last executing test programs: 1m59.101726569s ago: executing program 1 (id=3079): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x1) 1m57.456712061s ago: executing program 1 (id=3082): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1m55.999627916s ago: executing program 1 (id=3085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000200)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 1m49.610611974s ago: executing program 1 (id=3108): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1m49.406776528s ago: executing program 1 (id=3112): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, 0x0, &(0x7f0000000100)='.dead\x00', 0x0, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x2c}, {0x48}, {0x6}]}, 0x10) sendto$packet(r3, &(0x7f0000000180)="0b050600e0ff020006004788aa96a13bb1000011000088ca1a00", 0x1001a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) write$cgroup_type(0xffffffffffffffff, &(0x7f00000008c0), 0x9) 1m9.621016999s ago: executing program 1 (id=3135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x7}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}], {0x14, 0x10}}, 0x70}}, 0x0) 10.683725902s ago: executing program 3 (id=3433): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x161040, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="34020000020000000580000000000000010000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x234) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r5, 0x715, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x55) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0xc) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') 8.707395191s ago: executing program 3 (id=3436): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="83cbd890d6e1437ed23939112b07", 0xe}, {&(0x7f0000000200)="8856d0f6144cc63b", 0x8}], 0x2}}], 0x1, 0x4000c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) 8.684392783s ago: executing program 4 (id=3437): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x127c, 0xffffffffffffffff) 8.284452357s ago: executing program 2 (id=3438): r0 = memfd_create(&(0x7f0000000180)='\xb3\xbf@\x9c\xfb\xb2Ml\xd2\x1aL\xab\xa1a>\x03\xf5\x04\xf4qT\x13\x1d\xc9\xd6\x13\x9f!\x97\x8d\x04\x9eA\x86-\x83B\xc4\':D\xdc\xab\xf0\xe6\xb7\xed\xcc\x85\x03\x1a1\x05m)\xf7\x87\x898\xa9\xc5\x91\xcfJ\vvj\xe0P\x8erAx\xf4\x9a1!6@\xe0G*[\x81Z\xe16\xe0H\xb1b\x13\xe7\f\xf5\xec\xa2\xbd\x05\xd5\xba\xdd\xf5\xc5ncl\xfe\x1em\xd0A\x89\xd6\x022\xd7\xf1=\xf6`\x8c\x90\x80\x9b\x91\xc3d(_f\x99\xe9\xb4\xd4X\x84G;x\xe8v\x8d\x01\xb9\xb6\x99\xa8j\xfb\xbc\x16\xfa\xefc\xad\xb8\xa0t\x90\x94_\xb1\x96\x05\xadB\x93\xea$|\xf1\xa9\x8c\xfa\xc9\xd7=([\xe5\x84D\xe8@.\x06\xf7O\x9f\xd4z\xb0\xa4\xacJ\xda', 0x4) lseek(r0, 0xc1b8, 0x1) 7.347822588s ago: executing program 3 (id=3439): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x2, 0xd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000140), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioperm(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bc090000000000003509010000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = dup3(r4, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r8 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) tkill(r8, 0x1000000000016) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c200000000000000000008004500003000000000012100907812000228250000000000000000000000ffffffffe0000001"], 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="79408ec3004c410b00012319c6a502980fd78906f311dda17577a450cc0b218dfa636d436a5018a3e58cd13b", 0x2c}], 0x1, &(0x7f00000020c0)=ANY=[@ANYRESHEX=r0], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r9, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="c1", 0x1}], 0x1}}], 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.009900086s ago: executing program 2 (id=3441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'geneve0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendto$packet(r3, &(0x7f00000003c0)="3f030e00031b12000000000089e9aaa911d7c2290f00810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="009a00"}, 0x14) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$inet6(r5, &(0x7f0000007a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000002680)="5bb431ef421e5b08449b89cbfc052e258149d1", 0x13}, {&(0x7f00000026c0)="2a6f64929718f51db64e9ea73cb2ead5d41a499768827802c5fb51e9bbdf486567c7db724a17ce498bc5c66e2fb078", 0x2f}, {&(0x7f0000002740)="f6618819ddefd0879a91b763f2ed0c06ffb3d16e8e05e85f", 0x18}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="aced30157f14582844466e8217f93fac4e5b97e0dacabe6c1ec359e2da0f412f", 0x20}], 0x6, &(0x7f0000003880)=[@tclass={{0x14, 0x29, 0x43, 0x10001}}, @hoplimit={{0x14, 0x29, 0x34, 0x80}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x84, 0xf, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0xffff, [0x9, 0x2, 0x9, 0x3, 0x7fffffff, 0xfff, 0x8e]}}, @generic={0x7f}, @pad1, @pad1, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0xff, [0x0, 0x81, 0x1, 0x20]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}, r4}}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0x4, 0x0, [@local, @private1, @private0, @rand_addr=' \x01\x00', @mcast1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x170}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003b40)="e248fd37aae54194959e56d2bf6ccd2214b9919d7cd6388cf8eb4fb150548500b01c814c18b4d195f5377e1cbc5304c6d04492cee065a6c11b955a1da04e59517214f3e99be6accf7892e909957aea137d140f9c09dc6fa9e2399e461732236e39d26eebe78cfdee9b6526922d3120a05a3c4fcbc62a61a1b2974c7dd86b318caac561b99ebb6937cbab25bec87651cfaf7b60cc75802322c7a2e775f3af1e814500918203d8196c2f6bd954a830d67b0b691719d81da641d1ca6400f9e58658bb90d04dbae1fca34e9b0730de2d0b049e59a4", 0xd3}, {0x0}], 0x2, &(0x7f0000003d00)=[@rthdr={{0x78, 0x29, 0x39, {0x2, 0xc, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00']}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000007380)=[{0x0}, {0x0}, {&(0x7f0000006300)}], 0x3}}, {{&(0x7f00000074c0)={0xa, 0x4e20, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000007880)=[{&(0x7f0000007500)="0aaca0e8dca3ea5aeb247b6116baf3e8b0a711321a29339fd95abf4695659acb3a10b61c4af998d987845e9ea3581976f992e1358219bfc8fe2601e3119a41fe971cebc9a24c450c083c96a5b51391e9b8a9788a27eda5149c86054ea4f4f515cd8bb73db97b386b65c97f86e37d2ae4cceaf0a103a63ffd16a518b8e19734721360ed30d02b35d1297978a06de20a651d9c2d6cf038d80a22f3b752134df45e03f5ab663c1d3f90f84b9d273d3763c313eef656c562d012f3186e875f15", 0xbe}, {&(0x7f00000075c0)="0db47024cdf9bd557c33b499de202b84006304d1facbeaf88448acb550c9de009a37ec8c033c482a781c1414a8c8e915d76dbd56f39d28e7bc68bac776a7b264cc42728804383f1bf922b57de0182eeca78e806778dd89a4741c7de783f53ece6a85068f74a2b6cd1d0d20fd3117b6005ee647f7ace27d7215c80af1b322b5494202b50db1a3cf385ae7a2d6d697a81bdb790d007055978bc45769de760c653d016a54e18da18d2f471ed4f1d5890b8634a0cf3e8caa5e279ae6e42912b1bb2dc4de104aa4d579fae299fda6ca26e418b8ba175e518b4fac293ac3", 0xdb}, {0x0}], 0x3, &(0x7f0000000600)=[@dstopts={{0xf8, 0x29, 0x37, {0x84, 0x1b, '\x00', [@generic={0x4, 0xcb, "88468e948a98150773ad5974590bd10ce07c760cc29075d9cccae366d9256647444337808fb7aef8d01928bfff42a29c9e982162e170280a1da6a59e4a86abf3a0bf2b51e74cfe2d878f050623eacf2b004529fd47e748bb560bcd60ab6383b094167bd07a30b24736e172d86bf46baff2a3573c062ae88f6dca81bf664a203844ccf77838e11f039ed34bdfa597b94d763e39ce1d06164f9649cbbcc4cf31ef04d8a670fb50e80b34f4d3f5c504b85ce6e4f73518bf864a3dca5f641871a5658dd8b70c19397f6913d19b"}, @jumbo={0xc2, 0x4, 0x200000}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x1, 0xb8, 0x0, [@loopback, @dev, @private2, @private0, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}]}}}], 0x1a0}}], 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000000), &(0x7f0000000180)=r9}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) connect$ax25(r2, &(0x7f0000000000)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) 6.795840514s ago: executing program 0 (id=3442): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000f80)=@ethtool_drvinfo={0x3, "3b3a6e12d52d00eb82cc42f1f00d1b61ab88669e42bdfb3cec88f302de9e1d73", "9e3fe5d75f463d0322b78f5a3995fa1e7546d25aed97fbf6eb197b880bef7d55", "31cb053e0c8f3e81062f62e0f874b078cef598cf374e31fb58665661e850abd6", "fd1545ebd0c5b39be0c71d5eb6dab774c0a8f4394f9dfb56b0ccf9f6f1fdfdc1", "78a85ce08babb5877c9ab4909cd318f3ce181dd78515a854b784f51f55030e7f", "510f13cf44b740cd7cd65251"}}) 4.811988448s ago: executing program 0 (id=3443): openat$mice(0xffffffffffffff9c, 0x0, 0x0) io_setup(0x8, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) 4.746244476s ago: executing program 3 (id=3444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="eaa334dd81ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond0\x00', 'bridge0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d8}}, {{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0_vlan\x00'}, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}) creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x8fa7b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000002380)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x63, 0xffffffffffff0001, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 4.715203613s ago: executing program 2 (id=3445): creat(&(0x7f0000000180)='./file0\x00', 0x0) socket(0x840000000002, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000200000008510000005000000850000000f0000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000008e00), 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/route\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 4.443802314s ago: executing program 4 (id=3446): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000840)) 3.598223773s ago: executing program 0 (id=3447): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x161040, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="34020000020000000580000000000000010000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x234) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r5, 0x715, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x55) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) connect$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000180)='./bus\x00', 0x0, 0xc) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./bus\x00') 3.459768803s ago: executing program 4 (id=3448): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) 3.378017275s ago: executing program 2 (id=3449): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000180)={0x30}, 0x30) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.332741015s ago: executing program 4 (id=3450): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x0, r4, r1}) 2.214526771s ago: executing program 4 (id=3451): r0 = memfd_create(&(0x7f0000000180)='\xb3\xbf@\x9c\xfb\xb2Ml\xd2\x1aL\xab\xa1a>\x03\xf5\x04\xf4qT\x13\x1d\xc9\xd6\x13\x9f!\x97\x8d\x04\x9eA\x86-\x83B\xc4\':D\xdc\xab\xf0\xe6\xb7\xed\xcc\x85\x03\x1a1\x05m)\xf7\x87\x898\xa9\xc5\x91\xcfJ\vvj\xe0P\x8erAx\xf4\x9a1!6@\xe0G*[\x81Z\xe16\xe0H\xb1b\x13\xe7\f\xf5\xec\xa2\xbd\x05\xd5\xba\xdd\xf5\xc5ncl\xfe\x1em\xd0A\x89\xd6\x022\xd7\xf1=\xf6`\x8c\x90\x80\x9b\x91\xc3d(_f\x99\xe9\xb4\xd4X\x84G;x\xe8v\x8d\x01\xb9\xb6\x99\xa8j\xfb\xbc\x16\xfa\xefc\xad\xb8\xa0t\x90\x94_\xb1\x96\x05\xadB\x93\xea$|\xf1\xa9\x8c\xfa\xc9\xd7=([\xe5\x84D\xe8@.\x06\xf7O\x9f\xd4z\xb0\xa4\xacJ\xda', 0x4) lseek(r0, 0xc1b8, 0x1) 2.165667827s ago: executing program 2 (id=3452): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000540)) 2.010847136s ago: executing program 0 (id=3453): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780), 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={@map=0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getdents(0xffffffffffffffff, 0x0, 0x48) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x160, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 1.932841858s ago: executing program 3 (id=3454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8994, &(0x7f0000000040)={'bond0\x00'}) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) 1.91252591s ago: executing program 4 (id=3455): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002540)='./file2\x00', 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x3}, 0x4) io_uring_setup(0x30d1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580e", '\x00', "fffffffffffffffd"}, 0x38) write$binfmt_script(r4, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "884e068a5e4e2085"}}, 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "25f87df99dc48af4"}}, 0x38}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000480)) 1.814103991s ago: executing program 2 (id=3456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 1.6952298s ago: executing program 0 (id=3457): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="83cbd890d6e1437ed23939112b07", 0xe}, {&(0x7f0000000200)="8856d0f6144cc63b", 0x8}], 0x2}}], 0x1, 0x4000c000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) 1.667758877s ago: executing program 3 (id=3458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "39f9dac5a3619b2c"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfd, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "c901c88ac1b4f5653445778fa82d6a49ba35d7b6"}}]}, 0x14c}}, 0x0) 0s ago: executing program 0 (id=3459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f2450f38f16aeb8f0858a66b000d46740c66430f38db322ef36d660f74ea3e40eb9ac4e1d1ef36f080a1bc960000ffc421e6525a77", 0x0, 0x0}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): ave_1: left promiscuous mode [ 825.626513][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.650102][T13579] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 825.655194][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.668517][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.697415][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.799678][ T6996] veth1_macvtap: left promiscuous mode [ 825.812659][T13589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.831657][ T6996] veth0_macvtap: left promiscuous mode [ 825.846382][ T6996] veth1_vlan: left promiscuous mode [ 825.852338][ T6996] veth0_vlan: left promiscuous mode [ 826.425437][ T30] audit: type=1400 audit(1720222190.309:842): avc: denied { ioctl } for pid=13599 comm="syz.3.2345" path="/dev/usbmon0" dev="devtmpfs" ino=706 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 826.450913][ C1] vkms_vblank_simulate: vblank timer overrun [ 827.280269][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 827.390951][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 828.106140][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.113457][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.144252][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.196033][T13605] netlink: 'syz.4.2346': attribute type 5 has an invalid length. [ 