353): avc: denied { getopt } for pid=6762 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 314.281978][ T29] audit: type=1400 audit(1722453907.577:354): avc: denied { bind } for pid=6759 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.314763][ T5208] usb 5-1: Using ep0 maxpacket: 32 [ 314.337901][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 314.341679][ T29] audit: type=1400 audit(1722453907.587:355): avc: denied { setopt } for pid=6759 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.380994][ T6775] Cannot find del_set index 0 as target [ 314.400870][ T5208] usb 5-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=cc.96 [ 314.436511][ T5208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.482701][ T5208] usb 5-1: Product: syz [ 314.514161][ T5208] usb 5-1: Manufacturer: syz [ 314.529190][ T5208] usb 5-1: SerialNumber: syz [ 314.591295][ T5208] usb 5-1: config 0 descriptor?? [ 314.938836][ T5208] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.973654][ T6779] binder: Unknown parameter 's„Tu“tats' [ 315.077112][ T5208] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 315.218543][ T5208] usb 5-1: USB disconnect, device number 8 [ 315.985108][ T5213] udevd[5213]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 316.291735][ T5270] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 316.512077][ T5270] usb 1-1: Using ep0 maxpacket: 8 [ 316.527617][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.555604][ T5270] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.592418][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.639773][ T5270] usb 1-1: config 0 descriptor?? [ 317.026886][ T5270] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 318.101543][ C0] sched: RT throttling activated [ 319.171226][ T6808] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 319.312083][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 319.312137][ T29] audit: type=1400 audit(1722453913.047:361): avc: denied { read } for pid=6792 comm="syz.1.343" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 319.832373][ T6807] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 319.891743][ T29] audit: type=1400 audit(1722453913.047:362): avc: denied { open } for pid=6792 comm="syz.1.343" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 320.087741][ T5208] usb 1-1: USB disconnect, device number 4 [ 320.121729][ T29] audit: type=1400 audit(1722453913.077:363): avc: denied { ioctl } for pid=6792 comm="syz.1.343" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 320.194527][ T5208] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 320.462098][ T6823] netlink: 'syz.4.346': attribute type 22 has an invalid length. [ 321.900331][ T29] audit: type=1400 audit(1722453915.687:364): avc: denied { ioctl } for pid=6838 comm="syz.1.355" path="socket:[16135]" dev="sockfs" ino=16135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 321.942703][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 322.057023][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 322.165428][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 322.205179][ T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 322.267603][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.357619][ T8] usb 4-1: Product: syz [ 322.387279][ T8] usb 4-1: Manufacturer: syz [ 322.445602][ T8] usb 4-1: SerialNumber: syz [ 322.528234][ T8] usb 4-1: config 0 descriptor?? [ 322.573966][ T8] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 322.716852][ T8] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 322.839719][ T8] radio-raremono 4-1:0.0: this is not Thanko's Raremono. [ 322.871419][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.888293][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.888502][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 322.947671][ T8] usb 4-1: USB disconnect, device number 7 [ 324.061887][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 324.253797][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 324.274969][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.294854][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 324.326722][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.369842][ T8] usb 4-1: config 0 descriptor?? [ 324.739338][ T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 324.804962][ T29] audit: type=1400 audit(1722453918.597:365): avc: denied { create } for pid=6867 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.853257][ T29] audit: type=1400 audit(1722453918.627:366): avc: denied { bind } for pid=6867 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.902587][ T29] audit: type=1400 audit(1722453918.627:367): avc: denied { write } for pid=6867 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 325.054557][ T29] audit: type=1400 audit(1722453918.677:368): avc: denied { connect } for pid=6865 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 326.101760][ T52] usb 4-1: USB disconnect, device number 8 [ 326.155071][ T52] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 326.390958][ T6893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.391075][ T29] audit: type=1400 audit(1722453920.177:369): avc: denied { getattr } for pid=6891 comm="syz.1.371" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 326.587442][ T29] audit: type=1400 audit(1722453920.377:370): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 326.969182][ T29] audit: type=1326 audit(1722453920.747:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.1.373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x0 [ 328.302090][ T29] audit: type=1400 audit(1722453922.087:372): avc: denied { read } for pid=6920 comm="syz.2.381" name="fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 328.588187][ T29] audit: type=1400 audit(1722453922.087:373): avc: denied { open } for pid=6920 comm="syz.2.381" path="/dev/fb0" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 329.559947][ T29] audit: type=1400 audit(1722453922.377:374): avc: denied { ioctl } for pid=6920 comm="syz.2.381" path="/dev/fb0" dev="devtmpfs" ino=631 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 329.584878][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.682017][ T29] audit: type=1400 audit(1722453924.467:375): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 331.115757][ T29] audit: type=1326 audit(1722453924.907:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6954 comm="syz.0.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63b15773b9 code=0x0 [ 331.301311][ T6966] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 331.467915][ T29] audit: type=1400 audit(1722453925.257:377): avc: denied { connect } for pid=6969 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.538118][ T6970] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 331.545179][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 331.646748][ T6970] vhci_hcd vhci_hcd.0: Device attached [ 332.971300][ T5208] usb 14-1: SetAddress Request (2) to port 0 [ 332.983944][ T5208] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 333.074768][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 333.138877][ T6987] netlink: 224 bytes leftover after parsing attributes in process `syz.0.398'. [ 333.229837][ T6971] vhci_hcd: connection reset by peer [ 333.264177][ T2545] vhci_hcd: stop threads [ 333.283160][ T2545] vhci_hcd: release socket [ 333.290268][ T2545] vhci_hcd: disconnect device [ 333.823616][ T6995] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.877783][ T6995] vhci_hcd: invalid port number 10 [ 333.956914][ T6995] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 334.759391][ T5273] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 334.992750][ T5273] usb 4-1: Using ep0 maxpacket: 32 [ 335.028237][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.077840][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.126883][ T5273] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.167397][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.243721][ T5273] usb 4-1: config 0 descriptor?? [ 335.292660][ T5273] hub 4-1:0.0: USB hub found [ 335.545803][ T5273] hub 4-1:0.0: 1 port detected [ 336.200442][ T29] audit: type=1400 audit(1722453929.987:378): avc: denied { read } for pid=7019 comm="syz.4.412" path="socket:[16563]" dev="sockfs" ino=16563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 336.222928][ T5223] Bluetooth: hci5: command 0x206a tx timeout [ 336.231257][ T5233] Bluetooth: hci5: Opcode 0x206a failed: -110 [ 336.544702][ T5273] hub 4-1:0.0: activate --> -90 [ 336.551006][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 336.973511][ T5283] usb 4-1: USB disconnect, device number 9 [ 336.982127][ T5273] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 337.021780][ T5273] usb 4-1-port1: connect-debounce failed [ 337.431483][ T29] audit: type=1400 audit(1722453931.207:379): avc: denied { unmount } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 337.461782][ T52] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 337.681919][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 337.695829][ T52] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 337.738065][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.767019][ T52] usb 3-1: Product: syz [ 337.772201][ T52] usb 3-1: Manufacturer: syz [ 337.776993][ T52] usb 3-1: SerialNumber: syz [ 337.855608][ T52] usb 3-1: config 0 descriptor?? [ 337.889076][ T52] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 337.912720][ T52] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 338.142823][ T5208] usb 14-1: device descriptor read/8, error -110 [ 338.234395][ T52] radio-raremono 3-1:0.0: this is not Thanko's Raremono. [ 338.258095][ T52] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 338.337090][ T52] usb 3-1: USB disconnect, device number 11 [ 338.621484][ T5208] usb usb14-port1: attempt power cycle [ 338.794660][ T7052] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 338.831051][ T5233] Bluetooth: hci5: link tx timeout [ 338.843925][ T5233] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 339.190668][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 339.326468][ T5208] usb usb14-port1: unable to enumerate USB device [ 339.441764][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 339.478405][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 339.613903][ T8] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 339.636096][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.687983][ T29] audit: type=1400 audit(1722453933.447:380): avc: denied { remount } for pid=7062 comm="syz.2.426" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 339.719198][ T8] usb 5-1: Product: syz [ 339.731972][ T8] usb 5-1: Manufacturer: syz [ 339.738532][ T8] usb 5-1: SerialNumber: syz [ 339.772464][ T8] usb 5-1: config 0 descriptor?? [ 339.821312][ T29] audit: type=1400 audit(1722453933.607:381): avc: denied { mounton } for pid=7062 comm="syz.2.426" path="/120/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 339.843575][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.854465][ T8] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 339.894570][ T8] usb 5-1: Detected FT232R [ 340.072484][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 340.310318][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 340.340515][ T8] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 340.829088][ T52] usb 5-1: USB disconnect, device number 9 [ 340.861938][ T5223] Bluetooth: hci5: command 0x206a tx timeout [ 341.283598][ T52] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 341.363189][ T7088] pim6reg1: entered promiscuous mode [ 341.368601][ T7088] pim6reg1: entered allmulticast mode [ 342.775202][ T52] ftdi_sio 5-1:0.0: device disconnected [ 343.297621][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 343.501083][ T7105] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.435'. [ 343.521643][ T9] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 343.587700][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 343.623091][ T7108] netlink: 44 bytes leftover after parsing attributes in process `syz.3.436'. [ 343.632212][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.652987][ T9] usb 2-1: Product: syz [ 343.662288][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.436'. [ 343.673175][ T9] usb 2-1: Manufacturer: syz [ 343.679864][ T9] usb 2-1: SerialNumber: syz [ 343.689070][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.718279][ T9] usb 2-1: config 0 descriptor?? [ 343.728022][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.735900][ T7108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.748862][ T9] usb 2-1: bad CDC descriptors [ 343.759828][ T9] option 2-1:0.0: GSM modem (1-port) converter detected [ 344.000970][ T5270] usb 2-1: USB disconnect, device number 4 [ 344.043478][ T5270] option 2-1:0.0: device disconnected [ 344.071810][ T52] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 344.094616][ T5223] Bluetooth: hci4: sending frame failed (-49) [ 344.102745][ T5233] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 344.301963][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 344.316250][ T52] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 344.333962][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.359484][ T52] usb 5-1: Product: syz [ 344.369279][ T52] usb 5-1: Manufacturer: syz [ 344.384057][ T52] usb 5-1: SerialNumber: syz [ 344.413061][ T52] usb 5-1: config 0 descriptor?? [ 344.456544][ T52] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 344.483447][ T29] audit: type=1326 audit(1722453938.277:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7121 comm="syz.0.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63b15773b9 code=0x0 [ 344.511906][ T52] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 344.747254][ T7119] vxfs: WRONG superblock magic 00000000 at 1 [ 344.765780][ T7119] vxfs: WRONG superblock magic 00000000 at 8 [ 344.772799][ T7119] vxfs: can't find superblock. [ 344.795876][ T52] radio-raremono 5-1:0.0: this is not Thanko's Raremono. [ 344.816297][ T52] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 344.843759][ T52] usb 5-1: USB disconnect, device number 10 [ 345.386355][ T7134] netlink: 224 bytes leftover after parsing attributes in process `syz.2.446'. [ 345.435166][ T52] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 345.545814][ T29] audit: type=1400 audit(1722453939.337:383): avc: denied { create } for pid=7137 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 345.631767][ T29] audit: type=1400 audit(1722453939.337:384): avc: denied { setopt } for pid=7137 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 345.721952][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 345.734665][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 345.753233][ T52] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 345.763213][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.771267][ T52] usb 2-1: Product: syz [ 345.795906][ T52] usb 2-1: Manufacturer: syz [ 345.800579][ T52] usb 2-1: SerialNumber: syz [ 345.847013][ T52] usb 2-1: config 0 descriptor?? [ 345.874541][ T52] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 345.900966][ T7145] loop7: detected capacity change from 0 to 16384 [ 345.913715][ T52] usb 2-1: Detected FT232R [ 346.172244][ T52] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 346.406892][ T52] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 346.732043][ T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 346.770562][ T5270] usb 2-1: USB disconnect, device number 5 [ 346.805131][ T5270] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 346.835466][ T5270] ftdi_sio 2-1:0.0: device disconnected [ 346.955170][ T52] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 346.994684][ T52] usb 1-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 347.008319][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.028755][ T52] usb 1-1: Product: syz [ 347.055764][ T52] usb 1-1: Manufacturer: syz [ 347.070028][ T52] usb 1-1: SerialNumber: syz [ 347.083780][ T52] usb 1-1: config 0 descriptor?? [ 347.097564][ T52] usb 1-1: bad CDC descriptors [ 347.106032][ T52] option 1-1:0.0: GSM modem (1-port) converter detected [ 347.290825][ T7166] pim6reg1: entered promiscuous mode [ 347.299640][ T7166] pim6reg1: entered allmulticast mode [ 347.303013][ T7165] netlink: 224 bytes leftover after parsing attributes in process `syz.4.459'. [ 347.396157][ C0] eth0: bad gso: type: 1, size: 1408 [ 347.431094][ T5270] usb 1-1: USB disconnect, device number 5 [ 347.438996][ T5270] option 1-1:0.0: device disconnected [ 348.202460][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 348.558878][ T5223] Bluetooth: hci4: command 0x1003 tx timeout [ 348.664597][ T5233] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 349.165329][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 349.246354][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.329668][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.380520][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 349.438562][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 349.467135][ T25] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 349.511059][ T25] usb 5-1: Manufacturer: syz [ 349.533872][ T7184] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 349.608797][ T7184] CIFS mount error: No usable UNC path provided in device string! [ 349.608797][ T7184] [ 349.633446][ T25] usb 5-1: config 0 descriptor?? [ 349.649938][ T7184] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 350.026866][ T29] audit: type=1400 audit(1722453943.797:385): avc: denied { write } for pid=7182 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 350.837211][ T25] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 350.864366][ T25] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 350.894506][ T25] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 350.914773][ T25] usb 5-1: USB disconnect, device number 11 [ 351.026179][ T7203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.471'. [ 351.104447][ T7205] veth0_vlan: entered allmulticast mode [ 351.125117][ T7207] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 351.171875][ T7207] vhci_hcd: invalid port number 10 [ 351.177065][ T7207] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 351.454641][ T7205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.470'. [ 351.604593][ T7220] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.475'. [ 351.722014][ T5271] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 351.934346][ T5271] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 351.971299][ T5271] usb 4-1: New USB device found, idVendor=12d1, idProduct=1442, bcdDevice=b1.19 [ 352.005039][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.029182][ T5271] usb 4-1: Product: syz [ 352.042021][ T5271] usb 4-1: Manufacturer: syz [ 352.069094][ T5271] usb 4-1: SerialNumber: syz [ 352.089583][ T5271] usb 4-1: config 0 descriptor?? [ 352.107114][ T5271] usb 4-1: bad CDC descriptors [ 352.123161][ T5271] option 4-1:0.0: GSM modem (1-port) converter detected [ 353.421701][ T5233] Bluetooth: hci3: command 0x0406 tx timeout [ 353.428242][ T5223] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 353.867449][ T5208] usb 4-1: USB disconnect, device number 10 [ 353.876158][ T5208] option 4-1:0.0: device disconnected [ 354.392912][ T7239] vxfs: WRONG superblock magic 00000000 at 1 [ 354.435893][ T7239] vxfs: WRONG superblock magic 00000000 at 8 [ 355.355534][ T7239] vxfs: can't find superblock. [ 355.792131][ T5271] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 355.822020][ T5233] Bluetooth: hci4: command 0x1003 tx timeout [ 355.829427][ T5223] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 355.832883][ T7256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.486'. [ 355.973569][ T5270] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 356.009794][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.031741][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 356.048408][ T5271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 356.066279][ T5271] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 356.095177][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.126882][ T5271] usb 5-1: config 0 descriptor?? [ 356.145419][ T5271] gspca_main: spca561-2.14.0 probing abcd:cdee [ 356.174381][ T5270] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 356.191107][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.221106][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.265342][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 356.299579][ T5270] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 356.323945][ T5270] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 356.350033][ T5270] usb 4-1: Manufacturer: syz [ 356.405437][ T5270] usb 4-1: config 0 descriptor?? [ 356.469364][ T5271] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 356.523626][ T5271] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 356.546423][ T7264] ======================================================= [ 356.546423][ T7264] WARNING: The mand mount option has been deprecated and [ 356.546423][ T7264] and is ignored by this kernel. Remove the mand [ 356.546423][ T7264] option from the mount to silence this warning. [ 356.546423][ T7264] ======================================================= [ 356.548916][ T5271] usb 5-1: MIDIStreaming interface descriptor not found [ 356.581419][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.654909][ T5223] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 357.735714][ T29] audit: type=1400 audit(1722453950.887:386): avc: denied { write } for pid=7268 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 357.740415][ T5270] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 357.908922][ T5271] usb 5-1: USB disconnect, device number 12 [ 358.227033][ T5270] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 358.601337][ T5270] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 358.983701][ T5270] usb 4-1: USB disconnect, device number 11 [ 360.825275][ T5223] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 360.837352][ T5223] Bluetooth: hci3: Injecting HCI hardware error event [ 360.848325][ T5233] Bluetooth: hci3: hardware error 0x00 [ 361.811822][ T6529] udevd[6529]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.008357][ T29] audit: type=1326 audit(1722453955.797:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.061008][ T29] audit: type=1326 audit(1722453955.797:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.139982][ T29] audit: type=1326 audit(1722453955.827:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.214607][ T29] audit: type=1326 audit(1722453955.827:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.309654][ T29] audit: type=1326 audit(1722453955.827:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.340331][ T29] audit: type=1326 audit(1722453955.827:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.386999][ T29] audit: type=1326 audit(1722453955.827:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.435211][ T29] audit: type=1326 audit(1722453955.827:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.528265][ T29] audit: type=1326 audit(1722453955.827:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7365 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8963d773b9 code=0x7ffc0000 [ 362.755506][ T5345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.971980][ T5345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.129096][ T5345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.183282][ T5233] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 363.375428][ T5345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.947796][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 363.947846][ T29] audit: type=1400 audit(1722453957.737:402): avc: denied { watch } for pid=7385 comm="syz.3.505" path="/34/net_prio.prioidx" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 363.977586][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.066054][ T7401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.509'. [ 364.143939][ T29] audit: type=1400 audit(1722453957.737:403): avc: denied { watch_sb } for pid=7385 comm="syz.3.505" path="/34/net_prio.prioidx" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 364.294094][ T5345] bridge_slave_1: left allmulticast mode [ 364.304934][ T5345] bridge_slave_1: left promiscuous mode [ 364.322116][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.365690][ T5345] bridge_slave_0: left allmulticast mode [ 364.371414][ T5345] bridge_slave_0: left promiscuous mode [ 364.391859][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.420064][ T29] audit: type=1400 audit(1722453958.207:404): avc: denied { ioctl } for pid=7406 comm="syz.2.511" path="socket:[18305]" dev="sockfs" ino=18305 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 364.479950][ T5223] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.489715][ T5223] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.497917][ T5223] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.525427][ T5223] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.618634][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 364.742901][ T5223] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 364.753742][ T5223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.812172][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 364.837995][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.905732][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.919610][ T25] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 364.931619][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.172354][ T25] usb 2-1: config 0 descriptor?? [ 366.137596][ T29] audit: type=1400 audit(1722453959.867:405): avc: denied { read } for pid=7403 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.956114][ T5223] Bluetooth: hci4: command tx timeout [ 367.160916][ T5345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.191278][ T5345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.214129][ T5345] bond0 (unregistering): Released all slaves [ 367.234096][ T29] audit: type=1400 audit(1722453961.027:406): avc: denied { bind } for pid=7417 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.254156][ T29] audit: type=1400 audit(1722453961.027:407): avc: denied { listen } for pid=7417 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.276844][ T29] audit: type=1400 audit(1722453961.027:408): avc: denied { accept } for pid=7417 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.352417][ T29] audit: type=1400 audit(1722453961.137:409): avc: denied { shutdown } for pid=7417 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 367.386377][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.512'. [ 367.576828][ T29] audit: type=1326 audit(1722453961.367:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7423 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a529773b9 code=0x7ffc0000 [ 367.626058][ T7407] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 367.731293][ T29] audit: type=1326 audit(1722453961.367:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7423 comm="syz.3.