last executing test programs: 1m13.664368988s ago: executing program 3 (id=47): syz_open_procfs(0x0, &(0x7f0000000580)='net/snmp6\x00') r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m12.908386413s ago: executing program 3 (id=52): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1m12.094077723s ago: executing program 3 (id=57): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m11.58384042s ago: executing program 3 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x60}}, 0x0) 1m10.489647629s ago: executing program 3 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 41.170923667s ago: executing program 0 (id=197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open_by_handle_at(r0, 0x0, 0x40000) 40.690975654s ago: executing program 0 (id=198): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120) 40.176264558s ago: executing program 0 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004c00000008000300", @ANYRES32=r3], 0x38}}, 0x0) 39.561712599s ago: executing program 0 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c41000000030014"], 0x30}}, 0x0) 39.103765523s ago: executing program 0 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}}, 0x0) 31.141514331s ago: executing program 0 (id=204): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x18, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 15.478663354s ago: executing program 3 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 4.754684776s ago: executing program 4 (id=277): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r2, 0xc01, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x7e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) 4.534237699s ago: executing program 1 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}]]}, 0x30}}, 0x0) 4.384947563s ago: executing program 2 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.306866787s ago: executing program 4 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}], [], 0x6b}}) 4.017444729s ago: executing program 2 (id=281): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0xacc, 0x0, 0x1}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000001c0), &(0x7f0000000200)=""/16}, 0x20) 3.841771444s ago: executing program 2 (id=282): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0x272, @time}) 3.708581598s ago: executing program 2 (id=283): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3.706859302s ago: executing program 4 (id=284): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 3.665054733s ago: executing program 1 (id=285): landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYRES16=r1, @ANYRES16=r0, @ANYRESOCT=r3], 0x0) 2.636387544s ago: executing program 4 (id=286): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000200000007"], 0x5d9400) 2.022557401s ago: executing program 4 (id=287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b1a, &(0x7f0000000040)) 1.789584962s ago: executing program 1 (id=288): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) 1.493387954s ago: executing program 1 (id=289): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x42, 0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2000000, r2, 0xd000}) 1.320014647s ago: executing program 4 (id=290): preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0x120) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0c000000a9"], 0xaf) 664.09212ms ago: executing program 1 (id=291): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f", 0x8}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\t'], 0xa) 569.459091ms ago: executing program 2 (id=292): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26441, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x2) 36.556288ms ago: executing program 2 (id=293): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=294): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r1}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 97.664252][ T943] cfg80211: failed to load regulatory.db [ 102.055287][ T29] audit: type=1400 audit(1725012777.294:88): avc: denied { mounton } for pid=5214 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 102.067429][ T5214] cgroup: Unknown subsys name 'net' [ 102.078952][ T29] audit: type=1400 audit(1725012777.294:89): avc: denied { mount } for pid=5214 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.105862][ T29] audit: type=1400 audit(1725012777.324:90): avc: denied { unmount } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.243775][ T5214] cgroup: Unknown subsys name 'rlimit' [ 102.425525][ T29] audit: type=1400 audit(1725012777.664:91): avc: denied { setattr } for pid=5214 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.449086][ T29] audit: type=1400 audit(1725012777.664:92): avc: denied { create } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.472666][ T29] audit: type=1400 audit(1725012777.664:93): avc: denied { write } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.508559][ T29] audit: type=1400 audit(1725012777.664:94): avc: denied { read } for pid=5214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.534476][ T29] audit: type=1400 audit(1725012777.694:95): avc: denied { read } for pid=4890 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 102.555951][ T29] audit: type=1400 audit(1725012777.734:96): avc: denied { mounton } for pid=5214 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.581692][ T29] audit: type=1400 audit(1725012777.734:97): avc: denied { mount } for pid=5214 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 102.680206][ T5219] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 104.705748][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.847732][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 107.847755][ T29] audit: type=1400 audit(1725012783.084:103): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 107.919702][ T29] audit: type=1400 audit(1725012783.114:104): avc: denied { mount } for pid=5228 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 108.042926][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.051719][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.061425][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.061681][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.075832][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.078907][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.084241][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.091827][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.109790][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.110888][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.118246][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.127296][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.127687][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.128558][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.135831][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.159222][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.161466][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.193781][ T29] audit: type=1400 audit(1725012783.114:105): avc: denied { create } for pid=5228 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.202790][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.238220][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.239835][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.251375][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.260362][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.267071][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.277231][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.289804][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.300832][ T29] audit: type=1400 audit(1725012783.114:106): avc: denied { read write } for pid=5228 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.305063][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.350566][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.368895][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.377224][ T29] audit: type=1400 audit(1725012783.114:107): avc: denied { open } for pid=5228 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 108.401704][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.417571][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.463629][ T29] audit: type=1400 audit(1725012783.154:108): avc: denied { ioctl } for pid=5226 comm="syz-executor" path="socket:[4155]" dev="sockfs" ino=4155 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.503970][ T29] audit: type=1400 audit(1725012783.424:109): avc: denied { read } for pid=5226 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.530794][ T29] audit: type=1400 audit(1725012783.424:110): avc: denied { open } for pid=5226 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.563112][ T29] audit: type=1400 audit(1725012783.464:111): avc: denied { mounton } for pid=5226 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.317514][ T29] audit: type=1400 audit(1725012784.554:112): avc: denied { module_request } for pid=5226 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.569481][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 109.642076][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 109.762638][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 109.816316][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 109.979798][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 110.149912][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.157282][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.168748][ T5226] bridge_slave_0: entered allmulticast mode [ 110.178343][ T5226] bridge_slave_0: entered promiscuous mode [ 110.215553][ T5240] Bluetooth: hci1: command tx timeout [ 110.304338][ T5240] Bluetooth: hci0: command tx timeout [ 110.312983][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.322725][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.331002][ T5226] bridge_slave_1: entered allmulticast mode [ 110.339489][ T5226] bridge_slave_1: entered promiscuous mode [ 110.385488][ T5238] Bluetooth: hci2: command tx timeout [ 110.391637][ T5240] Bluetooth: hci3: command tx timeout [ 