828.288900][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.327077][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 828.387055][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.454447][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2353'. [ 828.510998][T13627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13627 comm=syz.4.2353 [ 828.577952][T13627] netlink: 'syz.4.2353': attribute type 1 has an invalid length. [ 828.890839][T13389] hsr_slave_0: entered promiscuous mode [ 828.965851][T13389] hsr_slave_1: entered promiscuous mode [ 829.501310][ T6996] IPVS: stop unused estimator thread 0... [ 829.582303][T13650] netlink: 'syz.2.2362': attribute type 5 has an invalid length. [ 830.798475][T13665] 9pnet_fd: Insufficient options for proto=fd [ 831.152659][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 832.014269][ T5137] libceph: connect (1)[c::]:6789 error -101 [ 832.024845][ T5137] libceph: mon0 (1)[c::]:6789 connect error [ 832.036432][ T30] audit: type=1326 audit(1720222195.919:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.060519][T13691] netlink: 'syz.1.2374': attribute type 5 has an invalid length. [ 832.163066][ T30] audit: type=1326 audit(1720222195.959:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.255310][T13693] ceph: No mds server is up or the cluster is laggy [ 832.350428][ T30] audit: type=1326 audit(1720222196.239:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.458227][ T30] audit: type=1326 audit(1720222196.239:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.569197][ T30] audit: type=1326 audit(1720222196.239:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.677054][ T30] audit: type=1326 audit(1720222196.239:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.799151][ T30] audit: type=1326 audit(1720222196.239:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.893396][ T30] audit: type=1326 audit(1720222196.239:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 832.971258][ T30] audit: type=1326 audit(1720222196.239:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 833.124763][ T30] audit: type=1326 audit(1720222196.239:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13683 comm="syz.4.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6df375bd9 code=0x7fc00000 [ 833.400457][T13389] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.453843][T13389] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 833.508005][T13389] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.569523][T13389] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 834.120529][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.311276][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.393201][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.400518][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.573060][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.580476][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.167154][ T5091] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 835.377735][ T5091] usb 2-1: Using ep0 maxpacket: 8 [ 835.409763][ T5091] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.437749][ T5091] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 835.470817][ T5091] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 835.492974][ T5091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.564938][ T5091] usb 2-1: config 0 descriptor?? [ 835.884121][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.896167][ T5091] usb 2-1: USB disconnect, device number 11 [ 836.237659][T13389] veth0_vlan: entered promiscuous mode [ 836.315120][T13389] veth1_vlan: entered promiscuous mode [ 836.509137][T13389] veth0_macvtap: entered promiscuous mode [ 836.560604][T13389] veth1_macvtap: entered promiscuous mode [ 836.670732][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.696884][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.736891][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.765718][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.786228][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.823479][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.884901][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.946703][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.999630][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.118120][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.180359][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.236946][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.316717][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.356952][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.394104][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.419406][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.453282][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.494488][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.508323][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.519927][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.536725][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.546749][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.563002][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 837.584351][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 837.677359][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 837.709682][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2399'. [ 837.818414][T13389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.840354][T13389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.849643][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 837.849662][ T30] audit: type=1400 audit(1720222201.729:922): avc: denied { bind } for pid=13779 comm="syz.2.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 837.873022][T13794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 837.886545][T13389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.900016][T13389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.919852][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 837.939562][T13792] bridge1: entered promiscuous mode [ 837.945755][T13792] bridge1: entered allmulticast mode [ 838.249944][ T30] audit: type=1400 audit(1720222202.139:923): avc: denied { create } for pid=13799 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 838.309874][ T30] audit: type=1400 audit(1720222202.169:924): avc: denied { write } for pid=13799 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 838.336969][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 838.472518][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.511685][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.556961][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 838.571573][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 2.a2 [ 838.587048][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.717044][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.764239][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.897903][ T8] usb 3-1: Firmware version (0.0) predates our first public release. [ 838.906006][ T8] usb 3-1: Please update to version 0.2 or newer [ 839.185116][ T8] usb 3-1: USB disconnect, device number 13 [ 839.657276][ T5098] Bluetooth: hci2: command tx timeout [ 840.227827][T13784] chnl_net:caif_netlink_parms(): no params data found [ 841.003888][T13850] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.2410'. [ 841.066131][T13850] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 841.085366][T13784] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.100686][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.136112][T13784] bridge_slave_0: entered allmulticast mode [ 841.181655][T13784] bridge_slave_0: entered promiscuous mode [ 841.268552][T13784] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.300098][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.323127][T13784] bridge_slave_1: entered allmulticast mode [ 841.354156][T13784] bridge_slave_1: entered promiscuous mode [ 841.591203][T13858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2413'. [ 841.713877][T13784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.737315][ T5098] Bluetooth: hci2: command tx timeout [ 841.773519][T13784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.287401][ T4826] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 842.346685][T13879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2419'. [ 842.382880][T13784] team0: Port device team_slave_0 added [ 842.401989][T13879] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2419'. [ 842.451256][T13879] netlink: 'syz.2.2419': attribute type 6 has an invalid length. [ 842.472865][T13784] team0: Port device team_slave_1 added [ 842.501728][T13879] netlink: 'syz.2.2419': attribute type 5 has an invalid length. [ 842.527163][ T4826] usb 2-1: Using ep0 maxpacket: 8 [ 842.552574][T13879] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2419'. [ 842.573876][ T4826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.620578][ T4826] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 842.688599][ T4826] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 842.760466][ T4826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.858362][ T4826] usb 2-1: config 0 descriptor?? [ 842.875973][T13784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.950055][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.120623][T13784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.213794][T13784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.254498][T13784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.453986][T13784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.683595][ T8] usb 2-1: USB disconnect, device number 12 [ 843.828428][ T5098] Bluetooth: hci2: command tx timeout [ 844.405847][T13784] hsr_slave_0: entered promiscuous mode [ 844.444052][T13784] hsr_slave_1: entered promiscuous mode [ 844.473216][T13784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.523928][T13784] Cannot create hsr debugfs directory [ 845.040711][T13901] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2426'. [ 845.356929][ T30] audit: type=1400 audit(1720222209.219:925): avc: denied { connect } for pid=13909 comm="syz.3.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 845.897265][ T5098] Bluetooth: hci2: command tx timeout [ 845.928247][T13922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.518522][T13926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 846.899478][T13784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.309104][T13784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.602358][T13784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.981444][T13784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.263042][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 849.483011][T13784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 849.523215][T13965] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2443'. [ 849.534766][T13965] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2443'. [ 849.555505][T13784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 849.569194][T13965] netlink: 'syz.1.2443': attribute type 6 has an invalid length. [ 849.588039][T13965] netlink: 'syz.1.2443': attribute type 5 has an invalid length. [ 849.616324][T13965] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2443'. [ 849.674848][T13784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 849.724511][T13784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 850.166228][T13784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.210775][T13784] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.238256][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.245557][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.293298][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.300575][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.206381][T13784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.942508][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 852.100820][ T30] audit: type=1400 audit(1720222215.989:926): avc: denied { getopt } for pid=13989 comm="syz.3.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 852.298618][T14003] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2453'. [ 852.357691][T14003] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2453'. [ 852.375209][T14003] netlink: 'syz.2.2453': attribute type 6 has an invalid length. [ 852.420999][T14003] netlink: 'syz.2.2453': attribute type 5 has an invalid length. [ 852.448101][T14003] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2453'. [ 852.688808][ T9] libceph: connect (1)[c::]:6789 error -101 [ 852.696183][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 852.726808][ T9] libceph: connect (1)[c::]:6789 error -101 [ 852.756764][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 852.878089][T14012] ceph: No mds server is up or the cluster is laggy [ 852.989751][T14026] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2458'. [ 853.179819][T14022] Bluetooth: MGMT ver 1.22 [ 853.201576][T13784] veth0_vlan: entered promiscuous mode [ 853.206839][ T30] audit: type=1400 audit(1720222217.089:927): avc: denied { map } for pid=14021 comm="syz.2.2458" path="socket:[50932]" dev="sockfs" ino=50932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 853.267836][T13784] veth1_vlan: entered promiscuous mode [ 855.926014][T13784] veth0_macvtap: entered promiscuous mode [ 856.021230][T13784] veth1_macvtap: entered promiscuous mode [ 856.056457][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.069304][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.086972][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.105672][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.115832][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.127250][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.138743][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.157237][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.179231][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.212917][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.253197][T13784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.286654][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.324804][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.350663][ T30] audit: type=1800 audit(1720222220.229:928): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2465" name="bus" dev="overlay" ino=1989 res=0 errno=0 [ 856.355753][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.365043][T14052] input: syz0 as /devices/virtual/input/input32 [ 