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a529773b9 code=0x7ffc0000 [ 368.070756][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 368.081097][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 368.102394][ T25] usb 2-1: USB disconnect, device number 6 [ 368.685315][ T5345] hsr_slave_0: left promiscuous mode [ 368.723584][ T5345] hsr_slave_1: left promiscuous mode [ 368.739999][ T5345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.768110][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.778892][ T5345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.794777][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.890058][ T5345] veth1_macvtap: left promiscuous mode [ 368.908571][ T5345] veth0_macvtap: left promiscuous mode [ 368.930271][ T5345] veth1_vlan: left promiscuous mode [ 369.021817][ T5233] Bluetooth: hci4: command tx timeout [ 370.754366][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.765949][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.775533][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.784626][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.810151][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 370.829871][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 371.021685][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 371.093274][ T5345] team0 (unregistering): Port device team_slave_1 removed [ 371.104530][ T5223] Bluetooth: hci4: command tx timeout [ 371.169721][ T5345] team0 (unregistering): Port device team_slave_0 removed [ 371.869914][ T7444] netlink: 'syz.4.519': attribute type 4 has an invalid length. [ 372.062233][ T5233] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 372.181189][ T7407] chnl_net:caif_netlink_parms(): no params data found [ 372.199091][ T7457] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 372.548221][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 372.942717][ T5223] Bluetooth: hci6: command tx timeout [ 372.953033][ T7472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=7472 comm=syz.1.525 [ 373.010451][ T7474] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 373.044533][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 373.044559][ T29] audit: type=1400 audit(1722453966.827:427): avc: denied { relabelfrom } for pid=7457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 373.083283][ T7466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=7466 comm=syz.1.525 [ 373.181784][ T5223] Bluetooth: hci4: command tx timeout [ 373.221679][ T29] audit: type=1400 audit(1722453966.897:428): avc: denied { relabelto } for pid=7457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 373.371865][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.401758][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.409283][ T7407] bridge_slave_0: entered allmulticast mode [ 373.444878][ T29] audit: type=1400 audit(1722453967.227:429): avc: denied { connect } for pid=7484 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 373.493616][ T7407] bridge_slave_0: entered promiscuous mode [ 373.552807][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.593701][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.601048][ T7407] bridge_slave_1: entered allmulticast mode [ 373.648411][ T7407] bridge_slave_1: entered promiscuous mode [ 373.652089][ T29] audit: type=1326 audit(1722453967.427:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 373.792507][ T29] audit: type=1326 audit(1722453967.437:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 373.910750][ T29] audit: type=1326 audit(1722453967.487:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 374.022483][ T29] audit: type=1326 audit(1722453967.487:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 374.109110][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.130475][ T29] audit: type=1326 audit(1722453967.487:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 374.206852][ T29] audit: type=1326 audit(1722453967.497:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 374.280856][ T29] audit: type=1326 audit(1722453967.497:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7486 comm="syz.1.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x7ffc0000 [ 374.320574][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.693847][ T5345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.734295][ T7407] team0: Port device team_slave_0 added [ 377.849552][ T5345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.143062][ T7407] team0: Port device team_slave_1 added [ 378.444484][ T5345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.536834][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.548059][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.561481][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.575666][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.588239][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 378.603423][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.619521][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.626866][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.655539][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.753857][ T5345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.796729][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 378.796752][ T29] audit: type=1400 audit(1722453972.587:445): avc: denied { ioctl } for pid=7516 comm="syz.2.535" path="socket:[19464]" dev="sockfs" ino=19464 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 378.831772][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.838772][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.866829][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.286335][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.537'. [ 379.364426][ T7512] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 379.454088][ T7530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=7530 comm=syz.2.537 [ 379.490318][ T7407] hsr_slave_0: entered promiscuous mode [ 379.517953][ T7407] hsr_slave_1: entered promiscuous mode [ 379.546909][ T7407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.565011][ T7407] Cannot create hsr debugfs directory [ 379.636195][ T7521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=7521 comm=syz.2.537 [ 379.756899][ T29] audit: type=1400 audit(1722453973.547:446): avc: denied { setattr } for pid=7522 comm="syz.1.538" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.767837][ T5345] bridge_slave_1: left allmulticast mode [ 380.792624][ T5345] bridge_slave_1: left promiscuous mode [ 380.798609][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.857944][ T5345] bridge_slave_0: left allmulticast mode [ 380.864368][ T5345] bridge_slave_0: left promiscuous mode [ 380.870389][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.884056][ T29] audit: type=1400 audit(1722453974.677:447): avc: denied { connect } for pid=7538 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 380.915609][ T29] audit: type=1400 audit(1722453974.687:448): avc: denied { write } for pid=7538 comm="syz.2.543" path="socket:[19542]" dev="sockfs" ino=19542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 381.223348][ T7541] block nbd2: shutting down sockets [ 381.889295][ T7552] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.549'. [ 382.047291][ T5345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.076842][ T5345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.103050][ T5345] bond0 (unregistering): Released all slaves [ 382.335035][ T7537] wireguard: wg1: Could not create IPv6 socket [ 383.153003][ T5345] hsr_slave_0: left promiscuous mode [ 383.184430][ T29] audit: type=1400 audit(1722453976.947:449): avc: denied { getopt } for pid=7555 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.206358][ T5345] hsr_slave_1: left promiscuous mode [ 383.227021][ T5345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.234703][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.244256][ T5345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.252657][ T5345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.341422][ T5345] veth1_macvtap: left promiscuous mode [ 383.356464][ T5345] veth0_macvtap: left promiscuous mode [ 383.368126][ T5345] veth1_vlan: left promiscuous mode [ 383.382330][ T5345] veth0_vlan: left promiscuous mode [ 383.521242][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 383.659741][ T7566] block nbd2: shutting down sockets [ 383.724734][ T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 383.752581][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.785605][ T9] usb 2-1: config 0 descriptor?? [ 383.903084][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 383.913136][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 383.926446][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 383.936068][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 383.950435][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 383.960168][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.245162][ T9] usb 2-1: Cannot read MAC address [ 384.258063][ T9] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 384.315897][ T1271] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 384.328974][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.341740][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.827161][ T5345] team0 (unregistering): Port device team_slave_1 removed [ 385.917543][ T5345] team0 (unregistering): Port device team_slave_0 removed [ 386.062168][ T5223] Bluetooth: hci0: command tx timeout [ 387.074888][ T7568] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 387.138180][ T5208] usb 2-1: USB disconnect, device number 7 [ 387.232629][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 387.719005][ T7638] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.561'. [ 388.124635][ T7407] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 388.156105][ T7641] trusted_key: encrypted_key: insufficient parameters specified [ 388.389191][ T7640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.562'. [ 388.447355][ T7407] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 388.628464][ T7407] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 388.763817][ T7407] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 389.488342][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.531643][ T29] audit: type=1400 audit(1722453984.297:450): avc: denied { write } for pid=7652 comm="syz.1.566" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 391.562545][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.740213][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.760351][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.768063][ T29] audit: type=1326 audit(1722453985.547:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.2.