110.417477][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.427305][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.435799][ T5234] bridge_slave_0: entered allmulticast mode [ 110.444273][ T5234] bridge_slave_0: entered promiscuous mode [ 110.482419][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.493020][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.502949][ T5227] bridge_slave_0: entered allmulticast mode [ 110.512914][ T5227] bridge_slave_0: entered promiscuous mode [ 110.526555][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.534030][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.535923][ T5240] Bluetooth: hci4: command tx timeout [ 110.541444][ T5227] bridge_slave_1: entered allmulticast mode [ 110.557502][ T5227] bridge_slave_1: entered promiscuous mode [ 110.596634][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.607371][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.616740][ T5234] bridge_slave_1: entered allmulticast mode [ 110.624982][ T5234] bridge_slave_1: entered promiscuous mode [ 110.803223][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.821465][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.868354][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.880144][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.889414][ T5241] bridge_slave_0: entered allmulticast mode [ 110.898928][ T5241] bridge_slave_0: entered promiscuous mode [ 110.908263][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.918118][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.928157][ T5228] bridge_slave_0: entered allmulticast mode [ 110.938563][ T5228] bridge_slave_0: entered promiscuous mode [ 110.949970][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.958139][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.968771][ T5228] bridge_slave_1: entered allmulticast mode [ 110.978728][ T5228] bridge_slave_1: entered promiscuous mode [ 110.991917][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.057014][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.066663][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.077213][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.087129][ T5241] bridge_slave_1: entered allmulticast mode [ 111.100405][ T5241] bridge_slave_1: entered promiscuous mode [ 111.136426][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.198511][ T5226] team0: Port device team_slave_0 added [ 111.209998][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.320498][ T5234] team0: Port device team_slave_0 added [ 111.341534][ T5234] team0: Port device team_slave_1 added [ 111.352123][ T5226] team0: Port device team_slave_1 added [ 111.389028][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.402979][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.424576][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.511384][ T5227] team0: Port device team_slave_0 added [ 111.548827][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.629249][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.637706][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.665243][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.682740][ T5227] team0: Port device team_slave_1 added [ 111.741745][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.752286][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.780032][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.795438][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.802428][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.835918][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.878110][ T5241] team0: Port device team_slave_0 added [ 111.897708][ T5241] team0: Port device team_slave_1 added [ 111.915043][ T5228] team0: Port device team_slave_0 added [ 111.922468][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.931966][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.962857][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.040185][ T5228] team0: Port device team_slave_1 added [ 112.128844][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.136923][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.169285][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.184322][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.191321][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.219677][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.276157][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.283163][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.309793][ T5240] Bluetooth: hci1: command tx timeout [ 112.317126][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.361910][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.369497][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.395564][ T5240] Bluetooth: hci0: command tx timeout [ 112.402194][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.417272][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.425608][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.451672][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.471202][ T5238] Bluetooth: hci2: command tx timeout [ 112.476857][ T5240] Bluetooth: hci3: command tx timeout [ 112.486775][ T5226] hsr_slave_0: entered promiscuous mode [ 112.495307][ T5226] hsr_slave_1: entered promiscuous mode [ 112.515040][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.522019][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.549649][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.616714][ T5240] Bluetooth: hci4: command tx timeout [ 112.682975][ T5234] hsr_slave_0: entered promiscuous mode [ 112.690103][ T5234] hsr_slave_1: entered promiscuous mode [ 112.699677][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.708794][ T5234] Cannot create hsr debugfs directory [ 112.858631][ T5227] hsr_slave_0: entered promiscuous mode [ 112.866319][ T5227] hsr_slave_1: entered promiscuous mode [ 112.872858][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.881421][ T5227] Cannot create hsr debugfs directory [ 112.944230][ T5228] hsr_slave_0: entered promiscuous mode [ 112.951758][ T5228] hsr_slave_1: entered promiscuous mode [ 112.958591][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.967466][ T5228] Cannot create hsr debugfs directory [ 113.082966][ T5241] hsr_slave_0: entered promiscuous mode [ 113.091612][ T5241] hsr_slave_1: entered promiscuous mode [ 113.098729][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.107305][ T5241] Cannot create hsr debugfs directory [ 114.131862][ T5234] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.158595][ T5234] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.178809][ T5234] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.200493][ T5234] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.321389][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.335072][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.359326][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.374111][ T5240] Bluetooth: hci1: command tx timeout [ 114.388734][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.471785][ T5240] Bluetooth: hci0: command tx timeout [ 114.533850][ T5240] Bluetooth: hci3: command tx timeout [ 114.533917][ T5238] Bluetooth: hci2: command tx timeout [ 114.615922][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.638073][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.652285][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.684612][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.700735][ T5238] Bluetooth: hci4: command tx timeout [ 114.857925][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.970593][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.013247][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.061881][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.079680][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.132238][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.311167][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.318732][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.388457][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.395711][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.475071][ T5241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.490036][ T5241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.523347][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.550882][ T5241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.622800][ T5241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.743188][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.837922][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.845184][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.079871][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.080637][ T29] audit: type=1400 audit(1725012791.314:113): avc: denied { sys_module } for pid=5234 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 116.109358][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.125631][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.370457][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.438661][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.468291][ T5238] Bluetooth: hci1: command tx timeout [ 116.517385][ T2499] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.524804][ T2499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.536754][ T5238] Bluetooth: hci0: command tx timeout [ 116.597925][ T2499] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.605312][ T2499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.614374][ T5238] Bluetooth: hci3: command tx timeout [ 116.619845][ T5238] Bluetooth: hci2: command tx timeout [ 116.674789][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.780271][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.790684][ T5238] Bluetooth: hci4: command tx timeout [ 