857.452538][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.452569][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.452592][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.452616][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.452637][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.452658][T13784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.452678][T13784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.468921][T13784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.679678][T13784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.679741][T13784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.679793][T13784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.679844][T13784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.852430][T14044] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2465'. [ 858.190468][T14066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2470'. [ 858.221430][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.237398][ T30] audit: type=1326 audit(1720222222.099:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 858.271319][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.308889][ T30] audit: type=1326 audit(1720222222.109:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 858.512206][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.543336][ T30] audit: type=1326 audit(1720222222.429:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 858.568205][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.702024][ T30] audit: type=1326 audit(1720222222.429:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 858.943106][ T30] audit: type=1326 audit(1720222222.429:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 858.976992][ T30] audit: type=1326 audit(1720222222.429:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 859.889746][ T30] audit: type=1326 audit(1720222222.439:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 859.989222][ T30] audit: type=1326 audit(1720222222.439:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 860.107357][ T30] audit: type=1326 audit(1720222222.439:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 860.143900][ T30] audit: type=1326 audit(1720222222.439:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14056 comm="syz.1.2469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 860.237507][ T5091] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 860.428132][ T5091] usb 3-1: no configurations [ 860.432883][ T5091] usb 3-1: can't read configurations, error -22 [ 860.610259][ T5091] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 860.798325][ T5091] usb 3-1: no configurations [ 860.802987][ T5091] usb 3-1: can't read configurations, error -22 [ 860.825048][ T5091] usb usb3-port1: attempt power cycle [ 860.925908][T14092] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 861.267631][ T5091] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 861.312779][ T5091] usb 3-1: no configurations [ 861.325660][ T5091] usb 3-1: can't read configurations, error -22 [ 862.549466][T14100] input: syz0 as /devices/virtual/input/input33 [ 863.147784][ T5091] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 863.187631][T14096] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 863.195363][T14096] overlayfs: failed to set xattr on upper [ 863.239442][ T5091] usb 3-1: no configurations [ 863.258109][ T5091] usb 3-1: can't read configurations, error -22 [ 863.311986][ T5091] usb usb3-port1: unable to enumerate USB device [ 863.337040][T14096] overlayfs: ...falling back to redirect_dir=nofollow. [ 863.355068][T14096] overlayfs: ...falling back to index=off. [ 863.380173][T14096] overlayfs: ...falling back to uuid=null. [ 863.474768][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 863.474793][ T30] audit: type=1400 audit(1720222227.359:950): avc: denied { execmem } for pid=14109 comm="syz.0.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 863.663001][ T30] audit: type=1400 audit(1720222227.479:951): avc: denied { unmount } for pid=12588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 863.961281][ T30] audit: type=1400 audit(1720222227.849:952): avc: denied { remount } for pid=14119 comm="syz.3.2489" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 864.421035][T14131] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2492'. [ 864.445167][T14128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 864.905002][ T30] audit: type=1400 audit(1720222228.769:953): avc: denied { create } for pid=14132 comm="syz.2.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 865.284318][T14139] [U] Q [ 865.702193][ T30] audit: type=1326 audit(1720222229.589:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.4.2497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5155175bd9 code=0x0 [ 865.733580][ T6719] bridge_slave_0: left allmulticast mode [ 865.768640][ T6719] bridge_slave_0: left promiscuous mode [ 865.784392][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.879761][ T30] audit: type=1326 audit(1720222230.759:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14163 comm="syz.3.2503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x0 [ 866.975623][T14178] netlink: 'syz.0.2507': attribute type 2 has an invalid length. [ 867.028871][T14178] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 867.048056][T14178] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2507'. [ 867.742042][T14187] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 867.913288][T14189] netlink: 'syz.2.2510': attribute type 1 has an invalid length. [ 867.943611][ T6719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.985124][ T6719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.005343][ T6719] bond0 (unregistering): Released all slaves [ 868.098778][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 869.115687][ T6719] hsr_slave_0: left promiscuous mode [ 869.164227][ T6719] hsr_slave_1: left promiscuous mode [ 869.234287][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.271170][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.322626][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.359168][ T5091] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 869.410233][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.573896][ T6719] veth1_macvtap: left promiscuous mode [ 869.589620][ T6719] veth0_macvtap: left promiscuous mode [ 869.590399][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.637302][ T6719] veth1_vlan: left promiscuous mode [ 869.650804][ T5091] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 869.655205][ T6719] veth0_vlan: left promiscuous mode [ 869.696310][ T5091] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.750524][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.811945][ T5091] usb 4-1: config 0 descriptor?? [ 870.133896][ T30] audit: type=1326 audit(1720222234.009:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 870.257048][ T30] audit: type=1326 audit(1720222234.029:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 870.376242][ T5091] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 870.469906][ T5091] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 870.600844][ T30] audit: type=1326 audit(1720222234.449:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 870.703054][ T30] audit: type=1326 audit(1720222234.449:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 870.871623][ T30] audit: type=1326 audit(1720222234.449:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 870.946896][ C1] hrtimer: interrupt took 104374 ns [ 871.001430][ T30] audit: type=1326 audit(1720222234.449:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 871.147625][ T30] audit: type=1326 audit(1720222234.459:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 871.283526][ T30] audit: type=1326 audit(1720222234.459:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14214 comm="syz.1.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8652775bd9 code=0x7fc00000 [ 871.391321][ T30] audit: type=1326 audit(1720222234.519:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.0.2526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa39d375bd9 code=0x0 [ 871.493001][ T5091] usb 4-1: USB disconnect, device number 17 [ 871.517186][ T30] audit: type=1400 audit(1720222234.719:965): avc: denied { setopt } for pid=14232 comm="syz.4.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 872.091466][T13787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 872.107530][T13787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 872.129612][T13787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 872.148701][T13787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 872.163838][T13787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 872.172082][T13787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 872.678906][ T6719] team0 (unregistering): Port device team_slave_1 removed [ 872.792912][ T6719] team0 (unregistering): Port device team_slave_0 removed [ 872.861254][T13787] Bluetooth: hci0: command 0x0406 tx timeout [ 873.336958][ T5150] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 873.539246][ T5150] usb 4-1: no configurations [ 873.547015][ T5150] usb 4-1: can't read configurations, error -22 [ 873.611012][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2526'. [ 873.721186][ T5150] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 873.908354][ T5150] usb 4-1: no configurations [ 873.913014][ T5150] usb 4-1: can't read configurations, error -22 [ 873.968455][ T5150] usb usb4-port1: attempt power cycle [ 874.526680][ T5098] Bluetooth: hci4: command tx timeout [ 875.146981][ T5150] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 875.202407][T14276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.204739][ T5150] usb 4-1: no configurations [ 875.410519][ T5150] usb 4-1: can't read configurations, error -22 [ 875.814473][ T6719] IPVS: stop unused estimator thread 0... [ 875.904956][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.911750][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.991834][T14254] chnl_net:caif_netlink_parms(): no params data found [ 876.558680][ T5098] Bluetooth: hci4: command tx timeout [ 876.629978][ T6719] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.090772][ T30] audit: type=1326 audit(1720222240.959:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.198515][ T6719] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.229448][ T30] audit: type=1326 audit(1720222240.959:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.286922][ T30] audit: type=1326 audit(1720222241.169:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.458790][ T30] audit: type=1326 audit(1720222241.169:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.614134][ T30] audit: type=1326 audit(1720222241.169:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.637571][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.764091][ T30] audit: type=1326 audit(1720222241.299:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.787464][ C0] vkms_vblank_simulate: vblank timer overrun [ 877.960997][ T30] audit: type=1326 audit(1720222241.299:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 877.984494][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.143505][ T30] audit: type=1326 audit(1720222241.299:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 878.283809][ T30] audit: type=1326 audit(1720222241.419:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 878.307223][ C0] vkms_vblank_simulate: vblank timer overrun [ 878.394285][ T30] audit: type=1326 audit(1720222241.419:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14294 comm="syz.3.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 878.482186][ T6719] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.627391][ T5098] Bluetooth: hci4: command tx timeout [ 878.872770][T14323] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSP]L3 index 0 [ 878.904013][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2552'. [ 878.941216][T14318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2552'. [ 878.981470][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2552'. [ 879.185151][ T6719] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.247466][T14254] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.267929][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.300326][T14254] bridge_slave_0: entered allmulticast mode [ 879.347098][T14254] bridge_slave_0: entered promiscuous mode [ 879.381865][T14254] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.429824][T14254] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.481303][T14254] bridge_slave_1: entered allmulticast mode [ 879.510162][T14254] bridge_slave_1: entered promiscuous mode [ 879.695758][T14345] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 879.769552][T14254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.496962][ T5098] Bluetooth: hci4: command tx timeout [ 886.525829][T14254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.835082][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 886.835107][ T30] audit: type=1326 audit(1720222250.709:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14354 comm="syz.3.2562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x0 [ 887.917997][T14378] random: crng reseeded on system resumption [ 887.997100][ T30] audit: type=1400 audit(1720222251.809:987): avc: denied { append } for pid=14354 comm="syz.3.2562" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 888.895472][T14254] team0: Port device team_slave_0 added [ 889.281047][T14254] team0: Port device team_slave_1 added [ 889.518254][T14392] x_tables: duplicate underflow at hook 1 [ 890.003666][T14408] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 890.007308][T14254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.027655][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.128715][T14254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.347865][T14254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.361684][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.431132][T14254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.457308][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 890.490858][T14414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2573'. [ 890.534686][ T6719] bridge_slave_1: left allmulticast mode [ 890.557167][ T6719] bridge_slave_1: left promiscuous mode [ 890.563073][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.603068][ T6719] bridge_slave_0: left allmulticast mode [ 890.611335][ T6719] bridge_slave_0: left promiscuous mode [ 890.629892][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.382176][T14435] x_tables: duplicate underflow at hook 1 [ 891.907665][T13787] Bluetooth: hci2: command tx timeout [ 892.469853][ T30] audit: type=1400 audit(1720222256.349:988): avc: denied { execute } for pid=14438 comm="syz.1.2582" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 892.611306][ T30] audit: type=1400 audit(1720222256.419:989): avc: denied { map } for pid=14438 comm="syz.1.2582" path="socket:[52710]" dev="sockfs" ino=52710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 892.949072][ T30] audit: type=1400 audit(1720222256.809:990): avc: denied { read write } for pid=14440 comm="syz.0.2583" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 893.160447][ T30] audit: type=1400 audit(1720222256.819:991): avc: denied { open } for pid=14440 comm="syz.0.2583" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 893.567126][ T30] audit: type=1400 audit(1720222257.449:992): avc: denied { accept } for pid=14451 comm="syz.1.2585" path="socket:[52721]" dev="sockfs" ino=52721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 894.881630][ T6719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.941651][ T6719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.957607][ T6719] bond0 (unregistering): Released all slaves [ 894.989089][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 895.339054][T14462] team_slave_0: entered promiscuous mode [ 895.366080][T14462] team_slave_0: entered allmulticast mode [ 895.483948][T14463] team_slave_0: left promiscuous mode [ 897.070457][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 897.084989][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 897.094732][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 897.123111][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 897.155685][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 897.173678][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 897.338295][T14254] hsr_slave_0: entered promiscuous mode [ 897.399477][T14254] hsr_slave_1: entered promiscuous mode [ 897.416599][T14254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.430704][T14254] Cannot create hsr debugfs directory [ 897.964337][ T6719] hsr_slave_0: left promiscuous mode [ 898.028299][ T6719] hsr_slave_1: left promiscuous mode [ 898.046785][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.069415][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.088518][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.095948][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.190721][ T6719] veth1_macvtap: left promiscuous mode [ 898.203298][ T6719] veth0_macvtap: left promiscuous mode [ 898.210522][ T6719] veth1_vlan: left promiscuous mode [ 898.218324][ T6719] veth0_vlan: left promiscuous mode [ 899.265355][ T5098] Bluetooth: hci3: command tx timeout [ 899.725196][ T6719] team0 (unregistering): Port device team_slave_1 removed [ 899.825991][ T6719] team0 (unregistering): Port device team_slave_0 removed [ 901.338308][ T5098] Bluetooth: hci3: command tx timeout [ 901.419513][ T30] audit: type=1400 audit(1720222265.309:993): avc: denied { shutdown } for pid=14497 comm="syz.3.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 902.798282][ T30] audit: type=1400 audit(1720222266.679:994): avc: denied { write } for pid=14515 comm="syz.4.2601" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 903.242389][ T6719] IPVS: stop unused estimator thread 0... [ 903.319146][T14477] chnl_net:caif_netlink_parms(): no params data found [ 903.429222][ T5098] Bluetooth: hci3: command tx timeout [ 904.289062][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 904.338165][T14477] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.371763][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.403993][T14477] bridge_slave_0: entered allmulticast mode [ 904.449702][T14477] bridge_slave_0: entered promiscuous mode [ 904.576771][ T6696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.276699][T14477] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.303016][T14477] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.330337][T14477] bridge_slave_1: entered allmulticast mode [ 905.358534][T14477] bridge_slave_1: entered promiscuous mode [ 905.433105][T14559] bond0: (slave tunl0): Error: Device can not be enslaved while up [ 905.501349][ T5098] Bluetooth: hci3: command tx timeout [ 905.541282][ T6696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.973869][ T6696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.097141][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2618'. [ 906.205933][T14477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.290529][T14477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.590398][ T30] audit: type=1400 audit(1720222270.479:995): avc: denied { create } for pid=14589 comm="syz.3.2621" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 906.710925][T14590] UBIFS error (pid: 14590): cannot open "./file0", error -22 [ 906.820231][ T6696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.031011][ T30] audit: type=1400 audit(1720222270.589:996): avc: denied { mounton } for pid=14589 comm="syz.3.2621" path="/404/file0" dev="tmpfs" ino=2159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 907.393744][T14254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 907.441103][T14254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 907.569143][T14477] team0: Port device team_slave_0 added [ 907.652793][T14477] team0: Port device team_slave_1 added [ 907.693452][T14254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 908.428718][T14254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 908.670106][T14477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.690968][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.801465][T14477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.817979][T14477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.825052][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.919585][T14477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.530308][T14477] hsr_slave_0: entered promiscuous mode [ 909.570511][T14477] hsr_slave_1: entered promiscuous mode [ 909.595765][T14477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.616408][T14477] Cannot create hsr debugfs directory [ 911.886387][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2629'. [ 912.149400][ T6696] bridge_slave_1: left allmulticast mode [ 912.155113][ T6696] bridge_slave_1: left promiscuous mode [ 912.175448][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.212559][ T6696] bridge_slave_0: left allmulticast mode [ 912.235440][ T6696] bridge_slave_0: left promiscuous mode [ 912.243646][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.184903][ T30] audit: type=1800 audit(1720222278.069:997): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2637" name="/" dev="fuse" ino=1 res=0 errno=0 [ 914.496626][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.511602][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.524742][ T6696] bond0 (unregistering): Released all slaves [ 915.053063][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 915.485521][ T6696] hsr_slave_0: left promiscuous mode [ 915.515649][ T6696] hsr_slave_1: left promiscuous mode [ 915.548432][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.566237][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.598825][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.628972][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.715135][ T6696] veth1_macvtap: left promiscuous mode [ 915.724924][ T6696] veth0_macvtap: left promiscuous mode [ 915.743114][ T6696] veth1_vlan: left promiscuous mode [ 915.773464][ T6696] veth0_vlan: left promiscuous mode [ 917.450623][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 917.468660][T14706] QAT: failed to copy from user. [ 917.770179][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 918.882954][T14254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.211796][ T30] audit: type=1400 audit(1720222283.089:998): avc: denied { mounton } for pid=14715 comm="syz.1.2650" path="/134/file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 920.924111][T14254] 8021q: adding VLAN 0 to HW filter on device team0 [ 920.980376][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 920.987676][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.135103][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.142417][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.771054][T14477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 921.817870][T14477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 921.876642][T14477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 921.998770][T14477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 922.008884][T14756] QAT: failed to copy from user. [ 922.303973][T14760] pimreg: entered allmulticast mode [ 922.731231][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.859165][T14254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 923.175786][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.363353][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.370634][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.492934][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.500197][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.003903][T14254] veth0_vlan: entered promiscuous mode [ 924.248688][T14477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 924.294778][T14477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 924.342559][T14254] veth1_vlan: entered promiscuous mode [ 924.621630][T14254] veth0_macvtap: entered promiscuous mode [ 924.717123][T14254] veth1_macvtap: entered promiscuous mode [ 924.803642][T14254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.837904][T14254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.862469][T14254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.886937][ T30] audit: type=1400 audit(1720222288.769:999): avc: denied { write } for pid=14807 comm="syz.4.2674" name="mcfilter6" dev="proc" ino=4026533452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 924.911165][T14254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.937075][T14254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 924.951771][T14254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 924.980196][T14254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.249373][T14254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.275950][T14254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.286225][T14254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.305965][T14254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.317694][T14254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 925.333737][T14254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.351627][T14254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 925.392166][T14254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.402539][T14254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.416463][T14254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.429196][T14254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.581201][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.770697][ T6719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.785280][ T6719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.925797][T14477] veth0_vlan: entered promiscuous mode [ 925.972131][T14477] veth1_vlan: entered promiscuous mode [ 925.987938][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.017070][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.196591][T14477] veth0_macvtap: entered promiscuous mode [ 926.254996][T14477] veth1_macvtap: entered promiscuous mode [ 926.632115][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.672474][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.746244][T14842] x_tables: duplicate underflow at hook 1 [ 927.446928][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.475544][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.495827][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.536964][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.568397][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.591070][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.624272][T14477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.692802][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.713909][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.780240][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.799547][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.813457][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.832410][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.857158][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.894686][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.926660][T14477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.085927][T14477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.128159][T14477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.162943][T14477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.193465][T14477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.377658][ T30] audit: type=1326 audit(1720222292.239:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14857 comm="syz.3.2693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x0 [ 928.444126][T14862] No buffer was provided with the request [ 931.215676][ T6696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.273995][ T6696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.461933][ T6719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.476291][ T6719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.532720][T14894] input: syz0 as /devices/virtual/input/input35 [ 932.441412][T14911] No buffer was provided with the request [ 932.653746][T14913] use of bytesused == 0 is deprecated and will be removed in the future, [ 932.720869][T14913] use the actual size instead. [ 933.464189][T14932] input: syz0 as /devices/virtual/input/input36 [ 934.745372][ T30] audit: type=1400 audit(1720222298.079:1001): avc: denied { write } for pid=14943 comm="syz.3.2722" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 935.406879][ T30] audit: type=1400 audit(1720222299.289:1002): avc: denied { getopt } for pid=14971 comm="syz.3.2729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 936.959403][T14987] input: syz0 as /devices/virtual/input/input37 [ 937.434486][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.442386][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.037858][T15015] syz_tun: entered allmulticast mode [ 938.098907][T15013] syz_tun: left allmulticast mode [ 941.858893][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2765'. [ 943.919130][T15092] netlink: 'syz.3.2774': attribute type 27 has an invalid length. [ 944.107330][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2774'. [ 944.567641][T15106] input: syz0 as /devices/virtual/input/input38 [ 945.006046][ T30] audit: type=1800 audit(1720222308.879:1003): pid=15112 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2781" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 946.593328][ T30] audit: type=1400 audit(1720222310.459:1004): avc: denied { ioctl } for pid=15120 comm="syz.1.2785" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 947.577942][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 949.655050][ T30] audit: type=1400 audit(1720222313.539:1005): avc: denied { getopt } for pid=15160 comm="syz.2.