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x0 [ 391.794285][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.816725][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.824113][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.877652][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.959819][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 391.968039][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.069141][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.076545][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.256692][ T7668] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 392.395063][ T7674] syz.1.572 uses obsolete (PF_INET,SOCK_PACKET) [ 392.954707][ T7680] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.573'. [ 393.927303][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.227798][ T7407] veth0_vlan: entered promiscuous mode [ 394.261550][ T7407] veth1_vlan: entered promiscuous mode [ 394.460842][ T7407] veth0_macvtap: entered promiscuous mode [ 394.528718][ T7407] veth1_macvtap: entered promiscuous mode [ 394.986845][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.998875][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.010820][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.026250][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.037056][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.053427][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.807255][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.908637][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.971667][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.036766][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.061636][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.071687][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.090734][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.205666][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.284943][ T7407] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.311579][ T7407] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.319868][ T7407] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.351104][ T7407] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.371928][ T7407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.380755][ T7407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.411596][ T7407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.432546][ T7407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.819646][ T7407] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 396.893112][ T7407] wireguard: wg0: Could not create IPv6 socket [ 396.915441][ T7407] wireguard: wg1: Could not create IPv6 socket [ 396.998081][ T7407] wireguard: wg2: Could not create IPv6 socket [ 397.033847][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 397.049417][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 397.058561][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 397.070952][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 397.079661][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 397.087661][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 397.360836][ T7712] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 397.469091][ T2581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.517272][ T2581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.694320][ T7304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.737057][ T7304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.904749][ T7722] block nbd2: shutting down sockets [ 400.862439][ T5270] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 401.082449][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 401.116811][ T5270] usb 5-1: config index 0 descriptor too short (expected 16914, got 18) [ 401.156184][ T5270] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 401.209408][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.327829][ T5270] usb 5-1: config 0 descriptor?? [ 401.369237][ T5270] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 402.351734][ T5233] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 402.360498][ T5233] Bluetooth: hci4: Injecting HCI hardware error event [ 402.373426][ T5233] Bluetooth: hci4: hardware error 0x00 [ 402.407448][ T5270] gspca_nw80x: reg_w err -110 [ 402.413776][ T5270] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 402.718076][ T7795] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 403.024148][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 403.045974][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 403.073166][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 403.092220][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 403.101021][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 403.110588][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 403.275439][ T7799] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 404.601689][ T5233] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 404.651604][ T29] audit: type=1326 audit(1722453998.417:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7779 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c49773b9 code=0x7fc00000 [ 404.827395][ T5208] usb 5-1: USB disconnect, device number 13 [ 404.887082][ T5233] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 406.163379][ T5208] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 406.431692][ T5208] usb 1-1: Using ep0 maxpacket: 8 [ 406.466997][ T5208] usb 1-1: config 0 has an invalid interface number: 172 but max is 2 [ 406.546471][ T5208] usb 1-1: config 0 has an invalid interface number: 195 but max is 2 [ 406.623598][ T5208] usb 1-1: config 0 has no interface number 1 [ 406.650208][ T5208] usb 1-1: config 0 has no interface number 2 [ 406.728372][ T5208] usb 1-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 406.767011][ T5208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.799186][ T5208] usb 1-1: Product: syz [ 406.803971][ T5208] usb 1-1: Manufacturer: syz [ 406.808629][ T5208] usb 1-1: SerialNumber: syz [ 406.838458][ T5208] usb 1-1: config 0 descriptor?? [ 406.881098][ T5208] usb 1-1: selecting invalid altsetting 1 [ 406.897982][ T5208] usb 1-1: Could not set interface, error -22 [ 407.151840][ T5273] usb 1-1: USB disconnect, device number 6 [ 407.850718][ T7891] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.601'. [ 409.034608][ T5233] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 409.043726][ T5233] Bluetooth: hci2: Injecting HCI hardware error event [ 409.052575][ T5233] Bluetooth: hci2: hardware error 0x00 [ 410.487543][ T29] audit: type=1400 audit(1722454004.277:453): avc: denied { read } for pid=7910 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 410.680720][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 410.704253][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 410.717005][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 410.728641][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.738794][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 410.753185][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.871886][ T5270] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 410.963002][ T7914] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 411.081589][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 411.118342][ T5270] usb 1-1: config index 0 descriptor too short (expected 16914, got 18) [ 411.175291][ T5270] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 411.185509][ T5233] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 411.201890][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.216648][ T5270] usb 1-1: config 0 descriptor?? [ 411.226991][ T5270] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 412.233063][ T5270] usb 1-1: USB disconnect, device number 7 [ 415.107816][ T29] audit: type=1400 audit(1722454008.887:454): avc: denied { mount } for pid=7953 comm="syz.4.615" name="/" dev="hugetlbfs" ino=20589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 416.193903][ T29] audit: type=1400 audit(1722454009.987:455): avc: denied { create } for pid=8011 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 416.517240][ T8021] evm: overlay not supported [ 417.370066][ T29] audit: type=1400 audit(1722454011.157:456): avc: denied { unmount } for pid=6427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 417.688027][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.701212][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.712761][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.744503][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.759420][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 417.767114][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.829283][ T8031] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 418.166380][ T5270] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 418.421701][ T5270] usb 2-1: Using ep0 maxpacket: 32 [ 418.484309][ T5270] usb 2-1: config index 0 descriptor too short (expected 16914, got 18) [ 418.521653][ T5270] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 418.575608][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.692902][ T5270] usb 2-1: config 0 descriptor?? [ 418.759646][ T5270] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 419.608941][ T5283] usb 2-1: USB disconnect, device number 8 [ 422.420510][ T29] audit: type=1400 audit(1722454016.207:457): avc: denied { read } for pid=8085 comm="syz.1.633" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.520584][ T29] audit: type=1400 audit(1722454016.207:458): avc: denied { open } for pid=8085 comm="syz.1.633" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 