last executing test programs: 2m19.275198386s ago: executing program 3 (id=406): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1200, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x42202, 0x0) splice(r3, 0x0, r4, 0x0, 0xffffffe1, 0x0) 2m19.168765405s ago: executing program 3 (id=398): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) 2m17.857916489s ago: executing program 3 (id=402): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2b6a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x20e, 0x2, 0x2, "9611e60300c8880000000000000000008e080000000000000000200000ff00", 0xc6403e5f}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="120000001200010002f7ffffff000000100000000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m17.612119431s ago: executing program 3 (id=404): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m17.57239776s ago: executing program 3 (id=405): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) mprotect(&(0x7f00002f7000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m17.053888723s ago: executing program 3 (id=407): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="200400003a00691b29bd7000fcdbdf2502"], 0x420}, 0x1, 0x0, 0x0, 0x8000000}, 0x840) 2m16.834845009s ago: executing program 32 (id=407): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="200400003a00691b29bd7000fcdbdf2502"], 0x420}, 0x1, 0x0, 0x0, 0x8000000}, 0x840) 1m55.844171796s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x4, 0x0, 0x0, 0x6329, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 1m32.793884684s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x4, 0x0, 0x0, 0x6329, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 1m11.298952096s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x4, 0x0, 0x0, 0x6329, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 49.164033574s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x4, 0x0, 0x0, 0x6329, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 29.862607597s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x4, 0x0, 0x0, 0x6329, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 11.822780348s ago: executing program 5 (id=818): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) getsockname$packet(r0, 0x0, &(0x7f00000007c0)) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x12, r1, 0x6484f000) 10.699613858s ago: executing program 5 (id=823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$char_usb(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x4}) socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x56555958, 0x2, 0x6, 0x6, 0x4, 0xa6e, 0x10000000, 0x2, 0x1, 0x5}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440), 0x0}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000040)="eb13c9c8b76a96eefac133275bf81a98f4f8a401c8e735e74a7504902a50bcc4244488f5e82e6830c3982fcdf2f006d143eceddf21959c2f8ce2550ff6f3d0c09e240ed545da437b3e2be80acbfcc0", 0x4f}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 9.657596723s ago: executing program 4 (id=94): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x4, 0x0, 0x0, 0x6329, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x100}) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 7.782924916s ago: executing program 2 (id=831): syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000740)) 7.781790142s ago: executing program 5 (id=832): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000001fc0)={0x45, 0x6, 0x0, {0x4000005, 0x3, 0x6b, 0x0, '/sys/kernel/debug/sync/info\x00'}}, 0x45) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) 6.790157693s ago: executing program 1 (id=833): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x400000000080803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xdc, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc8, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x0, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xdc}}, 0x0) 6.664124177s ago: executing program 2 (id=835): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x80001) rseq(0x0, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.491410859s ago: executing program 0 (id=836): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0x2d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(0x0, 0x80ff, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x1, 0x1, 0x353, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.40112885s ago: executing program 2 (id=837): syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/157) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) mlock(&(0x7f00006a5000/0x3000)=nil, 0x3000) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000380)) 3.354307261s ago: executing program 0 (id=838): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 2.994565868s ago: executing program 2 (id=839): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 2.878549926s ago: executing program 5 (id=840): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9, 0x3800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10001}) r5 = syz_io_uring_setup(0x48be, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000011c0), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 2.704919805s ago: executing program 0 (id=841): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) setresuid(0xee01, 0xee01, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') sync() chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0xe, 0x0, 0x80000000, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x10}) 2.492680571s ago: executing program 0 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.842688266s ago: executing program 1 (id=843): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) socket(0x1e, 0x805, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0x822, &(0x7f0000000480)={0x0, 0x98b8, 0x80, 0x1, 0x5d}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x34, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.785340584s ago: executing program 5 (id=844): mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) rmdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x3000000) 1.254238887s ago: executing program 1 (id=845): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r3, 0x0, 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl}]}}) 1.067753419s ago: executing program 1 (id=846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlockall(0x2) r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000136000/0x4000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) 1.042438486s ago: executing program 0 (id=847): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @random="7a28cd07effe", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) 371.092215ms ago: executing program 5 (id=848): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 361.097843ms ago: executing program 2 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x44, r10, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x5, 0x25c, @void}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 237.375833ms ago: executing program 0 (id=850): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800700, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000140)=0x8, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x30, 0xffffffffffffffff, 0xd06e7000) iopl(0x3) r1 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockname(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000180)=0xd3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 155.24074ms ago: executing program 1 (id=851): socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000009c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1 1) [ 157.850410][ T6434] 9pnet: bogus RWRITE count (2 > 1) [ 158.370808][ T7349] veth0_macvtap: entered promiscuous mode [ 158.381234][ T5857] wwan wwan0: port wwan0mbim0 disconnected [ 158.381433][ T7349] veth1_macvtap: entered promiscuous mode [ 158.407640][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.419367][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.429328][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.440180][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.458166][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.579351][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.634330][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.751922][ T7349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.923142][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.209990][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.259024][ T7349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.306366][ T7349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.329080][ T7349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.409733][ T7349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.414065][ T7658] overlayfs: failed to clone upperpath [ 159.457533][ T7661] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 159.505190][ T30] audit: type=1400 audit(1746914690.242:380): avc: denied { listen } for pid=7660 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 159.630971][ T7349] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 159.658469][ T7349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.862584][ T5928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.883541][ T5928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.398445][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.407088][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.754956][ T30] audit: type=1400 audit(1746914691.502:381): avc: denied { mount } for pid=7682 comm="syz.3.393" name="/" dev="hugetlbfs" ino=15861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 160.830438][ T30] audit: type=1400 audit(1746914691.532:382): avc: denied { unmount } for pid=7682 comm="syz.3.393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 161.104659][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.525390][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.835525][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.002995][ T7710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.397'. [ 162.034107][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.141371][ T30] audit: type=1400 audit(1746914692.892:383): avc: denied { module_request } for pid=7709 comm="syz.1.397" kmod="net-pf-2-proto-11-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 162.420268][ T52] bridge_slave_1: left allmulticast mode [ 162.432252][ T52] bridge_slave_1: left promiscuous mode [ 162.438262][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.453227][ T52] bridge_slave_0: left allmulticast mode [ 162.460198][ T52] bridge_slave_0: left promiscuous mode [ 162.465900][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.661734][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.691348][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.699039][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.707737][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.136465][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.835424][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.852201][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.872386][ T52] bond0 (unregistering): Released all slaves [ 164.852606][ T52] hsr_slave_0: left promiscuous mode [ 164.892035][ T52] hsr_slave_1: left promiscuous mode [ 164.927045][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.961580][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.980220][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.000084][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.136613][ T52] veth1_macvtap: left promiscuous mode [ 165.159683][ T52] veth0_macvtap: left promiscuous mode [ 165.165298][ T52] veth1_vlan: left promiscuous mode [ 165.178166][ T52] veth0_vlan: left promiscuous mode [ 165.195705][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.204550][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.214493][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.222489][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.230826][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.274240][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 165.309680][ T5817] Bluetooth: hci4: command tx timeout [ 166.615684][ T52] team0 (unregistering): Port device team_slave_1 removed [ 166.641290][ T52] team0 (unregistering): Port device team_slave_0 removed [ 166.810843][ T1208] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.969685][ T1208] usb 1-1: Using ep0 maxpacket: 8 [ 166.983486][ T1208] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.003591][ T1208] usb 1-1: config 0 has no interface number 0 [ 167.013548][ T1208] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.025796][ T1208] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.035166][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.045687][ T1208] usb 1-1: config 0 descriptor?? [ 167.069968][ T1208] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.289878][ T1208] usb 1-1: USB disconnect, device number 10 [ 167.309759][ T5817] Bluetooth: hci0: command tx timeout [ 167.389970][ T5817] Bluetooth: hci4: command tx timeout [ 167.500093][ T7727] chnl_net:caif_netlink_parms(): no params data found [ 167.683294][ T7727] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.691357][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.698545][ T7727] bridge_slave_0: entered allmulticast mode [ 167.708679][ T7727] bridge_slave_0: entered promiscuous mode [ 167.726986][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.754045][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.768440][ T7727] bridge_slave_1: entered allmulticast mode [ 167.778945][ T7727] bridge_slave_1: entered promiscuous mode [ 167.838162][ T7727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.862183][ T7727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.090554][ T7727] team0: Port device team_slave_0 added [ 168.110702][ T7727] team0: Port device team_slave_1 added [ 168.642253][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.649276][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.709641][ T7727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.734326][ T7727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.878866][ T7727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.913954][ T7727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.953596][ T7768] chnl_net:caif_netlink_parms(): no params data found [ 169.064936][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.389781][ T5817] Bluetooth: hci0: command tx timeout [ 169.440492][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.470202][ T5817] Bluetooth: hci4: command tx timeout [ 169.708931][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.858198][ T7727] hsr_slave_0: entered promiscuous mode [ 169.864887][ T7727] hsr_slave_1: entered promiscuous mode [ 169.888998][ T7727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.914959][ T7727] Cannot create hsr debugfs directory [ 169.981251][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.001095][ T30] audit: type=1400 audit(1746914700.732:384): avc: denied { rename } for pid=7836 comm="syz.0.422" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 170.088786][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.100708][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.107902][ T7768] bridge_slave_0: entered allmulticast mode [ 170.140272][ T7768] bridge_slave_0: entered promiscuous mode [ 170.199819][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.206951][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.229840][ T7768] bridge_slave_1: entered allmulticast mode [ 170.237124][ T7768] bridge_slave_1: entered promiscuous mode [ 171.238286][ T7768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.330908][ T7768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.628342][ T5817] Bluetooth: hci0: command tx timeout [ 171.638433][ T5817] Bluetooth: hci4: command tx timeout [ 171.908608][ T7768] team0: Port device team_slave_0 added [ 171.955811][ T7768] team0: Port device team_slave_1 added [ 172.255675][ T7884] vlan2: entered promiscuous mode [ 172.274998][ T7884] ip6gretap0: entered promiscuous mode [ 172.341787][ T52] bridge_slave_1: left allmulticast mode [ 172.347481][ T52] bridge_slave_1: left promiscuous mode [ 172.369761][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.382313][ T52] bridge_slave_0: left allmulticast mode [ 172.387972][ T52] bridge_slave_0: left promiscuous mode [ 172.902999][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.138781][ T30] audit: type=1400 audit(1746914703.882:385): avc: denied { setopt } for pid=7879 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.234871][ T30] audit: type=1400 audit(1746914703.982:386): avc: denied { create } for pid=7888 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.393520][ T30] audit: type=1400 audit(1746914703.982:387): avc: denied { setopt } for pid=7888 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 173.631952][ T52] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 173.727043][ T5817] Bluetooth: hci0: command tx timeout [ 173.916136][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 173.931164][ T30] audit: type=1800 audit(1746914704.672:388): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.436" name="/" dev="9p" ino=2 res=0 errno=0 [ 173.953685][ T7893] syz.2.436 (7893) used greatest stack depth: 20280 bytes left [ 173.975314][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 173.992552][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.006330][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.018126][ T52] bond0 (unregistering): Released all slaves [ 174.068122][ T30] audit: type=1400 audit(1746914704.812:389): avc: denied { create } for pid=7901 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 174.125167][ T52] bond1 (unregistering): Released all slaves [ 174.135758][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.144006][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.169879][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.176075][ T7768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.241763][ T7898] veth1_macvtap: left promiscuous mode [ 174.268253][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.275322][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.301173][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.309257][ T7768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.333357][ T5896] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 174.398208][ T30] audit: type=1400 audit(1746914705.142:390): avc: denied { watch watch_reads } for pid=7903 comm="syz.1.438" path="pipe:[16358]" dev="pipefs" ino=16358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 174.648221][ T5896] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 174.657623][ T5896] usb 3-1: config 7 has no interface number 0 [ 174.664324][ T5896] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 174.687046][ T5896] usb 3-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 174.715323][ T5896] usb 3-1: config 7 interface 252 has no altsetting 0 [ 174.727367][ T5896] usb 3-1: string descriptor 0 read error: -22 [ 174.735025][ T5896] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 174.755267][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.825488][ T5896] idmouse 3-1:7.252: Unable to find bulk-in endpoint. [ 174.859216][ T7768] hsr_slave_0: entered promiscuous mode [ 174.872194][ T7768] hsr_slave_1: entered promiscuous mode [ 174.892729][ T7768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.909184][ T7768] Cannot create hsr debugfs directory [ 175.116167][ T5896] usb 3-1: USB disconnect, device number 6 [ 175.243164][ T52] hsr_slave_0: left promiscuous mode [ 175.318276][ T52] hsr_slave_1: left promiscuous mode [ 175.411161][ T52] veth1_vlan: left promiscuous mode [ 175.416612][ T52] veth0_vlan: left promiscuous mode [ 175.754989][ T7929] netlink: 'syz.1.442': attribute type 27 has an invalid length. [ 175.836638][ T7932] binder: BINDER_SET_CONTEXT_MGR already set [ 175.846661][ T7932] binder: 7931:7932 ioctl 4018620d 2000000000c0 returned -16 [ 175.865785][ T7932] binder: BINDER_SET_CONTEXT_MGR already set [ 175.874675][ T7932] binder: 7931:7932 ioctl 4018620d 200000000040 returned -16 [ 176.059540][ T52] team0 (unregistering): Port device team_slave_1 removed [ 176.100043][ T52] team0 (unregistering): Port device team_slave_0 removed [ 176.222816][ T30] audit: type=1804 audit(1746914706.972:391): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.445" name="/newroot/102/file1" dev="fuse" ino=1 res=1 errno=0 [ 176.250472][ T30] audit: type=1800 audit(1746914706.972:392): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.445" name="/" dev="fuse" ino=1 res=0 errno=0 [ 177.003087][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.010707][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.222751][ T7929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.257130][ T7929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.270810][ T7954] binder: BINDER_SET_CONTEXT_MGR already set [ 177.277373][ T7954] binder: 7953:7954 ioctl 4018620d 200000000100 returned -16 [ 177.300218][ T7954] binder: BINDER_SET_CONTEXT_MGR already set [ 177.332526][ T7954] binder: 7953:7954 ioctl 4018620d 200000000040 returned -16 [ 177.393302][ T7929] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.406149][ T7929] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.415466][ T7929] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.430566][ T7929] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.558764][ T7930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.583414][ T7930] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.610495][ T7930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.422425][ T7727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.480132][ T7727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.508097][ T7727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.569746][ T7727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.765832][ T7976] tipc: Started in network mode [ 178.781785][ T7976] tipc: Node identity 5ee3aa7b8f7a, cluster identity 4711 [ 178.823123][ T7976] tipc: Enabled bearer , priority 0 [ 178.935864][ T7979] syzkaller0: entered promiscuous mode [ 178.941522][ T7979] syzkaller0: entered allmulticast mode [ 178.947669][ T7979] tipc: Resetting bearer [ 179.026301][ T30] audit: type=1400 audit(1746914709.772:393): avc: denied { wake_alarm } for pid=7988 comm="syz.1.453" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.045172][ T6432] tipc: Resetting bearer [ 179.116399][ T7974] tipc: Resetting bearer [ 179.182682][ T30] audit: type=1400 audit(1746914709.932:394): avc: denied { cmd } for pid=7992 comm="syz.1.455" path="socket:[16866]" dev="sockfs" ino=16866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 179.890748][ T9] tipc: Node number set to 3516508795 [ 180.515849][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 180.517851][ T5126] Bluetooth: hci2: command 0x0406 tx timeout [ 180.533572][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 180.924820][ T7974] tipc: Disabling bearer [ 180.944583][ T7768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.983598][ T7768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.033707][ T7768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.052767][ T7768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.197361][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.237631][ T7727] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.261306][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.268431][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.307022][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.314136][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.351725][ T8021] binder: BINDER_SET_CONTEXT_MGR already set [ 181.357727][ T8021] binder: 8020:8021 ioctl 4018620d 200000000040 returned -16 [ 181.370140][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.382081][ T8021] binder: 8020:8021 ioctl c0306201 2000000003c0 returned -14 [ 181.401871][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.473669][ T7768] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.618141][ T5887] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 181.682314][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.807064][ T5887] usb 3-1: config 0 descriptor?? [ 181.817788][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.824916][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.828766][ T5887] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 181.921471][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.928589][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.073022][ T30] audit: type=1400 audit(1746914712.812:395): avc: denied { create } for pid=8036 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.175296][ T7727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.553717][ T5887] gspca_sunplus: reg_w_riv err -110 [ 182.562294][ T5887] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 182.585722][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.723452][ T8057] tipc: Enabling of bearer rejected, failed to enable media [ 182.795866][ T911] usb 3-1: USB disconnect, device number 7 [ 183.002274][ T7727] veth0_vlan: entered promiscuous mode [ 183.038343][ T7727] veth1_vlan: entered promiscuous mode [ 183.107586][ T7727] veth0_macvtap: entered promiscuous mode [ 183.131876][ T7727] veth1_macvtap: entered promiscuous mode [ 183.185067][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.208673][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.238313][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.266353][ T7727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.277766][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.298306][ T7727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.344681][ T7768] veth0_vlan: entered promiscuous mode [ 183.377262][ T7727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.403320][ T7727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.426479][ T7727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.449991][ T7727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.553585][ T7768] veth1_vlan: entered promiscuous mode [ 183.633197][ T7768] veth0_macvtap: entered promiscuous mode [ 183.736002][ T7768] veth1_macvtap: entered promiscuous mode [ 183.759849][ T8079] bio_check_eod: 2 callbacks suppressed [ 183.759860][ T8079] syz.2.469: attempt to access beyond end of device [ 183.759860][ T8079] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 183.778196][ T8079] (syz.2.469,8079,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 183.785663][ T8079] (syz.2.469,8079,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 183.792972][ T8079] (syz.2.469,8079,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 183.801492][ T8079] (syz.2.469,8079,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 183.844722][ T7727] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 183.885813][ T7727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.937364][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.950023][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.124867][ T30] audit: type=1400 audit(1746914714.872:396): avc: denied { create } for pid=8091 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.187592][ T30] audit: type=1400 audit(1746914714.912:397): avc: denied { read } for pid=8091 comm="syz.1.473" path="socket:[17331]" dev="sockfs" ino=17331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.371484][ T30] audit: type=1400 audit(1746914715.112:398): avc: denied { write } for pid=8091 comm="syz.1.