116.833155][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.840447][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.959282][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.124128][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.131448][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.310522][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.438785][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.446089][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.632840][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.640195][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.062994][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.387795][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.479961][ T5234] veth0_vlan: entered promiscuous mode [ 118.572582][ T5234] veth1_vlan: entered promiscuous mode [ 118.760891][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.999996][ T5234] veth0_macvtap: entered promiscuous mode [ 119.034994][ T5234] veth1_macvtap: entered promiscuous mode [ 119.133303][ T5226] veth0_vlan: entered promiscuous mode [ 119.202665][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.261849][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.328099][ T5226] veth1_vlan: entered promiscuous mode [ 119.357971][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.378930][ T5234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.396241][ T5234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.406912][ T5234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.429069][ T5234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.487795][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.673420][ T5228] veth0_vlan: entered promiscuous mode [ 119.788571][ T5228] veth1_vlan: entered promiscuous mode [ 120.050914][ T5241] veth0_vlan: entered promiscuous mode [ 120.057873][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.074148][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.109839][ T5226] veth0_macvtap: entered promiscuous mode [ 120.245221][ T5226] veth1_macvtap: entered promiscuous mode [ 120.271959][ T5241] veth1_vlan: entered promiscuous mode [ 120.368094][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.411630][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.469641][ T29] audit: type=1400 audit(1725012795.704:114): avc: denied { mounton } for pid=5234 comm="syz-executor" path="/root/syzkaller.jAK4Np/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 120.492532][ T5228] veth0_macvtap: entered promiscuous mode [ 120.530459][ T5227] veth0_vlan: entered promiscuous mode [ 120.550484][ T29] audit: type=1400 audit(1725012795.734:115): avc: denied { mount } for pid=5234 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.586403][ T29] audit: type=1400 audit(1725012795.744:116): avc: denied { mounton } for pid=5234 comm="syz-executor" path="/root/syzkaller.jAK4Np/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 120.638358][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.641121][ T29] audit: type=1400 audit(1725012795.744:117): avc: denied { mount } for pid=5234 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 120.678814][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.705568][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.722408][ T29] audit: type=1400 audit(1725012795.774:118): avc: denied { unmount } for pid=5234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 120.738426][ T5227] veth1_vlan: entered promiscuous mode [ 120.760153][ T29] audit: type=1400 audit(1725012795.804:119): avc: denied { mounton } for pid=5234 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 120.832128][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.833702][ T29] audit: type=1400 audit(1725012795.834:120): avc: denied { mount } for pid=5234 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.855581][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.901537][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.920088][ T5228] veth1_macvtap: entered promiscuous mode [ 120.993614][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.002392][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.039275][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.063592][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.096486][ T29] audit: type=1400 audit(1725012796.314:121): avc: denied { read write } for pid=5234 comm="syz-executor" name="loop4" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.170958][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.220020][ T29] audit: type=1400 audit(1725012796.314:122): avc: denied { open } for pid=5234 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.262742][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.272980][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.301274][ T29] audit: type=1400 audit(1725012796.314:123): avc: denied { ioctl } for pid=5234 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.309468][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.354904][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.437758][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.459152][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.470511][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.499120][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.549777][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.650277][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.670434][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.679755][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.690973][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.720569][ T5241] veth0_macvtap: entered promiscuous mode [ 121.860247][ T5241] veth1_macvtap: entered promiscuous mode [ 122.023149][ T5227] veth0_macvtap: entered promiscuous mode [ 122.276744][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.307499][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.347459][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.360159][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.384778][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.433344][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.480600][ T29] audit: type=1400 audit(1725012797.694:124): avc: denied { prog_load } for pid=5314 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.490428][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.529442][ T29] audit: type=1400 audit(1725012797.694:125): avc: denied { bpf } for pid=5314 comm="syz.4.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 122.590476][ T5227] veth1_macvtap: entered promiscuous mode [ 122.630726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.655542][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.671756][ T5315] warning: `syz.4.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.712078][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.738395][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.748675][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.789921][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.819021][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.850288][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.890464][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.992076][ T5241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.001556][ T5241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.026349][ T5241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.040397][ T5241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.406931][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.421761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.559513][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.573155][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.632795][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.651914][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.675959][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.688656][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.710432][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.730648][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.755932][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.801190][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.835612][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.893711][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.911637][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.931342][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.949409][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.963252][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.979832][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.004637][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.017326][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.040596][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.179256][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.198930][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.207795][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.222918][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.269086][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.299103][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.646992][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.714896][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.773022][ T29] audit: type=1400 audit(1725012799.974:126): avc: denied { create } for pid=5323 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.967509][ T29] audit: type=1400 audit(1725012799.994:127): avc: denied { getopt } for pid=5323 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.118027][ T29] audit: type=1400 audit(1725012800.144:128): avc: denied { setopt } for pid=5323 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.276802][ T29] audit: type=1400 audit(1725012800.204:129): avc: denied { mounton } for pid=5325 comm="syz.4.12" path="/7/bus" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.352431][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.380414][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.442750][ T29] audit: type=1400 audit(1725012800.204:130): avc: denied { read write } for pid=5325 comm="syz.4.12" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.799201][ T2499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.876615][ T2499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.261395][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.290453][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 126.290479][ T29] audit: type=1400 audit(1725012801.484:139): avc: denied { create } for pid=5337 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.357013][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.461485][ T29] audit: type=1400 audit(1725012801.614:140): avc: denied { write } for pid=5337 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.643129][ T29] audit: type=1326 audit(1725012801.794:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5339 comm="syz.0.