422.627106][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.694370][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.717342][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.797046][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.808723][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 422.844194][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.854982][ T29] audit: type=1400 audit(1722454016.207:459): avc: denied { ioctl } for pid=8085 comm="syz.1.633" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 423.062116][ T29] audit: type=1400 audit(1722454016.387:460): avc: denied { append } for pid=8085 comm="syz.1.633" name="vsock" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 423.088700][ T8096] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 425.213011][ T8160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.645'. [ 426.261170][ T8160] input: syz0 as /devices/virtual/input/input13 [ 426.571776][ T5283] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 426.806567][ T5283] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 426.831706][ T5283] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 426.885741][ T5283] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 426.933583][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 426.970410][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 427.039745][ T5283] usb 5-1: string descriptor 0 read error: -22 [ 427.060459][ T5283] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 427.093867][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.171387][ T5283] usb 5-1: config 0 descriptor?? [ 427.239466][ T5283] hub 5-1:0.0: bad descriptor, ignoring hub [ 427.272948][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.286520][ T5283] hub 5-1:0.0: probe with driver hub failed with error -5 [ 427.295005][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.313685][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.326684][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.335868][ T5283] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14 [ 427.347376][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 427.355319][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.522843][ T5283] usb 5-1: USB disconnect, device number 14 [ 428.681645][ T29] audit: type=1400 audit(1722454022.467:461): avc: denied { execute } for pid=8196 comm="syz.4.650" path="/dev/bsg/cpuacct.usage_all" dev="devtmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 429.215213][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.4.652'. [ 429.314233][ T29] audit: type=1400 audit(1722454023.107:462): avc: denied { getopt } for pid=8203 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.401663][ T29] audit: type=1400 audit(1722454023.157:463): avc: denied { module_request } for pid=8203 comm="syz.4.652" kmod="net-pf-10-proto-132-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 429.450890][ T5233] Bluetooth: hci0: command tx timeout [ 429.526159][ T5233] Bluetooth: hci1: Malformed LE Event: 0x02 [ 430.055526][ T8222] input: syz0 as /devices/virtual/input/input15 [ 431.332625][ T29] audit: type=1400 audit(1722454025.127:464): avc: denied { read } for pid=8232 comm="syz.4.659" path="socket:[20935]" dev="sockfs" ino=20935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.551728][ T5283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 431.559451][ T5233] Bluetooth: hci0: command tx timeout [ 431.886245][ T5283] usb 2-1: Using ep0 maxpacket: 8 [ 432.416187][ T5283] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.431735][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.470707][ T5283] usb 2-1: Product: syz [ 432.483339][ T5283] usb 2-1: Manufacturer: syz [ 432.497064][ T5283] usb 2-1: SerialNumber: syz [ 432.517306][ T5283] usb 2-1: config 0 descriptor?? [ 433.093342][ T5283] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.591715][ T5233] Bluetooth: hci0: command tx timeout [ 434.481405][ T29] audit: type=1400 audit(1722454028.267:465): avc: denied { mounton } for pid=8248 comm="syz.4.664" path="/80/file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 435.607831][ T5283] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 435.658314][ T5283] usb 2-1: USB disconnect, device number 9 [ 435.671904][ T5233] Bluetooth: hci0: command tx timeout [ 436.024146][ T5281] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 436.252716][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 436.270683][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.323388][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.338978][ T5223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.350309][ T5223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.359298][ T5223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.399452][ T5223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.411418][ T5223] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 436.446501][ T5223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.512116][ T5281] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 436.564538][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.698459][ T5281] usb 3-1: config 0 descriptor?? [ 438.136017][ T5281] uclogic 0003:28BD:0042.0004: interface is invalid, ignoring [ 438.393258][ T8265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.560346][ T8180] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 438.561908][ T8260] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 438.648290][ T5281] usb 3-1: USB disconnect, device number 12 [ 438.942118][ T5233] Bluetooth: hci5: command tx timeout [ 442.809603][ T5208] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 443.261601][ T5208] usb 2-1: Using ep0 maxpacket: 16 [ 443.374984][ T5208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.416636][ T5208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.482084][ T5208] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 443.551990][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.623016][ T5208] usb 2-1: config 0 descriptor?? [ 444.154262][ T5208] razer 0003:1532:010D.0005: item fetching failed at offset 4/6 [ 444.163647][ T5208] razer 0003:1532:010D.0005: probe with driver razer failed with error -22 [ 444.175225][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.193734][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.221096][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.238179][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.247471][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 444.255257][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 444.382117][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 444.404134][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 444.413386][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 444.424038][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 444.432550][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 444.442133][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 444.762816][ T5273] usb 2-1: USB disconnect, device number 10 [ 445.773223][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.788078][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.383908][ T5223] Bluetooth: hci0: command tx timeout [ 446.641720][ T5223] Bluetooth: hci4: command tx timeout [ 450.202914][ T5223] Bluetooth: hci0: command tx timeout [ 450.208410][ T5223] Bluetooth: hci4: command tx timeout [ 450.318467][ T8360] usb usb9: usbfs: process 8360 (syz.1.679) did not claim interface 0 before use [ 450.327961][ T8360] usb usb9: selecting invalid altsetting 21783 [ 450.356274][ T29] audit: type=1400 audit(1722454044.057:466): avc: denied { append } for pid=8354 comm="syz.1.679" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 452.221753][ T55] Bluetooth: hci4: command tx timeout [ 452.227254][ T55] Bluetooth: hci0: command tx timeout [ 453.603783][ T5223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.613836][ T5223] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.627323][ T5223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.688667][ T5223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.699515][ T5223] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 453.712003][ T5223] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.257024][ T29] audit: type=1326 audit(1722454048.047:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.2.