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 184.404794][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.435729][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.523291][ T30] audit: type=1400 audit(1746914715.242:399): avc: denied { read write } for pid=8094 comm="syz.2.471" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 184.533461][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.557326][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.584144][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.604926][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.613483][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.632258][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.651205][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.679046][ T7768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.680960][ T30] audit: type=1400 audit(1746914715.262:400): avc: denied { open } for pid=8094 comm="syz.2.471" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 184.740173][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.761690][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.780433][ T8105] tipc: Enabling of bearer rejected, failed to enable media [ 184.806085][ T7768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.813442][ T30] audit: type=1400 audit(1746914715.552:401): avc: denied { mounton } for pid=7727 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 184.838477][ T7768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.848197][ T7768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.858572][ T80] libceph: connect (1)[c::]:6789 error -101 [ 184.865302][ T80] libceph: mon0 (1)[c::]:6789 connect error [ 184.872502][ T7768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.972839][ T7768] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 185.000541][ T7768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.084813][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.129715][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.131174][ T7944] libceph: connect (1)[c::]:6789 error -101 [ 185.145316][ T7944] libceph: mon0 (1)[c::]:6789 connect error [ 185.496088][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.560350][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.563889][ T8106] ceph: No mds server is up or the cluster is laggy [ 185.606456][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.771754][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.893035][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.952757][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.129369][ T12] bridge_slave_1: left allmulticast mode [ 186.136943][ T12] bridge_slave_1: left promiscuous mode [ 186.143046][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.152914][ T12] bridge_slave_0: left allmulticast mode [ 186.158531][ T12] bridge_slave_0: left promiscuous mode [ 186.179811][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.399786][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.411303][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.421665][ T12] bond0 (unregistering): Released all slaves [ 186.659859][ T8158] netlink: 128 bytes leftover after parsing attributes in process `syz.2.482'. [ 187.436416][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.445621][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.453355][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.462179][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.469866][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.607134][ T8171] netlink: 'syz.2.483': attribute type 10 has an invalid length. [ 187.638740][ T8170] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.707100][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.718204][ T8171] bond0: (slave team0): Enslaving as an active interface with an up link [ 187.730437][ T3585] bond0: (slave team0): interface is now down [ 187.760199][ T3585] bond0: (slave team0): interface is now down [ 187.791796][ T3569] bond0: (slave team0): interface is now down [ 187.819664][ T6430] bond0: (slave team0): interface is now down [ 187.882707][ T6430] bond0: (slave team0): interface is now down [ 187.899972][ T6434] bond0: (slave team0): interface is now down [ 187.932225][ T12] hsr_slave_0: left promiscuous mode [ 187.941485][ T6434] bond0: (slave team0): interface is now down [ 187.970549][ T6434] bond0: (slave team0): interface is now down [ 187.989757][ T6430] bond0: (slave team0): interface is now down [ 188.016491][ T12] hsr_slave_1: left promiscuous mode [ 188.039011][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.060841][ T6432] bond0: (slave team0): interface is now down [ 188.072705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.080592][ T6432] bond0: (slave team0): interface is now down [ 188.099711][ T6432] bond0: (slave team0): interface is now down [ 188.186005][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.213760][ T30] audit: type=1400 audit(1746914718.932:402): avc: denied { read } for pid=8187 comm="syz.5.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 188.259763][ T3585] bond0: (slave team0): interface is now down [ 188.272834][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.382322][ T6430] bond0: (slave team0): interface is now down [ 188.399736][ T6430] bond0: (slave team0): interface is now down [ 188.435082][ T12] veth1_macvtap: left promiscuous mode [ 188.456852][ T6430] bond0: (slave team0): interface is now down [ 188.473536][ T30] audit: type=1326 audit(1746914719.222:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94b98e969 code=0x7ffc0000 [ 188.506981][ T12] veth0_macvtap: left promiscuous mode [ 188.543759][ T6430] bond0: (slave team0): interface is now down [ 188.559774][ T30] audit: type=1326 audit(1746914719.222:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94b98e969 code=0x7ffc0000 [ 188.571107][ T12] veth1_vlan: left promiscuous mode [ 188.595018][ T6430] bond0: (slave team0): interface is now down [ 188.627413][ T8202] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.634650][ T8202] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 188.642305][ T8202] audit: backlog limit exceeded [ 188.657807][ T8206] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.660249][ T3585] bond0: (slave team0): interface is now down [ 188.675749][ T30] audit: type=1326 audit(1746914719.222:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94b98e969 code=0x7ffc0000 [ 188.713275][ T8206] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 188.733787][ T6428] bond0: (slave team0): interface is now down [ 188.737450][ T12] veth0_vlan: left promiscuous mode [ 188.742094][ T30] audit: type=1326 audit(1746914719.222:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8198 comm="syz.5.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94b98e969 code=0x7ffc0000 [ 188.770032][ T6428] bond0: (slave team0): interface is now down [ 188.790267][ T6430] bond0: (slave team0): interface is now down [ 188.811107][ T6428] bond0: (slave team0): interface is now down [ 188.839121][ T6428] bond0: (slave team0): interface is now down [ 188.920759][ T3569] bond0: (slave team0): interface is now down [ 188.940295][ T6428] bond0: (slave team0): interface is now down [ 188.982927][ T3569] bond0: (slave team0): interface is now down [ 189.013050][ T6432] bond0: (slave team0): interface is now down [ 189.057769][ T6432] bond0: (slave team0): interface is now down [ 189.099844][ T3569] bond0: (slave team0): interface is now down [ 189.112335][ T8220] virtio-fs: tag not found [ 189.160316][ T3569] bond0: (slave team0): interface is now down [ 189.188652][ T3569] bond0: (slave team0): interface is now down [ 189.270084][ T3569] bond0: (slave team0): interface is now down [ 189.337684][ T3569] bond0: (slave team0): interface is now down [ 189.369831][ T3569] bond0: (slave team0): interface is now down [ 189.429678][ T6428] bond0: (slave team0): interface is now down [ 189.455609][ T6428] bond0: (slave team0): interface is now down [ 189.512526][ T52] bond0: (slave team0): interface is now down [ 189.531218][ T6428] bond0: (slave team0): interface is now down [ 189.550473][ T5810] Bluetooth: hci4: command tx timeout [ 189.559076][ T3569] bond0: (slave team0): interface is now down [ 189.591431][ T3569] bond0: (slave team0): interface is now down [ 189.609684][ T52] bond0: (slave team0): interface is now down [ 189.634242][ T3569] bond0: (slave team0): interface is now down [ 189.661732][ T52] bond0: (slave team0): interface is now down [ 189.702991][ T52] bond0: (slave team0): interface is now down [ 189.739798][ T6428] bond0: (slave team0): interface is now down [ 189.750044][ T7948] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.779709][ T52] bond0: (slave team0): interface is now down [ 189.803480][ T52] bond0: (slave team0): interface is now down [ 189.950079][ T7948] usb 3-1: Using ep0 maxpacket: 16 [ 189.951225][ T6428] bond0: (slave team0): interface is now down [ 189.987497][ T7948] usb 3-1: config 0 has no interfaces? [ 190.058131][ T7948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.073014][ T6432] bond0: (slave team0): interface is now down [ 190.095949][ T7948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.119153][ T52] bond0: (slave team0): interface is now down [ 190.134286][ T7948] usb 3-1: Product: syz [ 190.138472][ T7948] usb 3-1: Manufacturer: syz [ 190.163990][ T52] bond0: (slave team0): interface is now down [ 190.172651][ T7948] usb 3-1: SerialNumber: syz [ 190.182654][ T7948] usb 3-1: config 0 descriptor?? [ 190.203151][ T52] bond0: (slave team0): interface is now down [ 190.223009][ T52] bond0: (slave team0): interface is now down [ 190.242154][ T6428] bond0: (slave team0): interface is now down [ 190.278263][ T3569] bond0: (slave team0): interface is now down [ 190.297322][ T8249] netlink: 56 bytes leftover after parsing attributes in process `syz.5.503'. [ 190.307598][ T6428] bond0: (slave team0): interface is now down [ 190.330217][ T52] bond0: (slave team0): interface is now down [ 190.353339][ T3569] bond0: (slave team0): interface is now down [ 190.372311][ T3569] bond0: (slave team0): interface is now down [ 190.405783][ T3569] bond0: (slave team0): interface is now down [ 190.427199][ T7948] usb 3-1: USB disconnect, device number 8 [ 190.442253][ T3569] bond0: (slave team0): interface is now down [ 190.457320][ T8255] netfs: Couldn't get user pages (rc=-14) [ 190.463131][ T6432] bond0: (slave team0): interface is now down [ 190.479757][ T6432] bond0: (slave team0): interface is now down [ 190.505530][ T52] bond0: (slave team0): interface is now down [ 190.550636][ T3569] bond0: (slave team0): interface is now down [ 190.581175][ T3569] bond0: (slave team0): interface is now down [ 190.593824][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.607962][ T52] bond0: (slave team0): interface is now down [ 190.645202][ T6432] bond0: (slave team0): interface is now down [ 190.670673][ T6432] bond0: (slave team0): interface is now down [ 190.693685][ T3569] bond0: (slave team0): interface is now down [ 190.713301][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.740636][ T52] bond0: (slave team0): interface is now down [ 190.775014][ T52] bond0: (slave team0): interface is now down [ 190.801342][ T52] bond0: (slave team0): interface is now down [ 190.830521][ T52] bond0: (slave team0): interface is now down [ 190.869710][ T52] bond0: (slave team0): interface is now down [ 190.915661][ T6430] bond0: (slave team0): interface is now down [ 190.923946][ T5810] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 190.950814][ T6430] bond0: (slave team0): interface is now down [ 190.969701][ T52] bond0: (slave team0): interface is now down [ 190.991318][ T6430] bond0: (slave team0): interface is now down [ 191.019670][ T6430] bond0: (slave team0): interface is now down [ 191.038075][ T5810] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 191.046375][ T6428] bond0: (slave team0): interface is now down [ 191.080256][ T6430] bond0: (slave team0): interface is now down [ 191.109732][ T6428] bond0: (slave team0): interface is now down [ 191.140228][ T6428] bond0: (slave team0): interface is now down [ 191.148001][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 191.191219][ T6428] bond0: (slave team0): interface is now down [ 191.219713][ T6428] bond0: (slave team0): interface is now down [ 191.243445][ T3569] bond0: (slave team0): interface is now down [ 191.283279][ T3569] bond0: (slave team0): interface is now down [ 191.310293][ T6428] bond0: (slave team0): interface is now down [ 191.340798][ T6428] bond0: (slave team0): interface is now down [ 191.357072][ T8208] bridge: RTM_NEWNEIGH with invalid ether address [ 191.370178][ T6434] bond0: (slave team0): interface is now down [ 191.401705][ T3585] bond0: (slave team0): interface is now down [ 191.452190][ T6434] bond0: (slave team0): interface is now down [ 191.501082][ T3585] bond0: (slave team0): interface is now down [ 191.552635][ T6434] bond0: (slave team0): interface is now down [ 191.630028][ T6430] bond0: (slave team0): interface is now down [ 191.639284][ T5810] Bluetooth: hci4: command tx timeout [ 191.653193][ T3585] bond0: (slave team0): interface is now down [ 191.671163][ T3585] bond0: now running without any active interface! [ 191.727984][ T8165] chnl_net:caif_netlink_parms(): no params data found [ 192.425545][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.469217][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.487263][ T8165] bridge_slave_0: entered allmulticast mode [ 192.505186][ T8165] bridge_slave_0: entered promiscuous mode [ 192.679030][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.695843][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.706281][ T8165] bridge_slave_1: entered allmulticast mode [ 192.727045][ T8165] bridge_slave_1: entered promiscuous mode [ 192.777877][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.834951][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.258493][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 193.258507][ T30] audit: type=1400 audit(1746914723.692:571): avc: denied { connect } for pid=8326 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.301800][ T30] audit: type=1400 audit(1746914723.692:572): avc: denied { bind } for pid=8326 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.362516][ T30] audit: type=1400 audit(1746914723.702:573): avc: denied { write } for pid=8326 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 193.425698][ T8165] team0: Port