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 949.674572][ C1] vkms_vblank_simulate: vblank timer overrun [ 949.715263][ T30] audit: type=1400 audit(1720222313.579:1006): avc: denied { mount } for pid=15160 comm="syz.2.2797" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 950.570391][ T30] audit: type=1400 audit(1720222314.459:1007): avc: denied { write } for pid=15186 comm="syz.2.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 950.590634][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.687278][ T30] audit: type=1400 audit(1720222314.459:1008): avc: denied { nlmsg_write } for pid=15186 comm="syz.2.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 951.913254][ T30] audit: type=1400 audit(1720222315.309:1009): avc: denied { sendto } for pid=15190 comm="syz.0.2809" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 952.527638][ T9] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 952.755442][ T9] usb 3-1: string descriptor 0 read error: -22 [ 952.770169][ T9] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 952.806893][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.836101][ T9] usb 3-1: config 0 descriptor?? [ 953.102600][ T30] audit: type=1400 audit(1720222316.989:1010): avc: denied { mount } for pid=15218 comm="syz.4.2819" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 953.153679][T15219] ======================================================= [ 953.153679][T15219] WARNING: The mand mount option has been deprecated and [ 953.153679][T15219] and is ignored by this kernel. Remove the mand [ 953.153679][T15219] option from the mount to silence this warning. [ 953.153679][T15219] ======================================================= [ 953.192181][ T30] audit: type=1400 audit(1720222317.039:1011): avc: denied { remount } for pid=15218 comm="syz.4.2819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 953.441012][ T30] audit: type=1400 audit(1720222317.319:1012): avc: denied { unmount } for pid=13784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 955.948726][ T30] audit: type=1326 audit(1720222319.659:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15237 comm="syz.4.2823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5155175bd9 code=0x0 [ 956.521778][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 956.529450][ T30] audit: type=1400 audit(1720222320.399:1014): avc: denied { unmount } for pid=13784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 956.812054][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 956.864802][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2827'. [ 956.887029][ T9] dib0700: firmware download failed at 7 with -22 [ 956.903062][ T30] audit: type=1400 audit(1720222320.789:1015): avc: denied { bind } for pid=15248 comm="syz.1.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 957.447838][ T9] usb 3-1: USB disconnect, device number 18 [ 957.476959][ T5150] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 957.688436][ T5150] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 957.716442][ T5150] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 957.729870][ T5150] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 957.796449][ T5150] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 957.839128][ T5150] usb 5-1: string descriptor 0 read error: -22 [ 957.859160][ T5150] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 957.884250][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.943697][ T5150] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 958.501332][ T5150] usb 5-1: USB disconnect, device number 14 [ 960.350217][T13787] Bluetooth: hci2: command 0x0406 tx timeout [ 961.887089][ T5135] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 961.977033][ T5150] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 962.099695][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.121429][ T5135] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 962.141007][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.160421][ T5135] usb 2-1: config 0 descriptor?? [ 962.212361][ T5150] usb 3-1: string descriptor 0 read error: -22 [ 962.227262][ T5150] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 962.253401][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.296062][ T5150] usb 3-1: config 0 descriptor?? [ 962.499889][T15321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2853'. [ 962.515370][T15321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2853'. [ 962.642685][ T5135] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 962.690080][ T5135] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input39 [ 963.808780][ T5135] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 963.879905][ T5135] usb 2-1: USB disconnect, device number 13 [ 964.592588][T15332] x_tables: duplicate underflow at hook 1 [ 965.276934][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 965.873653][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.994800][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.010502][ T5150] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 966.046619][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 966.066599][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.081075][ T5150] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 966.112943][ T9] usb 5-1: config 0 descriptor?? [ 966.137062][ T5150] dib0700: firmware download failed at 7 with -22 [ 966.173152][ T5150] usb 3-1: USB disconnect, device number 19 [ 966.332327][ T30] audit: type=1326 audit(1720222330.209:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.393978][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 966.466099][ T30] audit: type=1326 audit(1720222330.219:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.514190][ T30] audit: type=1326 audit(1720222330.219:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.565504][ T30] audit: type=1326 audit(1720222330.449:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.586886][T15343] syzkaller0: entered promiscuous mode [ 966.599812][ T30] audit: type=1326 audit(1720222330.449:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.626303][ T30] audit: type=1326 audit(1720222330.449:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.634986][T15343] syzkaller0: entered allmulticast mode [ 966.665161][ T30] audit: type=1326 audit(1720222330.449:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.705978][ T30] audit: type=1326 audit(1720222330.449:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15345 comm="syz.3.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7ffc0000 [ 966.754237][ T6996] syzkaller0: tun_net_xmit 48 [ 966.776209][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 966.797084][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 966.824831][ T9] usb 5-1: USB disconnect, device number 15 [ 966.871727][T15362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2864'. [ 966.917448][T15362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2864'. [ 967.394906][ T30] audit: type=1326 audit(1720222331.269:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15369 comm="syz.3.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7fc00000 [ 967.494229][ T30] audit: type=1326 audit(1720222331.269:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15369 comm="syz.3.2868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f11c3975bd9 code=0x7fc00000 [ 968.392194][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'. [ 968.409702][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'. [ 969.486248][T15404] netlink: 'syz.2.2881': attribute type 9 has an invalid length. [ 969.501046][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'. [ 969.706500][T15416] syz.1.2887[15416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.706735][T15416] syz.1.2887[15416] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 972.002804][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 972.002831][ T30] audit: type=1400 audit(1720222335.889:1030): avc: denied { setattr } for pid=15441 comm="syz.2.2894" path="/dev/mixer" dev="devtmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 973.975635][T15414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2886'. [ 974.019531][T15434] bond_slave_0: entered promiscuous mode [ 974.026307][T15434] bond_slave_1: entered promiscuous mode [ 974.058437][T15434] bond_slave_0: left promiscuous mode [ 974.064681][T15434] bond_slave_1: left promiscuous mode [ 974.304793][T15451] netlink: 'syz.3.2898': attribute type 9 has an invalid length. [ 974.326542][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 974.625926][ T30] audit: type=1400 audit(1720222338.509:1031): avc: denied { getopt } for pid=15462 comm="syz.3.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 980.534425][T15519] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 980.812750][ T30] audit: type=1400 audit(1720222344.699:1032): avc: denied { read } for pid=15524 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 981.313259][ T30] audit: type=1400 audit(1720222345.199:1033): avc: denied { attach_queue } for pid=15530 comm="syz.3.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 982.597931][ T4534] udevd[4534]: worker [14901] terminated by signal 33 (Unknown signal 33) [ 982.638266][ T4534] udevd[4534]: worker [15352] terminated by signal 33 (Unknown signal 33) [ 982.691337][ T4534] udevd[4534]: worker [14879] terminated by signal 33 (Unknown signal 33) [ 982.733729][ T4534] udevd[4534]: worker [15201] terminated by signal 33 (Unknown signal 33) [ 982.768340][ T4534] udevd[4534]: worker [15245] terminated by signal 33 (Unknown signal 33) [ 982.837595][ T4534] udevd[4534]: worker [15349] terminated by signal 33 (Unknown signal 33) [ 982.859690][T15536] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 983.046914][ T30] audit: type=1400 audit(1720222346.879:1034): avc: denied { remount } for pid=15539 comm="syz.1.2930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 983.822291][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2933'. [ 986.318830][T15562] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 990.370926][ T4826] IPVS: starting estimator thread 0... [ 990.396334][T15571] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 990.410586][ T30] audit: type=1400 audit(1720222354.279:1035): avc: denied { write } for pid=15568 comm="syz.1.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 990.516929][T15573] IPVS: using max 16 ests per chain, 38400 per kthread [ 991.577945][T15582] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 991.958697][T15591] 9pnet_fd: Insufficient options for proto=fd [ 993.177749][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2950'. [ 993.303999][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 994.425780][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 994.470500][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 994.487303][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 994.502372][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 994.511254][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 994.519447][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 995.515888][T15617] chnl_net:caif_netlink_parms(): no params data found [ 995.793536][ T5096] Bluetooth: hci4: command 0x0406 tx timeout [ 996.365149][T15644] rdma_op ffff88807ba8a1f0 conn xmit_rdma 0000000000000000 [ 996.648822][ T5098] Bluetooth: hci5: command tx timeout [ 997.277196][ T30] audit: type=1400 audit(1720222361.149:1036): avc: denied { create } for pid=15646 comm="syz.4.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 997.327806][ T30] audit: type=1400 audit(1720222361.219:1037): avc: denied { write } for pid=15646 comm="syz.4.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 997.328367][T15648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2963'. [ 997.546973][ T4826] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 997.624202][ T6996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.667067][T15617] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.687174][T15617] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.694696][T15617] bridge_slave_0: entered allmulticast mode [ 997.715525][T15617] bridge_slave_0: entered promiscuous mode [ 997.735271][T15617] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.754837][T15617] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.762976][T15617] bridge_slave_1: entered allmulticast mode [ 997.769605][ T4826] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 997.780661][T15617] bridge_slave_1: entered promiscuous mode [ 997.816700][ T4826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.857749][ T4826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.891437][ T4826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 997.940611][ T4826] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 997.956897][ T4826] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 997.975868][ T4826] usb 2-1: Manufacturer: syz [ 997.984479][ T6996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.011962][ T4826] usb 2-1: config 0 descriptor?? [ 998.219201][T15617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.355388][ T6996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.406118][T15617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.509487][T15651] tmpfs: Bad value for 'mpol' [ 998.707026][ T5098] Bluetooth: hci5: command tx timeout [ 998.839194][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.844372][ T6996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.855866][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.796143][T15673] netlink: 'syz.4.2969': attribute type 58 has an invalid length. [ 999.838910][T15673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2969'. [ 1000.045821][T15617] team0: Port device team_slave_0 added [ 1000.182797][T15617] team0: Port device team_slave_1 added [ 1000.777723][ T5098] Bluetooth: hci5: command tx timeout [ 1000.846670][ T4826] usbhid 2-1:0.0: can't add hid device: -71 [ 1000.854369][ T4826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1000.869483][ T4826] usb 2-1: USB disconnect, device number 14 [ 