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8963d773b9 code=0x0 [ 454.301856][ T55] Bluetooth: hci0: command tx timeout [ 454.307326][ T55] Bluetooth: hci4: command tx timeout [ 455.821989][ T55] Bluetooth: hci5: command tx timeout [ 455.980790][ T8339] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 455.994169][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 456.119285][ T4885] wireguard: wg0: Could not create IPv6 socket [ 456.259605][ T8388] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 456.320970][ T8337] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 457.161777][ T5208] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 457.401740][ T5208] usb 3-1: Using ep0 maxpacket: 16 [ 457.431353][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.483030][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.531751][ T5208] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 457.561318][ T5208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.623526][ T5208] usb 3-1: config 0 descriptor?? [ 457.739049][ T8339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.081537][ T5223] Bluetooth: hci1: command 0x0406 tx timeout [ 458.098992][ T8339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.126928][ T5208] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring [ 458.322343][ T8435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.687'. [ 458.515954][ T5281] usb 3-1: USB disconnect, device number 13 [ 458.594234][ T8339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.643283][ T4885] wireguard: wg1: Could not create IPv6 socket [ 458.929186][ T8339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.033346][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.051318][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.065139][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.078664][ T5223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.090126][ T5223] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 459.102136][ T5223] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.221127][ T8440] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 459.290666][ T8339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.329645][ T8339] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.359273][ T8339] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.439866][ T8339] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.497525][ T8339] netdevsim netdevsim0 netdevsim0: renamed from eth1 [ 459.652406][ T8339] netdevsim netdevsim0 netdevsim1: renamed from eth2 [ 459.863801][ T8339] netdevsim netdevsim0 netdevsim2: renamed from eth3 [ 460.035144][ T8339] netdevsim netdevsim0 netdevsim3: renamed from eth4 [ 460.125731][ T8461] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 460.161640][ T8461] netlink: 9316 bytes leftover after parsing attributes in process `syz.2.691'. [ 460.170787][ T8461] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 460.843149][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.864673][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.883635][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.910979][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.922833][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 460.930995][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.097799][ T8466] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 461.332990][ T4885] wireguard: wg2: Could not create IPv6 socket [ 462.365287][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.378228][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.392173][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.404314][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.427230][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 462.435022][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.570224][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.636102][ T8482] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 462.671765][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.683856][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.723577][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.749553][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.776786][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.870305][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.904233][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.931765][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.948621][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.982907][ T8339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.012378][ T8339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.106537][ T8339] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 463.187569][ T8339] wireguard: wg0: Could not create IPv6 socket [ 463.240887][ T8339] wireguard: wg1: Could not create IPv6 socket [ 463.313929][ T8339] wireguard: wg2: Could not create IPv6 socket [ 463.522930][ T29] audit: type=1400 audit(1722454057.277:468): avc: denied { remount } for pid=8469 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 465.201878][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.216425][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.224860][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.234545][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.243738][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 465.251887][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.472274][ T8509] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 465.932685][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.963802][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.972326][ T5223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.980610][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.996657][ T5223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 466.004328][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.060804][ T8517] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 466.667842][ T8509] netdevsim netdevsim3 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.860046][ T8509] netdevsim netdevsim3 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.982055][ T8509] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.133606][ T8509] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.355328][ T55] Bluetooth: hci0: command tx timeout [ 467.412994][ T8509] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.457814][ T8509] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.519991][ T8509] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.569402][ T8509] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.329012][ T8552] netlink: 224 bytes leftover after parsing attributes in process `syz.2.699'. [ 468.809902][ T29] audit: type=1400 audit(1722454062.567:469): avc: denied { rename } for pid=8555 comm="syz.1.700" name="file0" dev="tmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 468.899974][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 468.916466][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 468.929043][ T5223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 468.942222][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.966907][ T5223] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 468.978860][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.174063][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.215008][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.217234][ T8561] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 469.247989][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.277186][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.311803][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.335347][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.366293][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.391640][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.416287][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.427678][ T55] Bluetooth: hci0: command tx timeout [ 469.481568][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.491618][ T5268] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 469.511563][ T8509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.523215][ T8509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.561157][ T8509] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 469.590745][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.622424][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.639350][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.658093][ T8509] wireguard: wg0: Could not create IPv6 socket [ 469.668912][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.679170][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 469.693453][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.731601][ T5268] usb 2-1: Using ep0 maxpacket: 16 [ 469.740745][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.753556][ T29] audit: type=1400 audit(1722454063.547:470): avc: denied { map } for pid=8575 comm="syz.2.705" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 469.757523][ T5268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.777525][ T8509] wireguard: wg1: Could not create IPv6 socket [ 469.834702][ T5268] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 469.845374][ T29] audit: type=1400 audit(1722454063.547:471): avc: denied { execute } for pid=8575 comm="syz.2.705" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 469.889663][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.897000][ T8573] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 469.907535][ T8509] wireguard: wg2: Could not create IPv6 socket [ 469.918042][ T5268] usb 2-1: config 0 descriptor?? [ 469.953591][ T29] audit: type=1400 audit(1722454063.637:472): avc: denied { create } for pid=8575 comm="syz.2.705" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 470.003660][ T29] audit: type=1400 audit(1722454063.637:473): avc: denied { write } for pid=8575 comm="syz.2.705" name="file0" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 470.241046][ T29] audit: type=1400 audit(1722454063.637:474): avc: denied { open } for pid=8575 comm="syz.2.705" path="/212/file0" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 471.502872][ T5223] Bluetooth: hci0: command tx timeout [ 471.744916][ T5223] Bluetooth: hci4: command tx timeout [ 472.841753][ T5268] usbhid 2-1:0.0: can't add hid device: -71 [ 472.871042][ T5268] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 472.924007][ T5268] usb 2-1: USB disconnect, device number 11 [ 473.544838][ T29] audit: type=1400 audit(1722454067.327:475): avc: denied { write } for pid=8605 