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a7979ef9 code=0x0 [ 126.822867][ T29] audit: type=1400 audit(1725012801.874:142): avc: denied { map_create } for pid=5342 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.960518][ T29] audit: type=1400 audit(1725012801.874:143): avc: denied { map_read map_write } for pid=5342 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.072921][ T29] audit: type=1400 audit(1725012801.984:144): avc: denied { perfmon } for pid=5342 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.339778][ T29] audit: type=1400 audit(1725012801.984:145): avc: denied { prog_run } for pid=5342 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.412092][ T29] audit: type=1400 audit(1725012802.104:146): avc: denied { wake_alarm } for pid=5342 comm="syz.3.4" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.450466][ T5279] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.457966][ T5348] netlink: 'syz.4.18': attribute type 3 has an invalid length. [ 127.602131][ T29] audit: type=1400 audit(1725012802.354:147): avc: denied { read write } for pid=5344 comm="syz.2.17" name="raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.713571][ T5279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.891967][ T5279] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.912357][ T29] audit: type=1400 audit(1725012802.354:148): avc: denied { open } for pid=5344 comm="syz.2.17" path="/dev/raw-gadget" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.933161][ T5279] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.088562][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.122452][ T5279] usb 3-1: SerialNumber: syz [ 128.535736][ T5279] usb 3-1: 0:2 : does not exist [ 128.648212][ T5279] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 129.470413][ T5279] usb 3-1: USB disconnect, device number 2 [ 129.983500][ T5380] capability: warning: `syz.2.27' uses deprecated v2 capabilities in a way that may be insecure [ 130.247793][ T5382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5382 comm=syz.3.29 [ 130.512464][ T5330] udevd[5330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.837701][ T5279] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.056969][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 131.091157][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 131.110109][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.151134][ T5279] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 131.182613][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.226168][ T5279] usb 5-1: Product: syz [ 131.230410][ T5279] usb 5-1: Manufacturer: syz [ 131.333449][ T5279] usb 5-1: SerialNumber: syz [ 131.374977][ T5279] usb 5-1: config 0 descriptor?? [ 131.396885][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 131.396908][ T29] audit: type=1400 audit(1725012806.634:162): avc: denied { create } for pid=5397 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.454402][ T5279] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.481599][ T5279] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 132.132562][ T5279] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 132.193020][ T5279] em28xx 5-1:0.0: Config register raw data: 0x41 [ 132.283477][ T5313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.519629][ T29] audit: type=1400 audit(1725012807.744:163): avc: denied { read write } for pid=5405 comm="syz.3.39" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.621339][ T5313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.650050][ T29] audit: type=1400 audit(1725012807.754:164): avc: denied { open } for pid=5405 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.657082][ T5313] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.673807][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.787137][ T29] audit: type=1400 audit(1725012807.934:165): avc: denied { ioctl } for pid=5405 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 132.801456][ T5313] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.886402][ T25] usb 5-1: USB disconnect, device number 2 [ 132.906609][ T25] em28xx 5-1:0.0: Disconnecting em28xx [ 132.955221][ T5313] usb 1-1: New USB device found, idVendor=0eef, idProduct=480e, bcdDevice= 0.40 [ 132.991419][ T29] audit: type=1400 audit(1725012807.934:166): avc: denied { set_context_mgr } for pid=5405 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 132.994841][ T25] em28xx 5-1:0.0: Freeing device [ 133.036744][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.057814][ T5313] usb 1-1: Product: syz [ 133.062042][ T5313] usb 1-1: Manufacturer: syz [ 133.068714][ T5313] usb 1-1: SerialNumber: syz [ 133.229605][ T29] audit: type=1400 audit(1725012807.994:167): avc: denied { name_bind } for pid=5409 comm="syz.2.40" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 133.580445][ T29] audit: type=1326 audit(1725012808.814:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe825d79ef9 code=0x7ffc0000 [ 133.603754][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.722021][ T29] audit: type=1326 audit(1725012808.864:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe825d79ef9 code=0x7ffc0000 [ 133.796749][ T29] audit: type=1326 audit(1725012808.864:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe825d79ef9 code=0x7ffc0000 [ 133.819935][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.017661][ T29] audit: type=1326 audit(1725012808.864:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5416 comm="syz.2.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe825d79ef9 code=0x7ffc0000 [ 134.168347][ T5313] usbhid 1-1:1.0: can't add hid device: -71 [ 134.224252][ T5313] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 134.374601][ T5313] usb 1-1: USB disconnect, device number 2 [ 134.734662][ T25] kernel write not supported for file /20/net/snmp6 (pid: 25 comm: kworker/1:0) [ 135.317443][ T5437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 135.419636][ T5440] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 135.480991][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 135.508764][ T5441] netlink: 'syz.3.52': attribute type 7 has an invalid length. [ 135.522640][ T5441] netlink: 'syz.3.52': attribute type 8 has an invalid length. [ 135.570717][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 136.212447][ T5449] Bluetooth: MGMT ver 1.23 [ 136.820173][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 136.820196][ T29] audit: type=1400 audit(1725012812.054:193): avc: denied { create } for pid=5459 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.998319][ T29] audit: type=1400 audit(1725012812.224:194): avc: denied { setopt } for pid=5459 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.193591][ T29] audit: type=1400 audit(1725012812.294:195): avc: denied { accept } for pid=5459 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.481269][ T5470] netlink: 198180 bytes leftover after parsing attributes in process `syz.2.65'. [ 138.065746][ T2499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.252104][ T2499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.303486][ T5238] Bluetooth: hci0: command tx timeout [ 138.412103][ T2499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.677425][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.707925][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.774727][ T29] audit: type=1400 audit(1725012814.004:196): avc: denied { setopt } for pid=5479 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.794057][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.829314][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 138.869095][ T2499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.912404][ T29] audit: type=1400 audit(1725012814.144:197): avc: denied { read } for pid=5482 comm="syz.4.71" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.049098][ T29] audit: type=1400 audit(1725012814.144:198): avc: denied { open } for pid=5482 comm="syz.4.71" path="/dev/sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.163510][ T29] audit: type=1400 audit(1725012814.144:199): avc: denied { ioctl } for pid=5482 comm="syz.4.71" path="/dev/sg0" dev="devtmpfs" ino=696 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 139.563511][ T29] audit: type=1400 audit(1725012814.784:200): avc: denied { unmount } for pid=5489 comm="syz.4.