device team_slave_0 added [ 193.456789][ T8165] team0: Port device team_slave_1 added [ 193.709667][ T5810] Bluetooth: hci4: command tx timeout [ 193.745816][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.792479][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.798829][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.950779][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.030944][ T8165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.164739][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.188648][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.332001][ T8165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.291174][ T30] audit: type=1400 audit(1746914726.042:574): avc: denied { read } for pid=8351 comm="syz.5.521" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.396215][ T8165] hsr_slave_0: entered promiscuous mode [ 195.402602][ T8165] hsr_slave_1: entered promiscuous mode [ 195.408274][ T30] audit: type=1400 audit(1746914726.082:575): avc: denied { open } for pid=8351 comm="syz.5.521" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.547566][ T30] audit: type=1400 audit(1746914726.082:576): avc: denied { mount } for pid=8351 comm="syz.5.521" name="/" dev="autofs" ino=18324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.618087][ T30] audit: type=1400 audit(1746914726.122:577): avc: denied { ioctl } for pid=8351 comm="syz.5.521" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 195.649057][ T30] audit: type=1400 audit(1746914726.132:578): avc: denied { unmount } for pid=7768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.789699][ T5810] Bluetooth: hci4: command tx timeout [ 198.144715][ T8391] warning: `syz.1.531' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.809742][ T8380] netlink: 'syz.2.529': attribute type 27 has an invalid length. [ 199.397019][ T8407] overlayfs: failed to clone upperpath [ 199.532255][ T5887] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.729768][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 199.851033][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.126500][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.175883][ T5887] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.255196][ T5887] usb 3-1: Manufacturer: syz [ 200.465190][ T5887] usb 3-1: config 0 descriptor?? [ 200.867376][ T8165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.031604][ T8165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.867432][ T8165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 202.514358][ T8165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 202.786281][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.825886][ T911] usb 3-1: USB disconnect, device number 9 [ 202.855015][ T8165] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.878286][ T8449] netlink: 'syz.5.546': attribute type 4 has an invalid length. [ 202.901552][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 202.919295][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.926451][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.965933][ T30] audit: type=1400 audit(1746914733.712:579): avc: denied { bind } for pid=8448 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.994207][ T8452] Bluetooth: MGMT ver 1.23 [ 203.015390][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.022472][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.039550][ T30] audit: type=1400 audit(1746914733.742:580): avc: denied { write } for pid=8448 comm="syz.5.546" path="socket:[19395]" dev="sockfs" ino=19395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 203.101350][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 203.117901][ T10] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 203.155087][ T10] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 203.232341][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 203.284887][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 203.336662][ T10] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 203.342400][ T30] audit: type=1400 audit(1746914734.082:581): avc: denied { create } for pid=8462 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.349622][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.696382][ T10] usb 1-1: Product: syz [ 203.750161][ T10] usb 1-1: Manufacturer: syz [ 203.764571][ T10] usb 1-1: SerialNumber: syz [ 203.821762][ T10] usb 1-1: config 0 descriptor?? [ 203.842332][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 203.873686][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 204.114830][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.148082][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 204.459885][ T7948] usb 1-1: USB disconnect, device number 11 [ 204.658134][ T8165] veth0_vlan: entered promiscuous mode [ 204.688928][ T8165] veth1_vlan: entered promiscuous mode [ 204.814403][ T8165] veth0_macvtap: entered promiscuous mode [ 204.900037][ T8165] veth1_macvtap: entered promiscuous mode [ 204.915472][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.957308][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.031052][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.069895][ T5817] Bluetooth: hci0: command 0x1407 tx timeout [ 205.076264][ T5810] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 205.386490][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.401137][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.484245][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.547370][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.568891][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.611072][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.530744][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.565554][ T8165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.619122][ T8165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.648592][ T8165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.658135][ T8165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.780666][ T30] audit: type=1400 audit(1746914737.522:582): avc: denied { read } for pid=8517 comm="syz.2.556" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 206.891104][ T30] audit: type=1400 audit(1746914737.522:583): avc: denied { open } for pid=8517 comm="syz.2.556" path="/126/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 206.913019][ T8525] netlink: 'syz.5.558': attribute type 10 has an invalid length. [ 206.934367][ T8165] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 206.960019][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.022744][ T8530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer. [ 207.065698][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.096051][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.158405][ T8525] team0: Port device wlan1 added [ 207.234885][ T6434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.254664][ T6434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.431995][ T8518] orangefs_mount: mount request failed with -4 [ 207.809654][ T5858] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 207.972854][ T5858] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 207.989122][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.009237][ T5858] usb 6-1: config 0 descriptor?? [ 208.027891][ T5858] pcwd_usb: The device isn't a Human Interface Device [ 208.667470][ T5858] usb 6-1: USB disconnect, device number 2 [ 208.678745][ T5810] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 208.692909][ T5810] Bluetooth: hci0: command 0x1407 tx timeout [ 208.745932][ T6434] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.268295][ T6434] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.387625][ T6434] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.454677][ T6434] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.600913][ T6434] bridge_slave_1: left allmulticast mode [ 209.606585][ T6434] bridge_slave_1: left promiscuous mode [ 209.614824][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.625211][ T6434] bridge_slave_0: left allmulticast mode [ 209.631177][ T6434] bridge_slave_0: left promiscuous mode [ 209.636944][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.851407][ T8598] netlink: '+}[@': attribute type 1 has an invalid length. [ 210.466622][ T6434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.478069][ T6434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.582376][ T6434] bond0 (unregistering): Released all slaves [ 210.685340][ T8598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.894851][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.908835][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.919127][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.927009][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.934338][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.973701][ T8605] vlan2: entered allmulticast mode [ 210.978941][ T8605] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 211.013784][ T8605] bond1: (slave vlan2): making interface the new active one [ 211.060961][ T8605] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 212.219688][ T30] audit: type=1400 audit(1746914742.472:584): avc: denied { setopt } for pid=8628 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.783041][ T30] audit: type=1400 audit(1746914742.472:585): avc: denied { bind } for pid=8628 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 212.802766][ T30] audit: type=1400 audit(1746914742.472:586): avc: denied { name_bind } for pid=8628 comm="syz.1.573" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 212.839678][ T30] audit: type=1400 audit(1746914742.522:587): avc: denied { node_bind } for pid=8628 comm="syz.1.573" saddr=fe88::102 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 213.072494][ T5817] Bluetooth: hci4: command tx timeout [ 213.889263][ T10] IPVS: starting estimator thread 0... [ 214.050773][ T30] audit: type=1400 audit(1746914744.772:588): avc: denied { watch_reads } for pid=8651 comm="syz.0.580" path="/122" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.076938][ T8653] IPVS: using max 38 ests per chain, 91200 per kthread [ 215.030482][ T30] audit: type=1400 audit(1746914745.772:589): avc: denied { connect } for pid=8660 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.084869][ T6434] hsr_slave_0: left promiscuous mode [ 215.114232][ T6434] hsr_slave_1: left promiscuous mode [ 215.127815][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.143046][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.150322][ T5817] Bluetooth: hci4: command tx timeout [ 215.200931][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.208468][ T6434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.260501][ T6434] veth1_macvtap: left promiscuous mode [ 215.291869][ T6434] veth0_macvtap: left promiscuous mode [ 215.307560][ T6434] veth1_vlan: left promiscuous mode [ 215.319936][ T6434] veth0_vlan: left promiscuous mode [ 215.862461][ T8687] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 217.239113][ T5817] Bluetooth: hci4: command tx timeout [ 217.307352][ T6434] team0 (unregistering): Port device team_slave_1 removed [ 217.387713][ T6434] team0 (unregistering): Port device team_slave_0 removed [ 217.430868][ T5887] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 217.616317][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 217.711967][ T5887] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.794904][ T5887] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 217.878523][ T5887] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 217.980220][ T5887] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.118121][ T5887] usb 1-1: config 1 interface 0 has no altsetting 0 [ 218.204009][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.298294][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.389969][ T5887] usb 1-1: Product: syz [ 218.410681][ T5887] usb 1-1: Manufacturer: syz [ 218.415306][ T5887] usb 1-1: SerialNumber: syz [ 218.452369][ T8693] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.479846][ T8693] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 218.601295][ T30] audit: type=1400 audit(1746914749.312:590): avc: denied { listen } for pid=8711 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.553744][ T5817] Bluetooth: hci4: command tx timeout [ 219.896370][ T30] audit: type=1800 audit(1746914750.632:591): pid=8730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.596" name="/" dev="9p" ino=2 res=0 errno=0 [ 219.899565][ T5887] usb 1-1: bad CDC descriptors [ 219.958338][ T5887] usb 1-1: USB disconnect, device number 12 [ 220.207822][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 220.357542][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.365212][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.373066][ T8622] bridge_slave_0: entered allmulticast mode [ 220.381092][ T8622] bridge_slave_0: entered promiscuous mode [ 220.397929][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.405204][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.413359][ T8622] bridge_slave_1: entered allmulticast mode [ 220.423028][ T8622] bridge_slave_1: entered promiscuous mode [ 220.504246][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.552225][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.609925][ T30] audit: type=1400 audit(1746914751.352:592): avc: denied { create } for pid=8763 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 220.696545][ T8622] team0: Port device team_slave_0 added [ 220.722824][ T8622] team0: Port device team_slave_1 added [ 220.804354][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.819805][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.850813][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.905774][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.916956][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.943408][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.083007][ T8622] hsr_slave_0: entered promiscuous mode [ 221.112229][ T8622] hsr_slave_1: entered promiscuous mode [ 222.751711][ T8802] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 222.878822][ T8808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'. [ 222.888342][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.610'. [ 222.906871][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.618'. [ 222.954577][ T8805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.009844][ T8805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.022797][ T8805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.034786][ T8805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 223.083907][ T8805] bond1: (slave geneve2): making interface the new active one [ 223.111011][ T8805] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 223.140457][ T8806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.436379][ T8622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.458569][ T8622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.522741][ T8622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.561513][ T8622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.622320][ T8833] syz_tun: entered allmulticast mode [ 223.668695][ T8827] syz_tun: left allmulticast mode [ 224.138013][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.290893][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.957488][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.964606][ T6432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.018491][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.025666][ T6432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.509302][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.743133][ T8622] veth0_vlan: entered promiscuous mode [ 226.793714][ T8622] veth1_vlan: entered promiscuous mode [ 226.922205][ T8622] veth0_macvtap: entered promiscuous mode [ 226.970361][ T8912] block nbd0: NBD_DISCONNECT [ 226.975465][ T8912] block nbd0: Disconnected due to user request. [ 226.984469][ T8622] veth1_macvtap: entered promiscuous mode [ 227.034927][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.060011][ T8912] block nbd0: shutting down sockets [ 227.149820][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.169141][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.180702][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.243543][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.266117][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.279748][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.299748][ T8622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.443132][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.529106][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.622601][ T8622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.658507][ T8622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.694116][ T8622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.706362][ T8622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.832941][ T8622] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 228.843191][ T8622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.895523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.918421][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.926725][ T7948] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 228.929713][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 228.995660][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.003692][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.025239][ T30] audit: type=1800 audit(1746914759.772:593): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.633" name="bus" dev="ramfs" ino=22577 res=0 errno=0 [ 229.093099][ T7948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.106604][ T7948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.109642][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 229.128116][ T7948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.149385][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.174423][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 229.194536][ T7948] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.222041][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.229614][ T7948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.265659][ T7948] usb 3-1: config 0 descriptor?? [ 229.270930][ T10] usb 1-1: config 0 descriptor?? [ 229.452910][ T8947] tc_dump_action: action bad kind [ 229.502731][ T30] audit: type=1400 audit(1746914760.252:594): avc: denied { append } for pid=8924 comm="syz.0.629" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.033675][ T7948] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 230.111084][ T7948] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 230.273250][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 230.313320][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 230.324822][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.333427][ T10] usb 1-1: USB disconnect, device number 13 [ 230.534857][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.678855][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.799459][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.987854][ T12] bridge_slave_1: left allmulticast mode [ 230.994738][ T12] bridge_slave_1: left promiscuous mode [ 231.001169][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.013813][ T12] bridge_slave_0: left allmulticast mode [ 231.019471][ T12] bridge_slave_0: left promiscuous mode [ 231.025603][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.258596][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.267798][ T5857] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 231.278946][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.290103][ T12] bond0 (unregistering): Released all slaves [ 232.478163][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.487920][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.503299][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.514417][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.529320][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.028112][ T9019] new mount options do not match the existing superblock, will be ignored [ 233.258074][ T7944] usb 3-1: USB disconnect, device number 10 [ 233.513638][ T7951] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 233.690195][ T7951] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.727444][ T7951] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 233.737890][ T12] hsr_slave_0: left promiscuous mode [ 233.748000][ T12] hsr_slave_1: left promiscuous mode [ 233.759993][ T7951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.773219][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.782889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.910353][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.916561][ T7951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 233.929593][ T7951] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 233.943465][ T7951] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.952653][ T7951] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.960764][ T7951] usb 1-1: Product: syz [ 233.965512][ T7951] usb 1-1: Manufacturer: syz [ 233.974628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.984914][ T7951] cdc_wdm 1-1:1.0: skipping garbage [ 234.230250][ T7951] cdc_wdm 1-1:1.0: skipping garbage [ 234.384463][ T7951] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 234.399054][ T12] veth1_macvtap: left promiscuous mode [ 234.440565][ T7951] cdc_wdm 1-1:1.0: Unknown control protocol [ 234.454254][ T12] veth0_macvtap: left promiscuous mode [ 234.464852][ T12] veth1_vlan: left promiscuous mode [ 234.493080][ T12] veth0_vlan: left promiscuous mode [ 234.649707][ T5817] Bluetooth: hci4: command tx timeout [ 235.275141][ T9055] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.649'. [ 235.294053][ T9055] tmpfs: Unknown parameter 'quïtÁvÌï?a' [ 235.561872][ T30] audit: type=1400 audit(1746914766.292:595): avc: denied { write } for pid=9057 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 236.091928][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.321492][ T7948] usb 1-1: USB disconnect, device number 14 [ 236.673717][ T5817] Bluetooth: hci4: command tx timeout [ 236.748988][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.786829][ T30] audit: type=1400 audit(1746914768.512:596): avc: denied { setopt } for pid=9082 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.100154][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.215319][ T9008] chnl_net:caif_netlink_parms(): no params data found [ 238.260037][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 238.286878][ T10] usb 3-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 238.299287][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.344968][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.367504][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.431609][ T10] usb 3-1: Product: syz [ 238.458239][ T10] usb 3-1: Manufacturer: syz [ 238.468738][ T10] usb 3-1: SerialNumber: syz [ 238.469792][ T7944] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 238.477238][ T10] usb 3-1: config 0 descriptor?? [ 238.690168][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.755087][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.790674][ T5817] Bluetooth: hci4: command tx timeout [ 238.832014][ T9008] bridge_slave_0: entered allmulticast mode [ 238.928795][ T9008] bridge_slave_0: entered promiscuous mode [ 239.012655][ T9008] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.067269][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.124575][ T9008] bridge_slave_1: entered allmulticast mode [ 239.195583][ T9008] bridge_slave_1: entered promiscuous mode [ 239.465126][ T10] usb 3-1: USB disconnect, device number 11 [ 239.483729][ T7944] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.592847][ T7944] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 239.603007][ T7944] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 239.612174][ T7944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.620299][ T7944] usb 6-1: SerialNumber: syz [ 239.892853][ T9008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.922137][ T9008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.936525][ T5817] Bluetooth: hci4: command tx timeout [ 241.004875][ T9008] team0: Port device team_slave_0 added [ 241.116587][ T30] audit: type=1400 audit(1746914771.852:597): avc: denied { create } for pid=9120 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 241.145141][ T9122] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 241.154692][ T30] audit: type=1400 audit(1746914771.892:598): avc: denied { write } for pid=9120 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 241.294867][ T9008] team0: Port device team_slave_1 added [ 242.298523][ T911] usb 6-1: USB disconnect, device number 3 [ 242.497154][ T9123] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 242.619431][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.661143][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.712673][ T30] audit: type=1400 audit(1746914773.452:599): avc: denied { map } for pid=9133 comm="syz.5.665" path="socket:[23108]" dev="sockfs" ino=23108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 242.743250][ T9008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.764697][ T9008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.772351][ T9008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.801890][ T9008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.032307][ T9008] hsr_slave_0: entered promiscuous mode [ 243.050445][ T9008] hsr_slave_1: entered promiscuous mode [ 243.070372][ T9160] netlink: 'syz.1.671': attribute type 4 has an invalid length. [ 243.129713][ T9160] netlink: 'syz.1.671': attribute type 4 has an invalid length. [ 243.303836][ T5857] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 243.473204][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 243.483366][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 243.496118][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.508501][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.509266][ T911] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 243.533692][ T5857] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 243.569078][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.592846][ T5857] usb 3-1: Product: syz [ 243.597026][ T5857] usb 3-1: Manufacturer: syz [ 243.620070][ T5857] usb 3-1: SerialNumber: syz [ 243.641854][ T5857] usb 3-1: config 0 descriptor?? [ 243.710115][ T911] usb 1-1: Using ep0 maxpacket: 32 [ 243.760274][ T911] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.777708][ T911] usb 1-1: config 255 has an invalid interface number: 81 but max is 0 [ 243.789482][ T911] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 243.803271][ T9180] netlink: 'syz.5.674': attribute type 27 has an invalid length. [ 243.804889][ T911] usb 1-1: config 255 has no interface number 0 [ 243.824105][ T911] usb 1-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 243.837181][ T911] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.851048][ T911] usb 1-1: config 255 interface 81 has no altsetting 0 [ 243.863269][ T911] usb 1-1: string descriptor 0 read error: -22 [ 243.869529][ T911] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 243.879183][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.912484][ T5857] usb 3-1: USB disconnect, device number 12 [ 243.914907][ T911] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.81/input/input5 [ 243.959694][ T30] audit: type=1400 audit(1746914774.702:600): avc: denied { read } for pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=2896 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.996648][ T30] audit: type=1400 audit(1746914774.702:601): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2896 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.035535][ T30] audit: type=1400 audit(1746914774.702:602): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2896 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 