1000.959865][T15617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.997656][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.035669][T15617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.108459][T15617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1001.130239][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.216950][T15617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.691847][T15617] hsr_slave_0: entered promiscuous mode [ 1001.714883][T15617] hsr_slave_1: entered promiscuous mode [ 1001.804443][ T6996] bridge_slave_1: left allmulticast mode [ 1001.815609][ T6996] bridge_slave_1: left promiscuous mode [ 1001.832788][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.856720][ T6996] bridge_slave_0: left allmulticast mode [ 1001.874799][ T6996] bridge_slave_0: left promiscuous mode [ 1001.882794][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.622453][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.655542][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.675683][ T6996] bond0 (unregistering): Released all slaves [ 1002.711402][ T6996] bond1 (unregistering): Released all slaves [ 1002.840343][T15713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1002.869806][ T5098] Bluetooth: hci5: command tx timeout [ 1002.999963][T15719] netlink: 'syz.3.2984': attribute type 1 has an invalid length. [ 1003.017462][T15719] netlink: 'syz.3.2984': attribute type 2 has an invalid length. [ 1005.748069][ T4826] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1005.784146][ T6996] hsr_slave_0: left promiscuous mode [ 1005.813930][ T6996] hsr_slave_1: left promiscuous mode [ 1005.865791][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.897035][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.069071][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.081947][ T4826] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1006.123169][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.153849][ T4826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.201049][ T4826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.248923][ T4826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1006.622538][ T4826] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1006.738138][T15750] rdma_op ffff88802a1369f0 conn xmit_rdma 0000000000000000 [ 1007.315260][ T6996] veth1_macvtap: left promiscuous mode [ 1007.371824][ T4826] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1007.386200][ T4826] usb 2-1: Manufacturer: syz [ 1007.390709][ T6996] veth0_macvtap: left promiscuous mode [ 1007.401538][ T4826] usb 2-1: config 0 descriptor?? [ 1007.437107][ T6996] veth1_vlan: left promiscuous mode [ 1007.453960][ T6996] veth0_vlan: left promiscuous mode [ 1007.855913][T15726] tmpfs: Bad value for 'mpol' [ 1010.174928][ T4826] usbhid 2-1:0.0: can't add hid device: -71 [ 1010.175366][ T4826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1010.190683][ T4826] usb 2-1: USB disconnect, device number 15 [ 1010.224357][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 1010.227799][T15643] udevd[15643]: setting owner of /dev/bus/usb/002/015 to uid=0, gid=0 failed: No such file or directory [ 1010.481327][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 1011.497955][T15799] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1012.950956][T15739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'. [ 1014.854561][ T30] audit: type=1400 audit(1720222378.739:1038): avc: denied { mount } for pid=15831 comm="syz.1.3018" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1014.994579][ T30] audit: type=1400 audit(1720222378.879:1039): avc: denied { unmount } for pid=12588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1015.438400][ T5137] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1015.666955][ T5137] usb 4-1: Using ep0 maxpacket: 16 [ 1015.744777][ T5137] usb 4-1: config 0 has no interfaces? [ 1015.884649][ T5137] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.039716][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.039794][ T5137] usb 4-1: Product: syz [ 1016.039824][ T5137] usb 4-1: Manufacturer: syz [ 1016.041552][ T5137] usb 4-1: SerialNumber: syz [ 1016.263681][ T5137] usb 4-1: config 0 descriptor?? [ 1016.499099][ T9138] usb 4-1: USB disconnect, device number 22 [ 1016.619280][T15617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1016.693608][T15617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1016.778809][T15617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1016.963085][T15617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1017.680818][T15617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.808315][T15617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.875350][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.882681][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.703659][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.710972][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.261837][ T5098] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1019.271651][ T5098] Bluetooth: hci2: Injecting HCI hardware error event [ 1019.283269][ T5098] Bluetooth: hci2: hardware error 0x00 [ 1019.537231][ T30] audit: type=1400 audit(1720222383.419:1040): avc: denied { map } for pid=15922 comm="syz.3.3046" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1020.043340][T15617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.344310][T15617] veth0_vlan: entered promiscuous mode [ 1020.782791][T15617] veth1_vlan: entered promiscuous mode [ 1021.044752][T15617] veth0_macvtap: entered promiscuous mode [ 1021.159837][T15617] veth1_macvtap: entered promiscuous mode [ 1021.281538][T15954] Bluetooth: MGMT ver 1.22 [ 1021.419937][ T5098] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1021.464312][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.704619][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.715037][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.740102][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.799558][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.854660][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.909151][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.958723][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.029836][T15617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.125097][ T30] audit: type=1400 audit(1720222386.009:1041): avc: denied { read } for pid=15957 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1022.135451][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.222641][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.260969][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.312102][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.340719][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.378446][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.561306][T15617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.785908][T15617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.300421][T15617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.452189][T15617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.479526][T15617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.520753][T15617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.561501][T15617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.075193][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.134767][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.339983][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.516885][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.426291][T16034] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1026.462271][ T5098] Bluetooth: hci3: command 0x0406 tx timeout [ 1029.684609][T16064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.738319][T16064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.799234][T16064] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1030.785150][T16086] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1033.476989][ T5150] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1033.709083][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.817050][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.856996][ T5150] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1033.904984][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.945146][ T5150] usb 4-1: config 0 descriptor?? [ 1034.292488][ T5150] usbhid 4-1:0.0: can't add hid device: -71 [ 1034.323334][ T5150] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1034.737176][ T5150] usb 4-1: USB disconnect, device number 23 [ 1035.637108][ T30] audit: type=1326 audit(1720222399.489:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16135 comm="syz.3.3103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x0 [ 1035.803829][ T30] audit: type=1400 audit(1720222399.689:1043): avc: denied { getopt } for pid=16140 comm="syz.4.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1036.068657][ T30] audit: type=1400 audit(1720222399.939:1044): avc: denied { append } for pid=16143 comm="syz.4.3106" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1036.787711][ T5150] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1037.019545][ T5150] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1037.045990][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.088863][ T5150] usb 4-1: config 0 descriptor?? [ 1037.118909][ T5150] cp210x 4-1:0.0: cp210x converter detected [ 1038.373422][T16179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.393994][T16179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.440867][T16179] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1041.616288][ T5150] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1041.660423][ T5150] cp210x 4-1:0.0: querying part number failed [ 1041.725113][ T5150] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1042.032237][ T5150] usb 4-1: USB disconnect, device number 24 [ 1042.819859][ T5150] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1042.885073][ T5150] cp210x 4-1:0.0: device disconnected [ 1043.042825][T16201] netlink: 'syz.4.3127': attribute type 7 has an invalid length. [ 1043.711859][T16208] syz.2.3126[16208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1043.712835][T16208] syz.2.3126[16208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1049.244162][T16235] netlink: 'syz.3.3139': attribute type 7 has an invalid length. [ 1050.951845][ T6987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.978241][T16266] netlink: 'syz.4.3150': attribute type 7 has an invalid length. [ 1051.012597][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1051.048410][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1051.058312][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1051.068267][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1051.096589][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1051.105549][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.270103][ T6987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.566633][ T6987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.878090][ T6987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.884016][ T6987] bridge_slave_1: left allmulticast mode [ 1052.913105][ T6987] bridge_slave_1: left promiscuous mode [ 1052.942676][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.975920][ T6987] bridge_slave_0: left allmulticast mode [ 1052.983093][ T6987] bridge_slave_0: left promiscuous mode [ 1052.990261][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.178326][ T5096] Bluetooth: hci0: command tx timeout [ 1054.938148][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.976530][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.000013][ T6987] bond0 (unregistering): Released all slaves [ 1055.165092][T16265] chnl_net:caif_netlink_parms(): no params data found [ 1055.256950][ T5096] Bluetooth: hci0: command tx timeout [ 1056.064019][T16357] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3180'. [ 1056.188454][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.208330][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.222493][T16265] bridge_slave_0: entered allmulticast mode [ 1056.388312][T16265] bridge_slave_0: entered promiscuous mode [ 1057.094816][ T6987] hsr_slave_0: left promiscuous mode [ 1057.172879][ T6987] hsr_slave_1: left promiscuous mode [ 1057.222887][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.254198][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.321952][ T6987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.346953][ T5096] Bluetooth: hci0: command tx timeout [ 1057.362970][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.638279][ T6987] veth1_macvtap: left promiscuous mode [ 1057.643923][ T6987] veth0_macvtap: left promiscuous mode [ 1057.700976][ T6987] veth1_vlan: left promiscuous mode [ 1057.738366][ T6987] veth0_vlan: left promiscuous mode [ 1057.999466][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3188'. [ 1059.321150][ T6987] pimreg (unregistering): left allmulticast mode [ 1059.416937][ T5096] Bluetooth: hci0: command tx timeout [ 1060.222341][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.241551][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.712845][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 1060.776678][ T6987] team0 (unregistering): Port device team_slave_0 removed [ 1061.371961][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.379666][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.387353][T16265] bridge_slave_1: entered allmulticast mode [ 1061.395724][T16265] bridge_slave_1: entered promiscuous mode [ 1061.474244][T16414] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3195'. [ 1061.661323][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.705489][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.213088][ T9138] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1062.737947][T16265] team0: Port device team_slave_0 added [ 1062.786145][T16265] team0: Port device team_slave_1 added [ 1062.876871][ T9138] usb 4-1: Using ep0 maxpacket: 32 [ 1062.898832][ T9138] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30768, setting to 1024 [ 1062.913670][ T9138] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1062.933232][ T30] audit: type=1400 audit(1720222426.819:1045): avc: denied { create } for pid=16428 comm="syz.0.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1062.970117][ T9138] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1062.985801][ T9138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.993724][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1063.026415][ T9138] usb 4-1: Product: syz [ 1063.045144][ T30] audit: type=1400 audit(1720222426.889:1046): avc: denied { connect } for pid=16428 comm="syz.0.