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 139.757571][ T29] audit: type=1400 audit(1725012814.904:201): avc: denied { name_bind } for pid=5492 comm="syz.0.75" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 139.982097][ T29] audit: type=1400 audit(1725012814.914:202): avc: denied { create } for pid=5492 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 140.412635][ T2499] bridge_slave_1: left allmulticast mode [ 140.473206][ T2499] bridge_slave_1: left promiscuous mode [ 140.509033][ T2499] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.759307][ T2499] bridge_slave_0: left allmulticast mode [ 140.765119][ T2499] bridge_slave_0: left promiscuous mode [ 140.771149][ T2499] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.103183][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.121802][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.166423][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.251147][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.309724][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.326859][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.893691][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 141.893716][ T29] audit: type=1400 audit(1725012817.124:211): avc: denied { mount } for pid=5522 comm="syz.1.85" name="/" dev="configfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 142.010064][ T29] audit: type=1400 audit(1725012817.134:212): avc: denied { search } for pid=5522 comm="syz.1.85" name="/" dev="configfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.119794][ T29] audit: type=1400 audit(1725012817.164:213): avc: denied { read } for pid=5522 comm="syz.1.85" name="/" dev="configfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.230158][ T29] audit: type=1400 audit(1725012817.174:215): avc: denied { bind } for pid=5523 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.374303][ T29] audit: type=1400 audit(1725012817.164:214): avc: denied { open } for pid=5522 comm="syz.1.85" path="/" dev="configfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.493076][ T1176] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.556020][ T29] audit: type=1400 audit(1725012817.514:216): avc: denied { read } for pid=5529 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1449 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.720694][ T29] audit: type=1400 audit(1725012817.514:217): avc: denied { open } for pid=5529 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1449 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.739549][ T1176] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.798993][ T1176] usb 3-1: config 1 has no interface number 0 [ 142.843513][ T29] audit: type=1400 audit(1725012817.514:218): avc: denied { getattr } for pid=5529 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1449 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.898853][ T1176] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.962983][ T1176] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 143.012783][ T1176] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 143.054128][ T29] audit: type=1400 audit(1725012817.784:219): avc: denied { write } for pid=5535 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.072059][ T1176] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 143.189475][ T1176] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.201577][ T1176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.231668][ T1176] usb 3-1: Product: syz [ 143.258561][ T29] audit: type=1400 audit(1725012817.784:220): avc: denied { connect } for pid=5535 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 143.260669][ T1176] usb 3-1: Manufacturer: syz [ 143.410927][ T1176] usb 3-1: SerialNumber: syz [ 143.430275][ T5240] Bluetooth: hci4: command tx timeout [ 144.490950][ T1176] cdc_ncm 3-1:1.1: bind() failure [ 144.809218][ T2499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.861916][ T1176] usb 3-1: USB disconnect, device number 3 [ 144.897711][ T2499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.973709][ T2499] bond0 (unregistering): Released all slaves [ 145.177773][ T5556] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 145.215655][ T5557] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 145.397170][ T5561] netlink: 'syz.1.95': attribute type 29 has an invalid length. [ 145.497622][ T5240] Bluetooth: hci4: command tx timeout [ 146.177513][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.193315][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.221131][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.241602][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.249622][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.311479][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.374853][ T5279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 146.465024][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 146.579459][ T5279] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 147.009704][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 147.009728][ T29] audit: type=1400 audit(1725012822.223:233): avc: denied { create } for pid=5589 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.093145][ T29] audit: type=1400 audit(1725012822.293:234): avc: denied { bind } for pid=5589 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.224176][ T29] audit: type=1400 audit(1725012822.303:235): avc: denied { write } for pid=5589 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.522326][ T29] audit: type=1400 audit(1725012822.753:236): avc: denied { read } for pid=5592 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.577981][ T5240] Bluetooth: hci4: command tx timeout [ 147.651704][ T29] audit: type=1400 audit(1725012822.863:237): avc: denied { read } for pid=5596 comm="syz.4.109" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.712367][ T5599] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.769128][ T29] audit: type=1400 audit(1725012822.863:238): avc: denied { open } for pid=5596 comm="syz.4.109" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.852829][ T29] audit: type=1400 audit(1725012822.943:239): avc: denied { ioctl } for pid=5596 comm="syz.4.109" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 147.988751][ T2499] hsr_slave_0: left promiscuous mode [ 148.025238][ T29] audit: type=1400 audit(1725012822.963:240): avc: denied { connect } for pid=5598 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.069578][ T2499] hsr_slave_1: left promiscuous mode [ 148.088179][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.107644][ T29] audit: type=1400 audit(1725012823.003:241): avc: denied { ioctl } for pid=5598 comm="syz.2.110" path="socket:[8102]" dev="sockfs" ino=8102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.118754][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.149123][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.158236][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.200347][ T29] audit: type=1400 audit(1725012823.143:242): avc: denied { map } for pid=5596 comm="syz.4.109" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.521043][ T2499] veth1_macvtap: left promiscuous mode [ 148.590491][ T2499] veth0_macvtap: left promiscuous mode [ 148.607613][ T2499] veth1_vlan: left promiscuous mode [ 148.637805][ T2499] veth0_vlan: left promiscuous mode [ 149.447491][ T5622] loop0: detected capacity change from 0 to 7 [ 149.491667][ T5622] Dev loop0: unable to read RDB block 7 [ 149.521747][ T5622] loop0: AHDI p2 p3 [ 149.537034][ T5622] loop0: partition table partially beyond EOD, truncated [ 149.570376][ T5622] loop0: p2 start 341296255 is beyond EOD, truncated [ 149.660896][ T5238] Bluetooth: hci4: command tx timeout [ 149.924506][ T5626] netlink: 156 bytes leftover after parsing attributes in process `syz.1.118'. [ 150.699455][ T2499] team0 (unregistering): Port device team_slave_1 removed [ 150.797533][ T2499] team0 (unregistering): Port device team_slave_0 removed [ 152.853950][ T5507] chnl_net:caif_netlink_parms(): no params data found [ 153.134004][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 153.134029][ T29] audit: type=1400 audit(1725012828.363:246): avc: denied { write } for pid=5644 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.273306][ T29] audit: type=1400 audit(1725012828.363:247): avc: denied { nlmsg_write } for pid=5644 comm="syz.1.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.487940][ T29] audit: type=1400 audit(1725012828.723:248): avc: denied { bind } for pid=5654 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.584418][ T29] audit: type=1400 audit(1725012828.813:249): avc: denied { name_bind } for pid=5654 comm="syz.4.126" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 153.612640][ T29] audit: type=1400 audit(1725012828.823:250): avc: denied { node_bind } for pid=5654 comm="syz.4.126" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 153.655345][ T29] audit: type=1400 audit(1725012828.893:251): avc: denied { write } for pid=5654 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.450296][ T5507] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.483643][ T5507] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.512269][ T29] audit: type=1400 audit(1725012829.743:252): avc: denied { write } for pid=5669 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.515982][ T5507] bridge_slave_0: entered allmulticast mode [ 154.631175][ T5507] bridge_slave_0: entered promiscuous mode [ 154.699641][ T5507] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.806952][ T5507] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.843167][ T5507] bridge_slave_1: entered allmulticast mode [ 154.921079][ T5507] bridge_slave_1: entered promiscuous mode [ 155.242962][ T29] audit: type=1400 audit(1725012830.473:253): avc: denied { bind } for pid=5678 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.428493][ T29] audit: type=1400 audit(1725012830.563:254): avc: denied { write } for pid=5678 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.657613][ T29] audit: type=1400 audit(1725012830.883:255): avc: denied { create } for pid=5686 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.663477][ T5507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.957954][ T5507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.381003][ T5507] team0: Port device team_slave_0 added [ 156.486906][ T5507] team0: Port device team_slave_1 added [ 157.303757][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.374349][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.577455][ T5507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.640803][ T5507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.688116][ T5507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.853406][ T5507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.919572][ T5718] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 158.508131][ T5507] hsr_slave_0: entered promiscuous mode [ 158.601083][ T5507] hsr_slave_1: entered promiscuous mode [ 158.752857][ T5507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.787263][ T5507] Cannot create hsr debugfs directory [ 159.024841][ T5730] netlink: 288 bytes leftover after parsing attributes in process `syz.1.154'. [ 159.183233][ T5735] netlink: 288 bytes leftover after parsing attributes in process `syz.1.154'. [ 159.203775][ T5735] Zero length message leads to an empty skb [ 159.268078][ T5313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.517048][ T5313] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.560386][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.640823][ T5313] usb 3-1: config 0 descriptor?? [ 159.687534][ T5313] cp210x 3-1:0.0: cp210x converter detected [ 160.102460][ T5313] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 160.471064][ T5313] usb 3-1: cp210x converter now attached to ttyUSB0 [ 160.573227][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 160.573250][ T29] audit: type=1400 audit(1725012835.803:267): avc: denied { nlmsg_read } for pid=5750 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 160.682107][ T1176] usb 3-1: USB disconnect, device number 4 [ 160.711869][ T1176] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.788317][ T1176] cp210x 3-1:0.0: device disconnected [ 161.101453][ T29] audit: type=1400 audit(1725012836.333:268): avc: denied { read write } for pid=5754 comm="syz.1.164" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.192712][ T29] audit: type=1400 audit(1725012836.333:269): avc: denied { open } for pid=5754 comm="syz.1.164" path="/dev/uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 161.296706][ T29] audit: type=1400 audit(1725012836.483:270): avc: denied { watch watch_reads } for pid=5755 comm="syz.4.163" path="/49" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 161.874115][ T5762] [U]  [ 162.469553][ T5771] netlink: 44 bytes leftover after parsing attributes in process `syz.4.170'. [ 162.492635][ T5771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 162.541212][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.570409][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.577823][ T5771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.977569][ T29] audit: type=1400 audit(1725012838.213:271): avc: denied { ioctl } for pid=5779 comm="syz.0.172" path="socket:[8528]" dev="sockfs" ino=8528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.014265][ T5780] bond0: entered promiscuous mode [ 163.014300][ T5780] bond_slave_0: entered promiscuous mode [ 163.014627][ T5780] bond_slave_1: entered promiscuous mode [ 163.191507][ T5780] bond0: (slave bond_slave_0): Releasing backup interface [ 163.241271][ T5780] bond_slave_0: left promiscuous mode [ 163.346479][ T5779] bond0: left promiscuous mode [ 163.380798][ T5779] bond_slave_1: left promiscuous mode [ 163.538071][ T5507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 163.736978][ T5507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 163.825050][ T5507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 163.913124][ T29] audit: type=1400 audit(1725012839.143:272): avc: denied { append } for pid=5789 comm="syz.2.179" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 163.960091][ T5507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.131147][ T29] audit: type=1400 audit(1725012839.363:273): avc: denied { watch_mount } for pid=5794 comm="syz.1.181" path="/44" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.707534][ T5507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.874926][ T5804] process 'syz.4.184' launched './file0' with NULL argv: empty string added [ 164.945144][ T29] audit: type=1400 audit(1725012840.183:274): avc: denied { execute_no_trans } for pid=5803 comm="syz.4.184" path="/54/file0" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.993288][ T5507] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.149151][ T29] audit: type=1400 audit(1725012840.243:275): avc: denied { mounton } for pid=5805 comm="syz.2.185" path="/36/bus" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.157022][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.178716][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.187187][ T29] audit: type=1326 audit(1725012840.303:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.0.186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1a7979ef9 code=0x0 [ 165.349689][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.357086][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.221589][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 166.221612][ T29] audit: type=1400 audit(1725012841.453:279): avc: denied { sys_module } for pid=5507 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.552231][ T29] audit: type=1400 audit(1725012841.773:280): avc: denied { bind } for pid=5827 comm="syz.0.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 167.322460][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.392569][ T5279] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 167.409329][ T5507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.473098][ T29] audit: type=1400 audit(1725012842.703:281): avc: denied { bind } for pid=5849 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.543596][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.582427][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.646424][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 167.694540][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.695628][ T5279] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 167.729938][ T5279] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 167.781148][ T5279] usb 2-1: config 0 has no interface number 0 [ 167.790387][ T5279] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 167.817289][ T25] usb 5-1: config 0 descriptor?? [ 167.829337][ T5279] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 167.871532][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.883427][ T5507] veth0_vlan: entered promiscuous mode [ 167.984124][ T5507] veth1_vlan: entered promiscuous mode [ 168.059749][ T5853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.200'. [ 168.083176][ T5279] usb 2-1: config 0 descriptor?? [ 168.100620][ T5846] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 168.118496][ T29] audit: type=1326 audit(1725012843.333:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5851 comm="syz.2.199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe825d79ef9 code=0x0 [ 168.400947][ T5507] veth0_macvtap: entered promiscuous mode [ 168.442144][ T25] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 168.497206][ T5507] veth1_macvtap: entered promiscuous mode [ 168.613995][ T25] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 168.636876][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.649661][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.663137][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.715888][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.753265][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.816208][ T5279] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input5 [ 168.848909][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.908770][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.011590][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.147873][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.220734][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.281392][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.322188][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.370235][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.382062][ T25] cp2112 0003:10C4:EA90.0002: error setting SMBus config [ 169.445350][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.445384][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.445402][ T5507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.445426][ T5507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.468063][ T5507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.541832][ T5507] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.541945][ T5507] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.541996][ T5507] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.542047][ T5507] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.087594][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 171.272839][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 171.276116][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.276161][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.276204][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.276248][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.276323][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.276364][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.455711][ T9] usb 1-1: usb_control_msg returned -110 [ 176.455796][ T9] usbtmc 1-1:16.0: can't read capabilities [ 176.991784][ T9] usb 1-1: USB disconnect, device number 3 [ 180.521826][ T5894] netlink: 88 bytes leftover after parsing attributes in process `syz.1.216'. [ 180.522109][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 181.850313][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.852725][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.868079][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.870593][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.872010][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.872823][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.979960][ T5240] Bluetooth: hci5: command tx timeout [ 186.053878][ T5240] Bluetooth: hci5: command tx timeout [ 186.891815][ T5905] Bluetooth: MGMT ver 1.23 [ 187.679023][ T29] audit: type=1400 audit(1725012862.843:283): avc: denied { read } for pid=4661 comm="acpid" name="event4" dev="devtmpfs" ino=2360 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.792415][ T29] audit: type=1400 audit(1725012862.853:284): avc: denied { open } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2360 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.916282][ T29] audit: type=1400 audit(1725012862.853:285): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2360 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.939893][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 187.967030][ T5279] usb 2-1: USB disconnect, device number 2 [ 188.052668][ T25] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 188.121958][ T25] usb 5-1: USB disconnect, device number 