comm="syz.1.706" path="socket:[22829]" dev="sockfs" ino=22829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 474.264736][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.280956][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.290818][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.318747][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.327608][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 474.338604][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.354867][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 474.408684][ T8620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.416030][ T8617] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 474.432170][ T8620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.445204][ T8620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.484098][ T8620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.502267][ T8620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 474.515916][ T8620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 474.587023][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.610843][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.628232][ T8619] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 474.630097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.647729][ T9] usb 2-1: config 0 descriptor?? [ 475.079498][ T9] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 475.132922][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input16 [ 475.232541][ T8617] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.422852][ T9] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 475.492429][ T9] usb 2-1: USB disconnect, device number 12 [ 475.526330][ T8617] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.858740][ T8617] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.203141][ T8617] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.468305][ T55] Bluetooth: hci0: command tx timeout [ 476.679130][ T8617] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.802382][ T8617] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.887405][ T8617] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.966939][ T8617] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.566430][ T8620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.582625][ T8620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.596558][ T8620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.623070][ T8620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.633306][ T8620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 477.653694][ T8620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.803663][ T8654] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 478.067777][ T8670] ------------[ cut here ]------------ [ 478.074034][ T8670] refcount_t: underflow; use-after-free. [ 478.114173][ T8670] WARNING: CPU: 1 PID: 8670 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 478.123836][ T8670] Modules linked in: [ 478.127806][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.2.713 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 478.138546][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 478.149259][ T8670] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 478.155617][ T8670] Code: ff 89 de e8 c8 f0 07 fd 84 db 0f 85 66 ff ff ff e8 1b f6 07 fd c6 05 ba 02 79 0b 01 90 48 c7 c7 c0 21 b0 8b e8 b7 3c ca fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 f8 f5 07 fd 0f b6 1d 95 02 79 0b 31 [ 478.175936][ T8670] RSP: 0018:ffffc9000324fd58 EFLAGS: 00010282 [ 478.182575][ T8670] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900034ea000 [ 478.190601][ T8670] RDX: 0000000000040000 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 478.199124][ T8670] RBP: ffff888018330080 R08: 0000000000000001 R09: 0000000000000000 [ 478.207780][ T8670] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 478.217597][ T8670] R13: ffff888018330080 R14: ffff888018330013 R15: ffff88801833000e [ 478.227011][ T8670] FS: 00007f8964c1f6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 478.236099][ T8670] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.242828][ T8670] CR2: 00007f93f770c3c8 CR3: 000000005e802000 CR4: 00000000003506f0 [ 478.250947][ T8670] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.259014][ T8670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.267137][ T8670] Call Trace: [ 478.270481][ T8670] [ 478.273495][ T8670] ? show_regs+0x8c/0xa0 [ 478.277819][ T8670] ? __warn+0xe5/0x3c0 [ 478.282032][ T8670] ? preempt_schedule_notrace+0x62/0xe0 [ 478.287655][ T8670] ? refcount_warn_saturate+0x14a/0x210 [ 478.293364][ T8670] ? report_bug+0x3c0/0x580 [ 478.297946][ T8670] ? handle_bug+0x3d/0x70 [ 478.302613][ T8670] ? exc_invalid_op+0x17/0x50 [ 478.307361][ T8670] ? asm_exc_invalid_op+0x1a/0x20 [ 478.313981][ T8670] ? __warn_printk+0x1a6/0x350 [ 478.320069][ T8670] ? refcount_warn_saturate+0x14a/0x210 [ 478.325789][ T8670] ? refcount_warn_saturate+0x149/0x210 [ 478.331414][ T8670] sk_common_release+0x2ec/0x420 [ 478.336480][ T8670] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 478.342188][ T8670] inet6_create+0xef5/0x12e0 [ 478.346866][ T8670] ? inet6_create+0x5d/0x12e0 [ 478.351667][ T8670] __sock_create+0x32e/0x800 [ 478.356323][ T8670] __sys_socket+0x14f/0x260 [ 478.360887][ T8670] ? handle_mm_fault+0x4c9/0x7b0 [ 478.365954][ T8670] ? __pfx___sys_socket+0x10/0x10 [ 478.371044][ T8670] ? do_user_addr_fault+0x83d/0x13f0 [ 478.376515][ T8670] __x64_sys_socket+0x72/0xb0 [ 478.381276][ T8670] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.386816][ T8670] do_syscall_64+0xcd/0x250 [ 478.391383][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.397413][ T8670] RIP: 0033:0x7f8963d773b9 [ 478.401954][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.423398][ T8670] RSP: 002b:00007f8964c1f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 478.433307][ T8670] RAX: ffffffffffffffda RBX: 00007f8963f05f80 RCX: 00007f8963d773b9 [ 478.441348][ T8670] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 478.449482][ T8670] RBP: 00007f8963de48e6 R08: 0000000000000000 R09: 0000000000000000 [ 478.457546][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.465709][ T8670] R13: 000000000000000b R14: 00007f8963f05f80 R15: 00007fff97b383f8 [ 478.473804][ T8670] [ 478.476879][ T8670] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 478.484196][ T8670] CPU: 1 UID: 0 PID: 8670 Comm: syz.2.713 Not tainted 6.11.0-rc1-syzkaller-00062-ge4fc196f5ba3 #0 [ 478.494817][ T8670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 478.504897][ T8670] Call Trace: [ 478.508196][ T8670] [ 478.511150][ T8670] dump_stack_lvl+0x3d/0x1f0 [ 478.515796][ T8670] panic+0x6f5/0x7a0 [ 478.519734][ T8670] ? __pfx_panic+0x10/0x10 [ 478.524190][ T8670] ? show_trace_log_lvl+0x363/0x500 [ 478.529448][ T8670] ? refcount_warn_saturate+0x14a/0x210 [ 478.535046][ T8670] check_panic_on_warn+0xab/0xb0 [ 478.540023][ T8670] __warn+0xf1/0x3c0 [ 478.543958][ T8670] ? preempt_schedule_notrace+0x62/0xe0 [ 478.549555][ T8670] ? refcount_warn_saturate+0x14a/0x210 [ 478.555143][ T8670] report_bug+0x3c0/0x580 [ 478.559511][ T8670] handle_bug+0x3d/0x70 [ 478.563709][ T8670] exc_invalid_op+0x17/0x50 [ 478.568246][ T8670] asm_exc_invalid_op+0x1a/0x20 [ 478.573139][ T8670] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 478.579338][ T8670] Code: ff 89 de e8 c8 f0 07 fd 84 db 0f 85 66 ff ff ff e8 1b f6 07 fd c6 05 ba 02 79 0b 01 90 48 c7 c7 c0 21 b0 8b e8 b7 3c ca fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 f8 f5 07 fd 0f b6 1d 95 02 79 0b 31 [ 478.598977][ T8670] RSP: 0018:ffffc9000324fd58 EFLAGS: 00010282 [ 478.605086][ T8670] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900034ea000 [ 478.613079][ T8670] RDX: 0000000000040000 RSI: ffffffff814cc386 RDI: 0000000000000001 [ 478.621072][ T8670] RBP: ffff888018330080 R08: 0000000000000001 R09: 0000000000000000 [ 478.629073][ T8670] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 478.637110][ T8670] R13: ffff888018330080 R14: ffff888018330013 R15: ffff88801833000e [ 478.645118][ T8670] ? __warn_printk+0x1a6/0x350 [ 478.649934][ T8670] ? refcount_warn_saturate+0x149/0x210 [ 478.655541][ T8670] sk_common_release+0x2ec/0x420 [ 478.660528][ T8670] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 478.666132][ T8670] inet6_create+0xef5/0x12e0 [ 478.670766][ T8670] ? inet6_create+0x5d/0x12e0 [ 478.675493][ T8670] __sock_create+0x32e/0x800 [ 478.680130][ T8670] __sys_socket+0x14f/0x260 [ 478.684668][ T8670] ? handle_mm_fault+0x4c9/0x7b0 [ 478.689648][ T8670] ? __pfx___sys_socket+0x10/0x10 [ 478.694707][ T8670] ? do_user_addr_fault+0x83d/0x13f0 [ 478.700037][ T8670] __x64_sys_socket+0x72/0xb0 [ 478.704762][ T8670] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.710008][ T8670] do_syscall_64+0xcd/0x250 [ 478.714551][ T8670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.720492][ T8670] RIP: 0033:0x7f8963d773b9 [ 478.724942][ T8670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.744578][ T8670] RSP: 002b:00007f8964c1f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 478.753027][ T8670] RAX: ffffffffffffffda RBX: 00007f8963f05f80 RCX: 00007f8963d773b9 [ 478.761026][ T8670] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 478.769023][ T8670] RBP: 00007f8963de48e6 R08: 0000000000000000 R09: 0000000000000000 [ 478.777107][ T8670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.785102][ T8670] R13: 000000000000000b R14: 00007f8963f05f80 R15: 00007fff97b383f8 [ 478.793103][ T8670] [ 478.796440][ T8670] Kernel Offset: disabled [ 478.800858][ T8670] Rebooting in 86400 seconds..