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1063.076971][ T9138] usb 4-1: Manufacturer: syz [ 1063.094783][ T9138] usb 4-1: SerialNumber: syz [ 1063.100860][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.115827][T16421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1063.146692][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.189842][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.238745][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1063.269956][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.279173][ T8] usb 3-1: language id specifier not provided by device, defaulting to English [ 1063.299677][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.359521][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1063.378330][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.392013][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.394637][ T8] usb 3-1: Product: syz [ 1063.414366][ T9138] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1063.448785][ T8] usb 3-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 1063.469671][ T6987] IPVS: stop unused estimator thread 0... [ 1063.549323][ T8] usb 3-1: SerialNumber: syz [ 1063.588659][ T8] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1063.602839][T16265] hsr_slave_0: entered promiscuous mode [ 1063.667625][T16265] hsr_slave_1: entered promiscuous mode [ 1063.684662][T16265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1063.705422][ T9138] usb 4-1: USB disconnect, device number 25 [ 1063.714545][T16265] Cannot create hsr debugfs directory [ 1063.722583][ T9138] usblp0: removed [ 1063.950878][ T8] IPVS: starting estimator thread 0... [ 1063.976154][T16437] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 1064.056526][T16442] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1064.076910][T16441] IPVS: using max 15 ests per chain, 36000 per kthread [ 1065.563240][ T6996] Bluetooth: hci4: Frame reassembly failed (-84) [ 1065.594593][T15774] usb 3-1: USB disconnect, device number 20 [ 1065.739694][T16457] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3207'. [ 1065.894407][T16455] kvm: kvm [16454]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0xc1) = 0x800 [ 1065.907611][T16455] kvm: kvm [16454]: vcpu0, guest rIP: 0x20e Unhandled WRMSR(0x11e) = 0x0 [ 1066.134031][T16265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1066.175417][T16265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1066.232645][T16265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1066.263773][T16265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1066.689537][ T5098] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1067.303283][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.421726][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.472571][T15774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.479875][T15774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.566522][T15774] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.573879][T15774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.577017][ T5098] Bluetooth: hci4: command 0x1003 tx timeout [ 1067.586901][ T5096] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1071.624942][T16265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.675488][T16531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3231'. [ 1071.797842][T16537] netlink: 'syz.3.3233': attribute type 30 has an invalid length. [ 1071.817499][T16537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1071.937707][T16265] veth0_vlan: entered promiscuous mode [ 1071.982193][T16265] veth1_vlan: entered promiscuous mode [ 1072.162170][T16265] veth0_macvtap: entered promiscuous mode [ 1072.200201][T16265] veth1_macvtap: entered promiscuous mode [ 1072.262868][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.297658][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.313859][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1072.326229][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.629993][T16265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.989921][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3240'. [ 1074.447013][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.491565][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.503444][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.514896][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.525193][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.536251][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.557191][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1074.580258][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1074.592626][T16265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.668544][T16265] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1074.881686][T16567] netlink: 'syz.2.3244': attribute type 30 has an invalid length. [ 1074.898505][T16567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3244'. [ 1074.978908][T16265] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1075.005218][ T30] audit: type=1800 audit(1720222438.889:1047): pid=16572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3245" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1075.100204][T16265] wireguard: wg0: Could not create IPv4 socket [ 1075.164097][T16265] wireguard: wg1: Could not create IPv4 socket [ 1075.213667][T16265] wireguard: wg2: Could not create IPv4 socket [ 1076.064136][T16596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1076.297167][T15774] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1076.511562][T15774] usb 3-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.544741][T15774] usb 3-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.579080][T15774] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1076.605403][T15774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.275620][T15774] kye 0003:0458:501A.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1077.331556][T15774] kye 0003:0458:501A.0008: unknown main item tag 0x0 [ 1077.360047][T15774] kye 0003:0458:501A.0008: unknown main item tag 0x0 [ 1077.389108][T15774] kye 0003:0458:501A.0008: item fetching failed at offset 2/11 [ 1077.424278][T15774] kye 0003:0458:501A.0008: parse failed [ 1077.445570][T15774] kye 0003:0458:501A.0008: probe with driver kye failed with error -22 [ 1077.926361][ T8] usb 3-1: USB disconnect, device number 21 [ 1078.397484][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1078.409777][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1078.418464][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1078.427139][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1078.435860][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1078.444430][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1078.460182][T16615] Bluetooth: MGMT ver 1.22 [ 1078.476331][ T30] audit: type=1400 audit(1720222442.359:1048): avc: denied { read } for pid=16613 comm="syz.3.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1078.644379][ T6996] bridge_slave_1: left allmulticast mode [ 1078.680080][ T6996] bridge_slave_1: left promiscuous mode [ 1078.725172][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.763555][ T6996] bridge_slave_0: left allmulticast mode [ 1078.788282][ T6996] bridge_slave_0: left promiscuous mode [ 1078.808265][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.292262][T16640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.731999][T16625] slcan: can't register candev [ 1079.763863][T16625] Falling back ldisc for pty24. [ 1080.158985][ T5091] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1080.436521][ T5091] usb 4-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.457319][ T5091] usb 4-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.708416][ T5098] Bluetooth: hci0: command tx timeout [ 1080.758708][ T5091] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1080.796607][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.924522][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.968068][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.016368][ T6996] bond0 (unregistering): Released all slaves [ 1081.201431][T16611] Failed to initialize the IGMP autojoin socket (err -2) [ 1081.383996][ T5091] kye 0003:0458:501A.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1081.407764][ T5091] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 1081.414641][ T5091] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 1081.422761][ T5091] kye 0003:0458:501A.0009: item fetching failed at offset 2/11 [ 1081.438226][ T5091] kye 0003:0458:501A.0009: parse failed [ 1081.443988][ T5091] kye 0003:0458:501A.0009: probe with driver kye failed with error -22 [ 1081.655045][ T6996] hsr_slave_0: left promiscuous mode [ 1081.707107][ T6996] hsr_slave_1: left promiscuous mode [ 1081.740867][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.766966][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.821733][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.851512][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.961757][ T6996] veth1_macvtap: left promiscuous mode [ 1081.977768][ T6996] veth0_macvtap: left promiscuous mode [ 1081.998950][ T6996] veth1_vlan: left promiscuous mode [ 1082.004382][ T6996] veth0_vlan: left promiscuous mode [ 1082.397918][T15774] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1082.774141][T15774] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1082.816421][T15774] usb 3-1: language id specifier not provided by device, defaulting to English [ 1082.852076][ T5098] Bluetooth: hci0: command tx timeout [ 1082.957635][T15774] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1083.056938][T15774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.065585][T15774] usb 3-1: Product: syz [ 1083.127542][T15774] usb 3-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 1083.186498][T16680] slcan: can't register candev [ 1083.199904][T15774] usb 3-1: SerialNumber: syz [ 1083.218282][T16680] Falling back ldisc for pty20. [ 1083.239157][T15774] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1083.384635][ T5091] usb 4-1: USB disconnect, device number 26 [ 1085.021265][ T5098] Bluetooth: hci0: command tx timeout [ 1086.519124][ T9138] usb 3-1: USB disconnect, device number 22 [ 1087.181575][ T5098] Bluetooth: hci0: command tx timeout [ 1088.647771][T16727] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 1089.428896][T16720] slcan: can't register candev [ 1089.434140][T16720] Falling back ldisc for pty26. [ 1090.339639][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 1091.156367][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 1091.328835][ T30] audit: type=1800 audit(1720222455.209:1049): pid=16748 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.3305" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1093.791658][T16611] chnl_net:caif_netlink_parms(): no params data found [ 1093.903667][T16764] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 1095.622579][T16611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.676697][T16611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.712731][T16611] bridge_slave_0: entered allmulticast mode [ 1095.732961][ T30] audit: type=1400 audit(1720222459.529:1050): avc: denied { bind } for pid=16776 comm="syz.4.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1095.768343][T16611] bridge_slave_0: entered promiscuous mode [ 1095.813451][T16611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.836979][T16611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.844276][T16611] bridge_slave_1: entered allmulticast mode [ 1095.854704][T16611] bridge_slave_1: entered promiscuous mode [ 1095.927020][ T30] audit: type=1400 audit(1720222459.809:1051): avc: denied { write } for pid=16777 comm="syz.3.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1096.048639][T16611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.090234][T16787] tipc: Started in network mode [ 1096.095424][T16787] tipc: Node identity de79c8a4ac29, cluster identity 4711 [ 1096.103483][T16787] tipc: Enabled bearer , priority 0 [ 1096.154158][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 1096.431687][T16789] tipc: Resetting bearer [ 1096.746667][ T30] audit: type=1400 audit(1720222460.559:1052): avc: denied { link } for pid=16792 comm="syz.0.3322" name="file1" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1096.959410][T16611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.007006][ T30] audit: type=1400 audit(1720222460.569:1053): avc: denied { setattr } for pid=16792 comm="syz.0.3322" name="#2b" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1097.047219][ T30] audit: type=1400 audit(1720222460.569:1054): avc: denied { rename } for pid=16792 comm="syz.0.3322" name="#2b" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1097.098470][T16798] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 1097.144487][T16786] tipc: Resetting bearer [ 1097.154751][ T8] tipc: Node number set to 1917896868 [ 1097.710207][T16812] netlink: 'syz.4.3325': attribute type 1 has an invalid length. [ 1101.866086][ T9138] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1102.086400][ T9138] usb 4-1: config 1 interface 0 altsetting 167 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1102.100338][ T9138] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1102.114955][ T9138] usb 4-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 1102.124629][ T9138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.133005][ T9138] usb 4-1: Product: syz [ 1102.137708][ T9138] usb 4-1: Manufacturer: syz [ 1102.142353][ T9138] usb 4-1: SerialNumber: syz [ 1102.471331][T16786] tipc: Disabling bearer [ 1102.600699][ T9138] usbhid 4-1:1.0: can't add hid device: -71 [ 1102.609704][T16611] team0: Port device team_slave_0 added [ 1102.612264][ T9138] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1102.645119][ T9138] usb 4-1: USB disconnect, device number 27 [ 1102.704690][T16611] team0: Port device team_slave_1 added [ 1102.874674][T16611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.913607][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.976479][T16611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.044003][T16611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.062822][T16611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.106394][T16611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.601412][ T30] audit: type=1400 audit(1720222468.449:1055): avc: denied { sys_chroot } for pid=16857 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1104.641979][ T30] audit: type=1400 audit(1720222468.459:1056): avc: denied { setgid } for pid=16857 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 1104.756894][ T30] audit: type=1400 audit(1720222468.459:1057): avc: denied { setrlimit } for pid=16857 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 1104.944302][T16611] hsr_slave_0: entered promiscuous mode [ 1104.963949][T16611] hsr_slave_1: entered promiscuous mode [ 1104.981736][T16611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1104.993211][T16611] Cannot create hsr debugfs directory [ 1105.414858][T16881] netlink: 'syz.4.3352': attribute type 4 has an invalid length. [ 1107.578214][T16899] netlink: 'syz.4.3358': attribute type 9 has an invalid length. [ 1107.587524][T16899] netlink: 'syz.4.3358': attribute type 7 has an invalid length. [ 1107.595456][T16899] netlink: 'syz.4.3358': attribute type 8 has an invalid length. [ 1107.612475][T16899] ax25_connect(): syz.4.3358 uses autobind, please contact jreuter@yaina.de [ 1108.743488][T15774] kernel write not supported for file /dsp (pid: 15774 comm: kworker/0:2) [ 1110.415508][T16611] netdevsim netdevsim1 netdevsim0: renamed from eth1 [ 1110.563543][T16611] netdevsim netdevsim1 netdevsim1: renamed from eth2 [ 1110.632528][T16611] netdevsim netdevsim1 netdevsim2: renamed from eth3 [ 1110.716665][T16611] netdevsim netdevsim1 netdevsim3: renamed from eth4 [ 1113.234624][T16959] netlink: 'syz.4.3379': attribute type 4 has an invalid length. [ 1113.685385][ T30] audit: type=1400 audit(1720222477.549:1058): avc: denied { connect } for pid=16968 comm="syz.2.