3 [ 188.136696][ T5240] Bluetooth: hci5: command tx timeout [ 189.328316][ T2499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.808030][ T2499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.080521][ T29] audit: type=1400 audit(1725012865.303:286): avc: denied { read } for pid=5933 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.215010][ T5240] Bluetooth: hci5: command tx timeout [ 190.270649][ T2499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.417789][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.458025][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.813011][ T2499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.055857][ T29] audit: type=1400 audit(1725012866.283:287): avc: denied { open } for pid=5945 comm="syz.2.236" path="/dev/ptyq9" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 191.191426][ T29] audit: type=1400 audit(1725012866.353:288): avc: denied { ioctl } for pid=5945 comm="syz.2.236" path="/dev/ptyq9" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 191.461511][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.537164][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.750365][ T5313] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 191.972883][ T5313] usb 2-1: Using ep0 maxpacket: 8 [ 192.012756][ T5313] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 192.022997][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.062118][ T5313] usb 2-1: config 0 descriptor?? [ 192.678995][ T29] audit: type=1400 audit(1725012867.903:289): avc: denied { write } for pid=5955 comm="syz.4.240" name="sg0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.009422][ T5313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.080843][ T2499] bridge_slave_1: left allmulticast mode [ 193.099066][ T5313] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 193.122425][ T2499] bridge_slave_1: left promiscuous mode [ 193.129097][ T2499] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.218620][ T2499] bridge_slave_0: left allmulticast mode [ 193.227288][ T5313] asix 2-1:0.0: probe with driver asix failed with error -71 [ 193.248731][ T2499] bridge_slave_0: left promiscuous mode [ 193.255065][ T2499] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.325581][ T5313] usb 2-1: USB disconnect, device number 3 [ 195.556841][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.572914][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.616896][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.631408][ T29] audit: type=1400 audit(1725012870.853:290): avc: denied { create } for pid=5971 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.682494][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.721441][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.733196][ T29] audit: type=1400 audit(1725012870.903:291): avc: denied { bind } for pid=5971 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.733243][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.861314][ T29] audit: type=1400 audit(1725012870.903:292): avc: denied { name_bind } for pid=5971 comm="syz.4.245" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 195.892353][ T29] audit: type=1400 audit(1725012870.903:293): avc: denied { node_bind } for pid=5971 comm="syz.4.245" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 195.921972][ T29] audit: type=1400 audit(1725012870.953:294): avc: denied { read write } for pid=5972 comm="syz.2.247" name="rdma_cm" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.954685][ T29] audit: type=1400 audit(1725012870.953:295): avc: denied { open } for pid=5972 comm="syz.2.247" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.999107][ T29] audit: type=1400 audit(1725012871.013:296): avc: denied { create } for pid=5972 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.030544][ T29] audit: type=1400 audit(1725012871.013:297): avc: denied { bind } for pid=5972 comm="syz.2.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.342300][ T2499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.369225][ T2499] bond0 (unregistering): Released all slaves [ 196.481025][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 196.788888][ T29] audit: type=1400 audit(1725012872.023:298): avc: denied { create } for pid=5981 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.033560][ T29] audit: type=1400 audit(1725012872.263:299): avc: denied { create } for pid=5983 comm="syz.4.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 197.908481][ T5238] Bluetooth: hci1: command tx timeout [ 198.391504][ T6009] mkiss: ax0: crc mode is auto. [ 198.517638][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.535672][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.543245][ T5899] bridge_slave_0: entered allmulticast mode [ 198.565391][ T5899] bridge_slave_0: entered promiscuous mode [ 198.755616][ T2499] hsr_slave_0: left promiscuous mode [ 198.762592][ T2499] hsr_slave_1: left promiscuous mode [ 198.860626][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.893283][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.911692][ T2499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.948346][ T2499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.039081][ T2499] veth1_macvtap: left promiscuous mode [ 199.057742][ T2499] veth0_macvtap: left promiscuous mode [ 199.076709][ T2499] veth1_vlan: left promiscuous mode [ 199.082249][ T2499] veth0_vlan: left promiscuous mode [ 199.457771][ T6022] input: syz0 as /devices/virtual/input/input6 [ 199.777060][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.978385][ T5238] Bluetooth: hci1: command tx timeout [ 200.013430][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 200.028817][ T9] usb 3-1: config 0 has no interfaces? [ 200.038307][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 200.048349][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.078239][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.079969][ T9] usb 3-1: config 0 descriptor?? [ 200.093028][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.684682][ T6024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.722639][ T6024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.808997][ T25] usb 3-1: USB disconnect, device number 5 [ 201.256410][ T2499] team0 (unregistering): Port device team_slave_1 removed [ 201.482193][ T2499] team0 (unregistering): Port device team_slave_0 removed [ 202.057007][ T5238] Bluetooth: hci1: command tx timeout [ 202.811350][ T6046] input: syz0 as /devices/virtual/input/input7 [ 203.039071][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.049995][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.061598][ T5899] bridge_slave_1: entered allmulticast mode [ 203.076779][ T5899] bridge_slave_1: entered promiscuous mode [ 203.642941][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.860340][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.134818][ T5238] Bluetooth: hci1: command tx timeout [ 204.486616][ T5899] team0: Port device team_slave_0 added [ 204.649219][ T5899] team0: Port device team_slave_1 added [ 204.702006][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 204.738923][ T5313] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.838701][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.878127][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.928042][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.938656][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.938696][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.941154][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.941199][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.941234][ T25] usb 2-1: SerialNumber: syz [ 205.009936][ T5313] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 205.019403][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.019427][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.019478][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.125426][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.159859][ T5313] usb 3-1: Product: syz [ 205.172408][ T5313] usb 3-1: Manufacturer: syz [ 205.190618][ T5313] usb 3-1: SerialNumber: syz [ 205.240082][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 205.311110][ T5313] usb 3-1: config 0 descriptor?? [ 205.328128][ T25] usb 2-1: 0:2 : does not exist [ 205.429599][ T25] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 205.548194][ T5899] hsr_slave_0: entered promiscuous mode [ 205.558783][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 205.558806][ T29] audit: type=1400 audit(1725012880.763:312): avc: denied { mount } for pid=6072 comm="syz.4.286" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 205.617930][ T5899] hsr_slave_1: entered promiscuous mode [ 205.819811][ T25] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 206.070208][ T25] usb 2-1: USB disconnect, device number 4 [ 206.131789][ T1176] usb 3-1: USB disconnect, device number 6 [ 206.252291][ T29] audit: type=1400 audit(1725012881.473:313): avc: denied { ioctl } for pid=6077 comm="syz.1.288" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 206.516367][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.862285][ T5313] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 206.895524][ T5313] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 206.902990][ T5313] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 206.931518][ T5313] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 206.969871][ T5313] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 206.984906][ T2550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.154847][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.167939][ T2550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.305829][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.349197][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.373777][ T5969] bridge_slave_0: entered allmulticast mode [ 207.393007][ T5969] bridge_slave_0: entered promiscuous mode [ 207.394564][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.435194][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.452719][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.463058][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.472364][ T5969] bridge_slave_1: entered allmulticast mode [ 207.480440][ T5969] bridge_slave_1: entered promiscuous mode [ 207.500823][ T25] usb 5-1: Product: syz [ 207.500856][ T25] usb 5-1: Manufacturer: syz [ 207.500885][ T25] usb 5-1: SerialNumber: syz [ 207.551777][ T25] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.609385][ T2550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.732091][ T5279] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.249554][ T29] audit: type=1400 audit(1725012883.483:314): avc: denied { setopt } for pid=6098 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.872564][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 232.879407][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 233.589518][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 234.614474][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2633 jiffies s: 4805 root: 0x2/. [ 234.672033][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 234.717745][ T19] Sending NMI from CPU 0 to CPUs 1: [ 234.723033][ C1] NMI backtrace for cpu 1 [ 234.723063][ C1] CPU: 1 UID: 0 PID: 5362 Comm: kworker/1:7 Not tainted 6.11.0-rc5-syzkaller-00176-g20371ba12063 #0 [ 234.723095][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.723112][ C1] Workqueue: usb_hub_wq hub_event [ 234.723141][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 234.723187][ C1] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 04 1b 78 7e 65 8b 05 05 1b 78 7e a9 00 01 [ 234.723212][ C1] RSP: 0018:ffffc90000a18048 EFLAGS: 00000002 [ 234.723231][ C1] RAX: 0000000000010101 RBX: 0000000000000002 RCX: ffffffff8134157f [ 234.723248][ C1] RDX: ffff888064790000 RSI: 0000000000000000 RDI: 0000000000000005 [ 234.723265][ C1] RBP: ffffc90000a180e8 R08: 0000000000000005 R09: 0000000000000000 [ 234.723281][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: ffffc90000a18058 [ 234.723297][ C1] R13: ffffffff81775bb0 R14: ffffc90000a18118 R15: ffff888064790000 [ 234.723316][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 234.723344][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.723367][ C1] CR2: 0000001b32a06ff8 CR3: 000000007d61c000 CR4: 00000000003506f0 [ 234.723386][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.723404][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.723423][ C1] Call Trace: [ 234.723432][ C1] [ 234.723444][ C1] ? show_regs+0x8c/0xa0 [ 234.723497][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 234.723540][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 234.723585][ C1] ? nmi_handle+0x1a9/0x5c0 [ 234.723615][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 234.723666][ C1] ? default_do_nmi+0x6a/0x160 [ 234.723696][ C1] ? exc_nmi+0x170/0x1e0 [ 234.723724][ C1] ? end_repeat_nmi+0xf/0x53 [ 234.723753][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 234.723798][ C1] ? arch_stack_walk+0x10f/0x170 [ 234.723833][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 234.723884][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 234.723937][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 234.723993][ C1] [ 234.724002][ C1] [ 234.724011][ C1] arch_stack_walk+0xb9/0x170 [ 234.724050][ C1] ? run_timer_softirq+0x1a/0x40 [ 234.724100][ C1] stack_trace_save+0x95/0xd0 [ 234.724138][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 234.724179][ C1] ? hlock_class+0x4e/0x130 [ 234.724214][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 234.724262][ C1] kasan_save_stack+0x33/0x60 [ 234.724307][ C1] ? kasan_save_stack+0x33/0x60 [ 234.724351][ C1] ? kasan_save_track+0x14/0x30 [ 234.724395][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 234.724438][ C1] ? dummy_urb_enqueue+0x8d/0x8a0 [ 234.724473][ C1] ? usb_hcd_submit_urb+0x2d1/0x2090 [ 234.724510][ C1] ? usb_submit_urb+0x87c/0x1730 [ 234.724553][ C1] ? ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 234.724600][ C1] ? __usb_hcd_giveback_urb+0x389/0x6e0 [ 234.724636][ C1] ? usb_hcd_giveback_urb+0x396/0x450 [ 234.724672][ C1] ? dummy_timer+0x17c3/0x38d0 [ 234.724705][ C1] ? __hrtimer_run_queues+0x20c/0xcc0 [ 234.724738][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 234.724771][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 234.724802][ C1] ? sysvec_apic_timer_interrupt+0x43/0xb0 [ 234.724838][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.724888][ C1] ? pie_calculate_probability+0x117/0x850 [ 234.724937][ C1] ? fq_pie_timer+0x215/0x5a0 [ 234.724963][ C1] ? call_timer_fn+0x1a0/0x610 [ 234.725011][ C1] ? __run_timers+0x74b/0xaf0 [ 234.725054][ C1] ? run_timer_base+0x111/0x190 [ 234.725126][ C1] kasan_save_track+0x14/0x30 [ 234.725172][ C1] __kasan_kmalloc+0xaa/0xb0 [ 234.725218][ C1] dummy_urb_enqueue+0x8d/0x8a0 [ 234.725254][ C1] ? usb_hcd_map_urb_for_dma+0x39e/0x1190 [ 234.725298][ C1] usb_hcd_submit_urb+0x2d1/0x2090 [ 234.725342][ C1] ? __pfx_usb_hcd_submit_urb+0x10/0x10 [ 234.725380][ C1] ? lock_acquire+0x1b1/0x560 [ 234.725429][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.725473][ C1] ? find_held_lock+0x2d/0x110 [ 234.725511][ C1] ? ath9k_hif_usb_reg_in_cb+0x487/0x690 [ 234.725563][ C1] usb_submit_urb+0x87c/0x1730 [ 234.725611][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 234.725645][ C1] ath9k_hif_usb_reg_in_cb+0x494/0x690 [ 234.725697][ C1] __usb_hcd_giveback_urb+0x389/0x6e0 [ 234.725738][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 234.725780][ C1] dummy_timer+0x17c3/0x38d0 [ 234.725821][ C1] ? debug_object_deactivate+0x1f0/0x370 [ 234.725871][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 234.725925][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 234.725958][ C1] ? __pfx_lock_release+0x10/0x10 [ 234.726011][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 234.726047][ C1] ? timerqueue_del+0x83/0x150 [ 234.726088][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 234.726122][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 234.726163][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 234.726198][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 234.726250][ C1] hrtimer_interrupt+0x31b/0x800 [ 234.726296][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 234.726330][ C1] sysvec_apic_timer_interrupt+0x43/0xb0 [ 234.726368][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.726419][ C1] RIP: 0010:pie_calculate_probability+0x117/0x850 [ 234.726470][ C1] Code: 0f 85 cd 04 00 00 e8 38 70 67 f8 44 8b 7c 24 28 31 ff 44 89 fe e8 69 72 67 f8 45 85 ff 0f 94 44 24 2f 45 31 ed e8 19 70 67 f8 <48> 8d 7d 10 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f [ 234.726499][ C1] RSP: 0018:ffffc90000a18b80 EFLAGS: 00000246 [ 234.726522][ C1] RAX: 0000000000000000 RBX: ffff888064ac5b70 RCX: ffffffff89244fc7 [ 234.726542][ C1] RDX: ffff888064790000 RSI: ffffffff89244fd7 RDI: 0000000000000005 [ 234.726563][ C1] RBP: ffff888064a0e300 R08: 0000000000000005 R09: 0000000000000000 [ 234.726582][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 234.726601][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 234.726627][ C1] ? pie_calculate_probability+0x107/0x850 [ 234.726676][ C1] ? pie_calculate_probability+0x117/0x850 [ 234.726738][ C1] fq_pie_timer+0x215/0x5a0 [ 234.726773][ C1] call_timer_fn+0x1a0/0x610 [ 234.726817][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 234.726846][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 234.726890][ C1] ? __pfx_lock_release+0x10/0x10 [ 234.726939][ C1] ? mark_held_locks+0x9f/0xe0 [ 234.726986][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 234.727018][ C1] ? __pfx_fq_pie_timer+0x10/0x10 [ 234.727048][ C1] __run_timers+0x74b/0xaf0 [ 234.727099][ C1] ? __pfx___run_timers+0x10/0x10 [ 234.727145][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.727205][ C1] run_timer_base+0x111/0x190 [ 234.727250][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 234.727294][ C1] run_timer_softirq+0x1a/0x40 [ 234.727332][ C1] handle_softirqs+0x216/0x8f0 [ 234.727365][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 234.727398][ C1] irq_exit_rcu+0xbb/0x120 [ 234.727426][ C1] sysvec_apic_timer_interrupt+0x95/0xb0 [ 234.727458][ C1] [ 234.727465][ C1] [ 234.727474][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.727517][ C1] RIP: 0010:kcov_remote_start+0x3df/0x6e0 [ 234.727544][ C1] Code: 90 e8 b5 0b 2a 03 e9 4b ff ff ff e8 cb 35 07 00 e9 ba fc ff ff e8 91 37 07 00 9c 58 f6 c4 02 0f 85 50 02 00 00 fb 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc be 02 00 00 00 4c 89 [ 234.727567][ C1] RSP: 0018:ffffc9000433fa38 EFLAGS: 00000282 [ 234.727586][ C1] RAX: 0000000000000006 RBX: ffff8880b932d648 RCX: 1ffffffff28d0748 [ 234.727603][ C1] RDX: 0000000000000000 RSI: ffffffff8b4cd740 RDI: ffffffff8bb0ee40 [ 234.727620][ C1] RBP: ffff888064790000 R08: 0000000000000001 R09: fffffbfff28cacee [ 234.727637][ C1] R10: ffffffff94656777 R11: 0000000000000000 R12: ffff88802505c900 [ 234.727653][ C1] R13: 0000000000000200 R14: 0000000000100000 R15: ffffc90013df6000 [ 234.727685][ C1] hub_event+0x19a/0x4e10 [ 234.727709][ C1] ? hlock_class+0x4e/0x130 [ 234.727739][ C1] ? __lock_acquire+0x1620/0x3cb0 [ 234.727786][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 234.727827][ C1] ? find_held_lock+0x2d/0x110 [ 234.727861][ C1] ? __pfx_hub_event+0x10/0x10 [ 234.727887][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.727926][ C1] ? __pfx_lock_release+0x10/0x10 [ 234.727978][ C1] process_one_work+0x9c5/0x1b40 [ 234.728027][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.728065][ C1] ? __pfx_process_one_work+0x10/0x10 [ 234.728113][ C1] ? assign_work+0x1a0/0x250 [ 234.728152][ C1] worker_thread+0x6c8/0xed0 [ 234.728199][ C1] ? __kthread_parkme+0x148/0x220 [ 234.728232][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.728273][ C1] kthread+0x2c1/0x3a0 [ 234.728301][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.728331][ C1] ? __pfx_kthread+0x10/0x10 [ 234.728362][ C1] ret_from_fork+0x45/0x80 [ 234.728401][ C1] ? __pfx_kthread+0x10/0x10 [ 234.728430][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.728479][ C1] [ 235.617896][ C1] hrtimer: interrupt took 895896157 ns