244.074493][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.082488][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.158257][ T30] audit: type=1400 audit(1746914774.902:603): avc: denied { read append } for pid=9165 comm="syz.0.672" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.182546][ T30] audit: type=1400 audit(1746914774.902:604): avc: denied { open } for pid=9165 comm="syz.0.672" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 244.243413][ T30] audit: type=1400 audit(1746914774.992:605): avc: denied { load_policy } for pid=9165 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 244.243711][ T9167] SELinux: policydb magic number 0x746c6562 does not match expected magic number 0xf97cff8c [ 244.272555][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.277044][ T9167] SELinux: failed to load policy [ 244.295497][ T5857] usb 1-1: USB disconnect, device number 15 [ 244.323836][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.373611][ T9180] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.382542][ T9180] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.392632][ T9180] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.401767][ T9180] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.438210][ T9180] vlan2: left allmulticast mode [ 244.443334][ T9180] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 244.475754][ T9181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.491402][ T9181] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.503983][ T9181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.533326][ T9184] tipc: Started in network mode [ 244.538203][ T9184] tipc: Node identity 4, cluster identity 4711 [ 244.545575][ T9184] tipc: Node number set to 4 [ 244.553042][ T30] audit: type=1400 audit(1746914775.302:606): avc: denied { execmem } for pid=9187 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 244.828966][ T9194] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 245.014823][ T9008] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.194307][ T9008] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.221991][ T9008] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.232664][ T9196] netlink: 'syz.1.678': attribute type 4 has an invalid length. [ 245.244160][ T9008] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.419926][ T9199] netlink: 'syz.1.678': attribute type 4 has an invalid length. [ 246.183420][ T9008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.200043][ T9008] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.243495][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.250644][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.338833][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.345913][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.388675][ T9216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9216 comm=syz.2.681 [ 246.407376][ T9008] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.723041][ T9008] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.347919][ T9239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9239 comm=syz.5.687 [ 247.392869][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 247.392885][ T30] audit: type=1400 audit(1746914778.142:610): avc: denied { read write } for pid=9237 comm="syz.2.686" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.443661][ T9008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.478170][ T9239] netlink: 76 bytes leftover after parsing attributes in process `syz.5.687'. [ 247.557271][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.687'. [ 247.588001][ T30] audit: type=1400 audit(1746914778.142:611): avc: denied { open } for pid=9237 comm="syz.2.686" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.688467][ T30] audit: type=1400 audit(1746914778.172:612): avc: denied { read write } for pid=9237 comm="syz.2.686" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 247.722249][ T30] audit: type=1400 audit(1746914778.172:613): avc: denied { open } for pid=9237 comm="syz.2.686" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 247.917167][ T9239] team0 (unregistering): Port device team_slave_0 removed [ 247.940395][ T9239] team0 (unregistering): Port device team_slave_1 removed [ 247.963062][ T9239] team0 (unregistering): Port device wlan1 removed [ 248.500355][ T9008] veth0_vlan: entered promiscuous mode [ 248.539600][ T9008] veth1_vlan: entered promiscuous mode [ 248.605762][ T9008] veth0_macvtap: entered promiscuous mode [ 248.647821][ T9008] veth1_macvtap: entered promiscuous mode [ 248.705125][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.736276][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.758241][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.787959][ T9008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.793391][ T5817] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 248.807250][ T5817] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 248.818887][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.840947][ T9008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.851042][ T9008] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.898461][ T9008] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.967489][ T9008] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.009254][ T9008] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.146796][ T9298] kvm: pic: non byte read [ 249.174423][ T9298] kvm: pic: level sensitive irq not supported [ 249.174493][ T9298] kvm: pic: level sensitive irq not supported [ 249.210083][ T9298] kvm: pic: level sensitive irq not supported [ 249.216591][ T9298] kvm: pic: single mode not supported [ 249.222775][ T9298] kvm: pic: level sensitive irq not supported [ 249.311649][ T30] audit: type=1400 audit(1746914780.062:614): avc: denied { create } for pid=9305 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.341770][ T9008] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 249.372638][ T9008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.405118][ T30] audit: type=1400 audit(1746914780.062:615): avc: denied { bind } for pid=9305 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.436926][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.463938][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.812488][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.844181][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.069939][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.061951][ T5817] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 253.070698][ T5817] Bluetooth: hci1: Injecting HCI hardware error event [ 253.078764][ T5810] Bluetooth: hci1: hardware error 0x00 [ 253.451980][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.496273][ T9355] netlink: 'syz.0.708': attribute type 27 has an invalid length. [ 253.620395][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.721687][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.873718][ T52] bridge_slave_1: left allmulticast mode [ 253.879372][ T52] bridge_slave_1: left promiscuous mode [ 253.885559][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.901476][ T52] bridge_slave_0: left allmulticast mode [ 253.907184][ T52] bridge_slave_0: left promiscuous mode [ 253.913359][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.156474][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.166553][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.175986][ T52] bond0 (unregistering): Released all slaves [ 255.103420][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 255.118283][ T9413] syzkaller0: entered promiscuous mode [ 255.135745][ T9413] syzkaller0: entered allmulticast mode [ 255.247732][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.254652][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.332611][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.347149][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.361607][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.369215][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.377468][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.469632][ T5810] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 255.588205][ T52] hsr_slave_0: left promiscuous mode [ 255.615867][ T52] hsr_slave_1: left promiscuous mode [ 255.627981][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.636684][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.644822][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.652751][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.596637][ T9433] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.603071][ T30] audit: type=1400 audit(1746914787.342:616): avc: denied { write } for pid=9426 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 256.630238][ T52] veth1_macvtap: left promiscuous mode [ 256.635776][ T52] veth0_macvtap: left promiscuous mode [ 256.641559][ T52] veth1_vlan: left promiscuous mode [ 256.646854][ T52] veth0_vlan: left promiscuous mode [ 256.944648][ T30] audit: type=1400 audit(1746914787.692:617): avc: denied { setattr } for pid=9442 comm="syz.2.719" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.993133][ T9443] overlayfs: statfs failed on './file0' [ 256.993497][ T30] audit: type=1400 audit(1746914787.732:618): avc: denied { getattr } for pid=9442 comm="syz.2.719" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 257.590569][ T5810] Bluetooth: hci4: command tx timeout [ 258.331316][ T52] team0 (unregistering): Port device team_slave_1 removed [ 258.376248][ T52] team0 (unregistering): Port device team_slave_0 removed [ 258.741032][ T911] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.910665][ T911] usb 3-1: Using ep0 maxpacket: 8 [ 258.931921][ T911] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.164951][ T911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.234333][ T911] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.435270][ T911] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.631213][ T5810] Bluetooth: hci4: command tx timeout [ 259.723978][ T911] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.816388][ T911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.051483][ T9416] chnl_net:caif_netlink_parms(): no params data found [ 260.114290][ T911] usb 3-1: GET_CAPABILITIES returned 0 [ 260.128463][ T911] usbtmc 3-1:16.0: can't read capabilities [ 260.263138][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.270380][ T9416] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.277526][ T9416] bridge_slave_0: entered allmulticast mode [ 260.285494][ T9416] bridge_slave_0: entered promiscuous mode [ 260.296423][ T9416] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.304269][ T9416] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.311558][ T9416] bridge_slave_1: entered allmulticast mode [ 260.318765][ T9416] bridge_slave_1: entered promiscuous mode [ 260.353622][ T10] usb 3-1: USB disconnect, device number 13 [ 260.533157][ T9416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.654769][ T9416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.087636][ T9503] binder: BINDER_SET_CONTEXT_MGR already set [ 261.110166][ T9416] team0: Port device team_slave_0 added [ 261.119288][ T9503] binder: 9502:9503 ioctl 4018620d 2000000000c0 returned -16 [ 261.154113][ T9503] binder: BINDER_SET_CONTEXT_MGR already set [ 261.169642][ T9503] binder: 9502:9503 ioctl 4018620d 200000000040 returned -16 [ 261.192277][ T9416] team0: Port device team_slave_1 added [ 261.740825][ T5810] Bluetooth: hci4: command tx timeout [ 261.875533][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.965883][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.013966][ T9416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.063791][ T9416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.133054][ T9416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.269658][ T9416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.333533][ T9515] tmpfs: Bad value for 'mpol' [ 263.341840][ T30] audit: type=1400 audit(1746914794.082:619): avc: denied { mounton } for pid=9514 comm="syz.0.734" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 263.398775][ T9416] hsr_slave_0: entered promiscuous mode [ 263.419097][ T9416] hsr_slave_1: entered promiscuous mode [ 263.579968][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 263.743956][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 263.754208][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 263.800899][ T5810] Bluetooth: hci4: command tx timeout [ 264.216092][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1477, setting to 1024 [ 264.227574][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.248606][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.273254][ T10] usb 1-1: config 0 descriptor?? [ 264.290007][ T9515] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.298468][ T30] audit: type=1400 audit(1746914795.032:620): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 264.338928][ T10] hub 1-1:0.0: USB hub found [ 264.559688][ T10] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 264.592595][ T7948] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 264.751773][ T7948] usb 3-1: Using ep0 maxpacket: 32 [ 264.777088][ T7948] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 264.806683][ T7948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.848767][ T7948] usb 3-1: config 0 descriptor?? [ 264.885283][ T7948] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 264.909771][ T7948] gspca_mr97310a: reg write [21] error -22 [ 264.923090][ T7948] mr97310a 3-1:0.0: probe with driver mr97310a failed with error -22 [ 264.994249][ T10] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 265.025167][ T5810] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 265.032610][ T5810] Bluetooth: hci3: unexpected event for opcode 0x203e [ 265.170051][ T10] usb 3-1: USB disconnect, device number 14 [ 265.286795][ T9416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.335254][ T9416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.373787][ T9416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.383137][ T911] usb 1-1: USB disconnect, device number 16 [ 265.416156][ T9416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.602010][ T9416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.636312][ T9416] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.657415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.664558][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.681078][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.688187][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.753193][ T9416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.845236][ T9562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.221222][ T9416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.057865][ T9416] veth0_vlan: entered promiscuous mode [ 268.106571][ T9416] veth1_vlan: entered promiscuous mode [ 268.203965][ T30] audit: type=1400 audit(1746914798.942:621): avc: denied { write } for pid=9597 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.334944][ T30] audit: type=1400 audit(1746914798.942:622): avc: denied { nlmsg_write } for pid=9597 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.343412][ T9416] veth0_macvtap: entered promiscuous mode [ 268.444455][ T9416] veth1_macvtap: entered promiscuous mode [ 268.467445][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.533411][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.547615][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.564360][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.648274][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.779772][ T7944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 268.970006][ T7944] usb 6-1: Using ep0 maxpacket: 16 [ 268.981682][ T7944] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 269.090667][ T9416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.211638][ T7944] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 269.235994][ T7944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 269.245964][ T7944] usb 6-1: config 0 has no interface number 0 [ 269.254601][ T7944] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 269.268082][ T9416] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.278116][ T9416] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.291549][ T7944] usb 6-1: config 0 interface 104 has no altsetting 1 [ 269.313299][ T9416] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.322879][ T9416] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.402236][ T7944] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 269.413952][ T7944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.445970][ T7944] usb 6-1: Product: syz [ 269.459450][ T7944] usb 6-1: Manufacturer: syz [ 269.467137][ T7944] usb 6-1: SerialNumber: syz [ 269.498127][ T7944] usb 6-1: config 0 descriptor?? [ 269.820515][ T7944] asix 6-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 270.355064][ T7944] asix 6-1:0.104: probe with driver asix failed with error -71 [ 270.372125][ T9416] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 270.387683][ T7944] usb 6-1: USB disconnect, device number 4 [ 270.398131][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.463663][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.492335][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.611096][ T6437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.654075][ T6437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.021658][ T9643] netlink: 5 bytes leftover after parsing attributes in process `syz.2.757'. [ 271.188656][ T9643] 0ªX¹¦D: renamed from gretap0 (while UP) [ 271.212545][ T9643] 0ªX¹¦D: entered allmulticast mode [ 271.219486][ T9643] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 271.430180][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.758274][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.843574][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.924493][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.122944][ T36] bridge_slave_1: left allmulticast mode [ 272.128620][ T36] bridge_slave_1: left promiscuous mode [ 272.138978][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.153259][ T36] bridge_slave_0: left allmulticast mode [ 272.158914][ T36] bridge_slave_0: left promiscuous mode [ 272.189500][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.463423][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.473868][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.483292][ T36] bond0 (unregistering): Released all slaves [ 272.702142][ T36] hsr_slave_0: left promiscuous mode [ 272.707986][ T36] hsr_slave_1: left promiscuous mode [ 272.714087][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.721769][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.729758][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.737154][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.761333][ T36] veth1_macvtap: left promiscuous mode [ 272.766883][ T36] veth0_macvtap: left promiscuous mode [ 272.775714][ T36] veth1_vlan: left promiscuous mode [ 272.781521][ T36] veth0_vlan: left promiscuous mode [ 273.649715][ T30] audit: type=1326 audit(1746914804.392:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz.0.759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa54138e969 code=0x0 [ 273.681967][ T7944] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 273.964892][ T7944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.012302][ T7944] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.019385][ T9701] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 274.045649][ T7944] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 274.245303][ T7944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.270229][ T7944] usb 6-1: config 0 descriptor?? [ 274.281487][ T7944] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 274.368307][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.385674][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.394950][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.419825][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.427097][ T30] audit: type=1326 audit(1746914805.172:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.450679][ T30] audit: type=1326 audit(1746914805.172:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.474168][ T30] audit: type=1326 audit(1746914805.172:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.497577][ T30] audit: type=1326 audit(1746914805.172:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.520915][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.527919][ T30] audit: type=1326 audit(1746914805.172:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.557424][ T30] audit: type=1326 audit(1746914805.172:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.581136][ T30] audit: type=1326 audit(1746914805.172:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.639932][ T30] audit: type=1326 audit(1746914805.172:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.663564][ T30] audit: type=1326 audit(1746914805.172:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9711 comm="syz.1.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ac7f8e969 code=0x7ffc0000 [ 274.777165][ T36] team0 (unregistering): Port device team_slave_1 removed [ 275.228482][ T36] team0 (unregistering): Port device team_slave_0 removed [ 276.599685][ T5817] Bluetooth: hci4: command tx timeout [ 276.924390][ T10] usb 6-1: USB disconnect, device number 5 [ 277.146120][ T9734] netlink: 156 bytes leftover after parsing attributes in process `syz.5.772'. [ 277.314360][ T9697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.759'. [ 277.543503][ T9744] usb usb8: usbfs: process 9744 (syz.5.775) did not claim interface 0 before use [ 278.206173][ T9709] chnl_net:caif_netlink_parms(): no params data found [ 278.704908][ T5817] Bluetooth: hci4: command tx timeout [ 278.837311][ T9709] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.880234][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.887362][ T9709] bridge_slave_0: entered allmulticast mode [ 278.901777][ T9774] binder: 9773:9774 ioctl c0306201 200000001d40 returned -14 [ 278.937152][ T9709] bridge_slave_0: entered promiscuous mode [ 278.937689][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 278.960497][ T9709] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.979645][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.986813][ T9709] bridge_slave_1: entered allmulticast mode [ 279.000945][ T9709] bridge_slave_1: entered promiscuous mode [ 279.145936][ T9709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.184839][ T9709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.368503][ T5857] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 279.372804][ T9709] team0: Port device team_slave_0 added [ 279.417731][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 279.417746][ T30] audit: type=1400 audit(1746914810.162:655): avc: denied { bind } for pid=9789 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.451787][ T9709] team0: Port device team_slave_1 added [ 279.577095][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 279.678757][ T5857] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 279.824018][ T5857] usb 3-1: config 0 has no interface number 0 [ 279.875150][ T5857] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.902821][ T5857] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 279.905729][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.936702][ T5857] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 279.949912][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.950227][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 280.001488][ T9709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.021821][ T9709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.039159][ T9709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.112157][ T5857] usb 3-1: Product: syz [ 280.116345][ T5857] usb 3-1: SerialNumber: syz [ 280.126883][ T5857] usb 3-1: config 0 descriptor?? [ 280.143675][ T9709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.155001][ T9803] capability: warning: `syz.1.788' uses 32-bit capabilities (legacy support in use) [ 280.157508][ T5857] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 280.198067][ T5857] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 280.328268][ T9709] hsr_slave_0: entered promiscuous mode [ 280.749642][ T5817] Bluetooth: hci4: command tx timeout [ 281.272391][ T9779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.327629][ T9709] hsr_slave_1: entered promiscuous mode [ 281.336344][ T9779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.439156][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 281.973012][ T9779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.307498][ T911] usb 3-1: USB disconnect, device number 15 [ 282.407902][ T911] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 282.747376][ T9840] bridge1: entered allmulticast mode [ 282.829672][ T5817] Bluetooth: hci4: command tx timeout [ 283.095714][ T30] audit: type=1400 audit(1746914813.842:656): avc: denied { mounton } for pid=9853 comm="syz.2.797" path="/proc/604/cgroup" dev="proc" ino=27018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 283.180822][ T30] audit: type=1400 audit(1746914813.892:657): avc: denied { remount } for pid=9853 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 283.875372][ T9868] syzkaller1: entered promiscuous mode [ 283.890592][ T9868] syzkaller1: entered allmulticast mode [ 285.081855][ T9709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.250013][ T9885] hfsplus: unable to find HFS+ superblock [ 285.268765][ T9709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.454435][ T9709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.568315][ T9709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.982567][ T9709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.999141][ T9709] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.029570][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.036709][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.059668][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.066817][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.224543][ T30] audit: type=1400 audit(1746914816.922:658): avc: denied { read } for pid=5170 comm="acpid" name="event8" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 286.246742][ T30] audit: type=1400 audit(1746914816.922:659): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2925 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 286.274640][ T30] audit: type=1400 audit(1746914816.922:660): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=2925 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 287.265335][ T9709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.030154][ T5810] Bluetooth: hci0: command 0x1407 tx timeout [ 288.413776][ T9709] veth0_vlan: entered promiscuous mode [ 289.396017][ T9709] veth1_vlan: entered promiscuous mode [ 289.417910][ T9709] veth0_macvtap: entered promiscuous mode [ 289.749094][ T9709] veth1_macvtap: entered promiscuous mode [ 289.765697][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.776253][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.804462][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.892434][ T9709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.906955][ T9947] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 289.938136][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.995266][ T9709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.047508][ T9950] wg1: entered promiscuous mode [ 290.053408][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.070349][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 290.085957][ T9950] wg1: entered allmulticast mode [ 290.122684][ T30] audit: type=1400 audit(1746914820.872:661): avc: denied { map } for pid=9943 comm="syz.5.818" path="socket:[27311]" dev="sockfs" ino=27311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.158629][ T9952] bond3: entered promiscuous mode [ 290.166021][ T9952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.174873][ T9952] bond2: (slave bond3): making interface the new active one [ 290.182988][ T9952] bond2: (slave bond3): Enslaving as an active interface with an up link [ 290.222273][ T9709] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.242533][ T9709] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.265650][ T9709] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.288094][ T9709] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.358266][ T30] audit: type=1400 audit(1746914821.102:662): avc: denied { lock } for pid=9965 comm="syz.1.822" path="socket:[26353]" dev="sockfs" ino=26353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 290.482736][ T9709] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec1 [ 290.494824][ T9709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.516598][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.546862][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.581805][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.592590][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.780076][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 290.800521][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'. [ 290.816886][ T30] audit: type=1400 audit(1746914821.562:663): avc: denied { ioctl } for pid=9984 comm="syz.0.825" path="socket:[26427]" dev="sockfs" ino=26427 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.939843][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 290.951610][ T10] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 290.960878][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.973370][ T10] usb 6-1: Product: syz [ 290.983551][ T10] usb 6-1: Manufacturer: syz [ 290.992668][ T10] usb 6-1: SerialNumber: syz [ 291.007813][ T10] usb 6-1: config 0 descriptor?? [ 291.026466][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 291.044161][ T10] usb 6-1: setting power ON [ 291.055844][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 291.083442][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.104439][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 291.115189][ T10] usb 6-1: media controller created [ 291.160467][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.228555][ T9973] dvb-usb: bulk message failed: -22 (3/0) [ 291.236349][ T30] audit: type=1400 audit(1746914821.972:664): avc: denied { append } for pid=9971 comm="syz.5.823" name="i2c-1" dev="devtmpfs" ino=2927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.267313][ T9973] usb 6-1: gpio_write failed. [ 291.275743][ T9973] cxusb: i2c wr: len=79 is too big! [ 291.275743][ T9973] [ 291.291217][ T10] usb 6-1: selecting invalid altsetting 6 [ 291.297083][ T10] usb 6-1: digital interface selection failed (-22) [ 291.329584][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 291.464438][ T10] usb 6-1: setting power OFF [ 291.469354][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 291.477190][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 291.486777][ T10] (NULL device *): no alternate interface [ 291.530881][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 292.023990][ T10] usb 6-1: USB disconnect, device number 6 [ 292.184625][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.332740][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.637283][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.710795][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.804655][ T36] bridge_slave_1: left allmulticast mode [ 292.810647][ T36] bridge_slave_1: left promiscuous mode [ 292.816390][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.826981][ T36] bridge_slave_0: left allmulticast mode [ 292.833203][ T36] bridge_slave_0: left promiscuous mode [ 292.838835][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.051263][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.061268][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.072625][ T36] bond0 (unregistering): Released all slaves [ 293.307298][ T36] hsr_slave_0: left promiscuous mode [ 293.313269][ T36] hsr_slave_1: left promiscuous mode [ 293.319056][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.326722][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.334602][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.346253][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.369485][ T36] veth1_macvtap: left promiscuous mode [ 293.399665][ T36] veth0_macvtap: left promiscuous mode [ 293.419723][ T36] veth1_vlan: left promiscuous mode [ 293.426709][ T30] audit: type=1400 audit(1746914824.172:665): avc: denied { ioctl } for pid=10052 comm="syz.1.830" path="socket:[27586]" dev="sockfs" ino=27586 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 293.459682][ T36] veth0_vlan: left promiscuous mode [ 293.468529][T10056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.213699][ T30] audit: type=1400 audit(1746914824.432:666): avc: denied { bind } for pid=10052 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 294.749755][ T7944] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 295.470002][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.507109][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.516301][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.525323][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.533005][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.541280][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.600159][ T7944] usb 6-1: Using ep0 maxpacket: 16 [ 295.613463][ T7944] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 295.633125][ T7944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.642377][ T7944] usb 6-1: Product: syz [ 295.646803][ T7944] usb 6-1: Manufacturer: syz [ 295.662166][ T7944] usb 6-1: SerialNumber: syz [ 295.676807][ T7944] usb 6-1: config 0 descriptor?? [ 295.714704][ T7944] as10x_usb: device has been detected [ 295.720815][ T7944] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 295.743655][ T7944] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 296.724516][ T30] audit: type=1400 audit(1746914827.472:667): avc: denied { firmware_load } for pid=7944 comm="kworker/1:8" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 297.518451][ T7944] as10x_usb: error during firmware upload part1 [ 297.631468][ T5810] Bluetooth: hci4: command tx timeout [ 297.690078][ T7944] Registered device Sky IT Digital Key (green led) [ 297.771710][T10089] syz.2.837 (10089): drop_caches: 2 [ 298.192917][ T7951] usb 6-1: USB disconnect, device number 7 [ 298.247612][ T7951] Unregistered device Sky IT Digital Key (green led) [ 298.285974][ T7951] as10x_usb: device has been disconnected [ 298.617910][ T30] audit: type=1400 audit(1746914829.362:668): avc: denied { read } for pid=10097 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 298.706226][ T36] team0 (unregistering): Port device team_slave_1 removed [ 298.765505][T10108] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 298.843262][ T36] team0 (unregistering): Port device team_slave_0 removed [ 299.355858][T10108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.530386][T10109] bond1: (slave gretap1): making interface the new active one [ 299.626154][T10109] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 299.736534][ T5810] Bluetooth: hci4: command tx timeout [ 299.963878][T10110] veth3: entered promiscuous mode [ 299.982565][T10110] bond1: (slave veth3): Enslaving as an active interface with a down link [ 300.779366][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 301.038651][T10083] chnl_net:caif_netlink_parms(): no params data found [ 301.311888][ T3585] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.323988][ T36] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN NOPTI [ 301.336040][ T36] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 301.344421][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 301.356363][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.366401][ T36] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 301.373336][ T36] RIP: 0010:find_match+0x136/0x15d0 [ 301.378515][ T36] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 84 1c 50 01 [ 301.398100][ T36] RSP: 0018:ffffc90000ad7058 EFLAGS: 00010206 [ 301.404143][ T36] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffffff8a1ca97c [ 301.412092][ T36] RDX: 0000000000000018 RSI: ffffffff8a1ca9bf RDI: 00000000000000c0 [ 301.420040][ T36] RBP: ffffc90000ad7160 R08: 0000000000000001 R09: 0000000000000000 [ 301.427992][ T36] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028b6e437 [ 301.435939][ T36] R13: ffff888028b6e420 R14: 1ffff9200015ae1a R15: 0000000000000000 [ 301.443887][ T36] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 301.452795][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.459356][ T36] CR2: 000055b8fe1fd3b1 CR3: 000000002955b000 CR4: 00000000003526f0 [ 301.467305][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004520 [ 301.475254][ T36] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.483200][ T36] Call Trace: [ 301.486456][ T36] [ 301.489368][ T36] ? find_held_lock+0x2b/0x80 [ 301.494030][ T36] ? unwind_next_frame+0x3f4/0x20a0 [ 301.499209][ T36] ? __pfx_find_match+0x10/0x10 [ 301.504041][ T36] ? ret_from_fork+0x45/0x80 [ 301.508608][ T36] ? kfree+0x2b6/0x4d0 [ 301.512659][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 301.517576][ T36] ? __kernel_text_address+0xd/0x40 [ 301.522757][ T36] rt6_nh_find_match+0xfa/0x1a0 [ 301.527585][ T36] nexthop_for_each_fib6_nh+0x165/0x4a0 [ 301.533116][ T36] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 301.538554][ T36] __find_rr_leaf+0x6e5/0xe00 [ 301.543210][ T36] ? __pfx___find_rr_leaf+0x10/0x10 [ 301.548389][ T36] ? fib6_node_lookup+0x12d/0x190 [ 301.553390][ T36] ? __pfx_fib6_node_lookup+0x10/0x10 [ 301.558740][ T36] ? find_held_lock+0x2b/0x80 [ 301.563399][ T36] fib6_table_lookup+0x57c/0xa30 [ 301.568319][ T36] ? __pfx_fib6_table_lookup+0x10/0x10 [ 301.573760][ T36] ip6_pol_route+0x1cc/0x1230 [ 301.578417][ T36] ? __pfx_ip6_pol_route+0x10/0x10 [ 301.583513][ T36] ? find_held_lock+0x2b/0x80 [ 301.588167][ T36] ? unwind_next_frame+0x3f4/0x20a0 [ 301.593345][ T36] ? unwind_next_frame+0x3fe/0x20a0 [ 301.598520][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 301.603442][ T36] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 301.609141][ T36] fib6_rule_lookup+0x386/0x720 [ 301.613974][ T36] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 301.619326][ T36] ? lock_acquire+0x179/0x350 [ 301.623987][ T36] ? __pfx_stack_trace_save+0x10/0x10 [ 301.629337][ T36] ? stack_depot_save_flags+0x28/0xa50 [ 301.634778][ T36] ip6_route_output_flags+0x1d0/0x640 [ 301.640127][ T36] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 301.646348][ T36] ? wg_socket_send_buffer_to_peer+0x38/0x1a0 [ 301.652394][ T36] ? worker_thread+0x6c8/0xf10 [ 301.657133][ T36] ? kthread+0x3c2/0x780 [ 301.661349][ T36] ? ret_from_fork+0x45/0x80 [ 301.665916][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 301.670836][ T36] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 301.677490][ T36] ? __lock_acquire+0x5ca/0x1ba0 [ 301.682411][ T36] ip6_dst_lookup_flow+0x99/0x1d0 [ 301.687414][ T36] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 301.693026][ T36] ? dst_cache_per_cpu_get+0x13d/0x2f0 [ 301.698469][ T36] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 301.704081][ T36] send6+0x61c/0xd30 [ 301.707955][ T36] ? __pfx_send6+0x10/0x10 [ 301.712371][ T36] ? __alloc_skb+0x200/0x380 [ 301.716938][ T36] ? __pfx___alloc_skb+0x10/0x10 [ 301.721854][ T36] wg_socket_send_skb_to_peer+0xf6/0x210 [ 301.727467][ T36] wg_socket_send_buffer_to_peer+0x148/0x1a0 [ 301.733427][ T36] wg_packet_send_handshake_initiation+0x225/0x360 [ 301.739906][ T36] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 301.746906][ T36] ? __lock_acquire+0xaa4/0x1ba0 [ 301.751831][ T36] wg_packet_handshake_send_worker+0x1c/0x30 [ 301.757787][ T36] process_one_work+0x9cc/0x1b70 [ 301.762706][ T36] ? __pfx_process_one_work+0x10/0x10 [ 301.768056][ T36] ? assign_work+0x1a0/0x250 [ 301.772625][ T36] worker_thread+0x6c8/0xf10 [ 301.777194][ T36] ? __pfx_worker_thread+0x10/0x10 [ 301.782281][ T36] kthread+0x3c2/0x780 [ 301.786325][ T36] ? __pfx_kthread+0x10/0x10 [ 301.790889][ T36] ? __pfx_kthread+0x10/0x10 [ 301.795452][ T36] ? __pfx_kthread+0x10/0x10 [ 301.800018][ T36] ? __pfx_kthread+0x10/0x10 [ 301.804596][ T36] ? rcu_is_watching+0x12/0xc0 [ 301.809340][ T36] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 301.813911][ T36] ret_from_fork+0x45/0x80 [ 301.818307][ T36] ? __pfx_kthread+0x10/0x10 [ 301.822872][ T36] ret_from_fork_asm+0x1a/0x30 [ 301.827619][ T36] [ 301.830616][ T36] Modules linked in: [ 301.834526][ T36] ---[ end trace 0000000000000000 ]--- [ 301.839990][ T36] RIP: 0010:find_match+0x136/0x15d0 [ 301.845180][ T36] Code: 48 c1 ea 03 80 3c 02 00 0f 85 ac 11 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 7d 00 49 8d bf c0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 93 11 00 00 4d 8b bf c0 00 00 00 e8 84 1c 50 01 [ 301.864804][ T36] RSP: 0018:ffffc90000ad7058 EFLAGS: 00010206 [ 301.870867][ T36] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: ffffffff8a1ca97c [ 301.878826][ T36] RDX: 0000000000000018 RSI: ffffffff8a1ca9bf RDI: 00000000000000c0 [ 301.886844][ T36] RBP: ffffc90000ad7160 R08: 0000000000000001 R09: 0000000000000000 [ 301.894840][ T36] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888028b6e437 [ 301.902817][ T36] R13: ffff888028b6e420 R14: 1ffff9200015ae1a R15: 0000000000000000 [ 301.910772][ T36] FS: 0000000000000000(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 301.919685][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.926244][ T36] CR2: 000055b8fe1fd3b1 CR3: 000000000e180000 CR4: 00000000003526f0 [ 301.934199][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004520 [ 301.942151][ T36] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 301.950111][ T36] Kernel panic - not syncing: Fatal exception in interrupt [ 301.957478][ T36] Kernel Offset: disabled [ 301.961775][ T36] Rebooting in 86400 seconds..