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1115.215512][T16611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1115.358922][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.366224][ T9138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.195659][T17007] netlink: 'syz.4.3395': attribute type 4 has an invalid length. [ 1117.336408][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.343763][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.323963][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.331589][ T5096] Bluetooth: hci5: command 0x0406 tx timeout [ 1122.344592][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.006274][ T30] audit: type=1400 audit(1720222486.889:1059): avc: denied { accept } for pid=17027 comm="syz.2.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1124.548768][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3409'. [ 1124.647212][T17064] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 1125.784347][T17070] netlink: 'syz.0.3411': attribute type 4 has an invalid length. [ 1126.002160][T16611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.392010][ T30] audit: type=1400 audit(1720222491.279:1060): avc: denied { recv } for pid=16859 comm="dhcpcd" src=68 daddr=255.255.255.255 dest=67 netif=veth0_to_bond scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1127.694964][T16611] veth0_vlan: entered promiscuous mode [ 1127.829855][T16611] veth1_vlan: entered promiscuous mode [ 1128.392697][T17104] mac80211_hwsim hwsim27 CTY<: renamed from wlan1 [ 1129.623153][T16611] veth0_macvtap: entered promiscuous mode [ 1129.643729][ T30] audit: type=1400 audit(1720222493.519:1061): avc: denied { listen } for pid=17117 comm="syz.3.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1133.077379][T16611] veth1_macvtap: entered promiscuous mode [ 1133.536945][T16611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.614193][T16611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.660289][ T30] audit: type=1326 audit(1720222497.529:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17117 comm="syz.3.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7fc00000 [ 1133.684138][ C0] vkms_vblank_simulate: vblank timer overrun [ 1133.696855][T16611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.708537][T16611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.802826][T16611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.913117][T16611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.956892][T16611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.996091][T16611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.585537][T16611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.633300][T16611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.648463][ T30] audit: type=1400 audit(1720222498.539:1063): avc: denied { ioctl } for pid=17135 comm="syz.4.3427" path="socket:[64510]" dev="sockfs" ino=64510 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1134.702801][T16611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.758161][T16611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1134.804182][T16611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.971220][T16611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.108437][T16611] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1135.255945][T16611] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1135.322900][T16611] wireguard: wg0: Could not create IPv4 socket [ 1135.504311][T16611] wireguard: wg1: Could not create IPv4 socket [ 1135.524335][T16611] wireguard: wg2: Could not create IPv4 socket [ 1135.867733][T17164] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1135.876641][T17164] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1136.997690][T17159] mac80211_hwsim hwsim45 CTY<: renamed from wlan1 (while UP) [ 1139.101886][T17183] netlink: 'syz.2.3441': attribute type 9 has an invalid length. [ 1139.109874][T17183] netlink: 'syz.2.3441': attribute type 7 has an invalid length. [ 1139.119584][T17183] netlink: 'syz.2.3441': attribute type 8 has an invalid length. [ 1139.134916][T17183] ax25_connect(): syz.2.3441 uses autobind, please contact jreuter@yaina.de [ 1140.880818][ T30] audit: type=1326 audit(1720222504.769:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17174 comm="syz.3.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c3975bd9 code=0x7fc00000 [ 1141.496431][T13787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1141.808108][T13787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1141.872615][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1141.891553][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1141.963458][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1141.972269][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1142.833150][T17208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1142.843364][T17208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1143.784523][T17194] Failed to initialize the IGMP autojoin socket (err -2) [ 1144.057359][ T5098] Bluetooth: hci0: command tx timeout [ 1249.346705][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1249.353705][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5091/1:b..l [ 1249.362480][ C1] rcu: (detected by 1, t=10502 jiffies, g=110765, q=336 ncpus=2) [ 1249.370348][ C1] task:kworker/1:3 state:R running task stack:22864 pid:5091 tgid:5091 ppid:2 flags:0x00004000 [ 1249.383925][ C1] Workqueue: events_power_efficient gc_worker [ 1249.390080][ C1] Call Trace: [ 1249.393389][ C1] [ 1249.396353][ C1] __schedule+0xf15/0x5d00 [ 1249.400826][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1249.405677][ C1] ? __pfx___schedule+0x10/0x10 [ 1249.410578][ C1] ? mark_lock+0xb5/0xc60 [ 1249.414964][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1249.420485][ C1] ? __pfx_mark_lock+0x10/0x10 [ 1249.425308][ C1] ? mark_held_locks+0x9f/0xe0 [ 1249.430133][ C1] preempt_schedule_irq+0x51/0x90 [ 1249.435209][ C1] irqentry_exit+0x36/0x90 [ 1249.439764][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1249.445899][ C1] RIP: 0010:gc_worker+0x2e1/0x1770 [ 1249.451079][ C1] Code: 00 00 48 c7 c7 48 e0 e4 8f e8 bb 6b 62 f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 59 7e 84 f8 48 85 db 58 0f 85 3d 10 00 00 1a 83 84 f8 eb 07 e8 13 83 84 f8 f3 90 44 8b 35 ba 7e db 06 31 [ 1249.470734][ C1] RSP: 0018:ffffc9000327fbc8 EFLAGS: 00000293 [ 1249.476853][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89096d41 [ 1249.484873][ C1] RDX: ffff8880271dda00 RSI: ffffffff89096d50 RDI: 0000000000000007 [ 1249.492967][ C1] RBP: ffff88802a800000 R08: 0000000000000007 R09: 0000000000000000 [ 1249.500970][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: 000000000003ad4e [ 1249.508975][ C1] R13: dffffc0000000000 R14: 0000000000075a9b R15: 0000000000040000 [ 1249.516987][ C1] ? gc_worker+0xeb1/0x1770 [ 1249.521551][ C1] ? gc_worker+0xec0/0x1770 [ 1249.526117][ C1] ? gc_worker+0xec0/0x1770 [ 1249.530676][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1249.535754][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1249.540574][ C1] process_one_work+0x9c5/0x1b40 [ 1249.545561][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1249.550386][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1249.555800][ C1] ? assign_work+0x1a0/0x250 [ 1249.560459][ C1] worker_thread+0x6c8/0xf30 [ 1249.565100][ C1] ? __kthread_parkme+0x148/0x220 [ 1249.570193][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1249.575351][ C1] kthread+0x2c1/0x3a0 [ 1249.579465][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1249.584721][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.589386][ C1] ret_from_fork+0x45/0x80 [ 1249.593860][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.598498][ C1] ret_from_fork_asm+0x1a/0x30 [ 1249.603322][ C1] [ 1249.606373][ C1] rcu: rcu_preempt kthread starved for 10008 jiffies! g110765 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1249.617699][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1249.627710][ C1] rcu: RCU grace-period kthread stack dump: [ 1249.633620][ C1] task:rcu_preempt state:R running task stack:27584 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1249.645501][ C1] Call Trace: [ 1249.648805][ C1] [ 1249.651773][ C1] __schedule+0xf15/0x5d00 [ 1249.656241][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1249.661513][ C1] ? __pfx___schedule+0x10/0x10 [ 1249.666417][ C1] ? schedule+0x298/0x350 [ 1249.670790][ C1] ? __pfx_lock_release+0x10/0x10 [ 1249.675873][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1249.680855][ C1] ? lock_acquire+0x1b1/0x560 [ 1249.685579][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 1249.691102][ C1] schedule+0xe7/0x350 [ 1249.695213][ C1] schedule_timeout+0x136/0x2a0 [ 1249.700126][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1249.705564][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1249.710906][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1249.716763][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 1249.722286][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1249.727107][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1249.732457][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1249.737706][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1249.743565][ C1] rcu_gp_kthread+0x271/0x380 [ 1249.748308][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1249.753565][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1249.758806][ C1] ? __kthread_parkme+0x148/0x220 [ 1249.763873][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1249.769119][ C1] kthread+0x2c1/0x3a0 [ 1249.773234][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1249.778469][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.783137][ C1] ret_from_fork+0x45/0x80 [ 1249.787697][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.792339][ C1] ret_from_fork_asm+0x1a/0x30 [ 1249.797164][ C1] [ 1249.800212][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1249.806569][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1249.816326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1249.826423][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 1249.831795][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 68 54 1c 75 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 18 ae b3 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1249.851446][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 1249.857525][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8ae767b9 [ 1249.865521][ C1] RDX: 0000000000000001 RSI: ffff888019aed000 RDI: ffff888019aed064 [ 1249.873501][ C1] RBP: ffff888019aed064 R08: 0000000000000001 R09: ffffed1017266fdd [ 1249.881478][ C1] R10: ffff8880b9337eeb R11: 0000000000000000 R12: ffff88801affa000 [ 1249.889454][ C1] R13: ffffffff8e741e00 R14: 0000000000000001 R15: 0000000000000000 [ 1249.897684][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1249.906714][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1249.913324][ C1] CR2: 00007fa17491b914 CR3: 000000007a2ba000 CR4: 00000000003506f0 [ 1249.921328][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1249.929307][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1249.937282][ C1] Call Trace: [ 1249.940559][ C1] [ 1249.943401][ C1] ? show_regs+0x8c/0xa0 [ 1249.947678][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1249.954027][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 1249.958467][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.959227][ C1] ? rcu_sched_clock_irq+0x22a2/0x3100 [ 1249.965529][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.970921][ C1] ? __pfx_lock_release+0x10/0x10 [ 1249.970964][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1249.977764][ T5098] Bluetooth: hci0: command tx timeout [ 1249.982223][ C1] ? __asan_memcpy+0x3c/0x60 [ 1249.997929][ C1] ? update_process_times+0x175/0x220 [ 1250.003354][ C1] ? __pfx_update_process_times+0x10/0x10 [ 1250.009119][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1250.014623][ C1] ? update_wall_time+0x1c/0x40 [ 1250.020066][ C1] ? tick_nohz_handler+0x376/0x530 [ 1250.025235][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1250.030743][ C1] ? __hrtimer_run_queues+0x657/0xcc0 [ 1250.036162][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1250.041909][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 1250.048016][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 1250.053153][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x450 [ 1250.059341][ C1] ? sysvec_apic_timer_interrupt+0x90/0xb0 [ 1250.065165][ C1] [ 1250.068101][ C1] [ 1250.071040][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1250.077244][ C1] ? ct_kernel_exit+0x139/0x190 [ 1250.082119][ C1] ? acpi_safe_halt+0x1a/0x20 [ 1250.086832][ C1] acpi_idle_enter+0xc5/0x160 [ 1250.091539][ C1] cpuidle_enter_state+0x85/0x500 [ 1250.096590][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 1250.102432][ C1] cpuidle_enter+0x4e/0xa0 [ 1250.106876][ C1] do_idle+0x313/0x3f0 [ 1250.110958][ C1] ? __pfx_do_idle+0x10/0x10 [ 1250.115565][ C1] cpu_startup_entry+0x4f/0x60 [ 1250.120345][ C1] start_secondary+0x220/0x2b0 [ 1250.125131][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1250.130436][ C1] common_startup_64+0x13e/0x148 [ 1250.135392][ C1]