last executing test programs: 3m59.7760597s ago: executing program 4 (id=5233): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3m59.573814397s ago: executing program 4 (id=5235): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x6c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 3m59.258449417s ago: executing program 4 (id=5237): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x4, "da207c7e"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x8d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m57.039013988s ago: executing program 4 (id=5253): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) 3m55.710927283s ago: executing program 4 (id=5259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000009f00)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/78, 0x4e, 0x0) 3m55.437308329s ago: executing program 4 (id=5261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3m40.340473036s ago: executing program 32 (id=5261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3m31.979195531s ago: executing program 0 (id=5444): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000e80)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000ec0)=@can={{}, 0x80, 0x2, 0x4, 0x2}, 0x210}}, 0x4080811) 3m31.626715364s ago: executing program 0 (id=5448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m31.459030001s ago: executing program 0 (id=5450): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 3m31.122443846s ago: executing program 0 (id=5452): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 3m30.914126588s ago: executing program 0 (id=5454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m28.894145301s ago: executing program 0 (id=5461): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 3m28.210619642s ago: executing program 33 (id=5461): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 2m42.540023058s ago: executing program 6 (id=5850): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461"], 0x118}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m42.428416659s ago: executing program 6 (id=5851): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x3}, &(0x7f0000000380)=0x8) 2m41.45959122s ago: executing program 6 (id=5854): sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 2m41.254471002s ago: executing program 6 (id=5855): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a35b", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000640)="fb", 0x1}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) 2m41.124873709s ago: executing program 6 (id=5856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) shutdown(r0, 0x1) 2m40.964706256s ago: executing program 6 (id=5857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) close_range(r0, r1, 0x0) 2m25.834904869s ago: executing program 34 (id=5857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) close_range(r0, r1, 0x0) 43.377313518s ago: executing program 5 (id=5981): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 31.576348511s ago: executing program 5 (id=5981): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 30.916090186s ago: executing program 2 (id=6431): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}}) 25.648723123s ago: executing program 2 (id=6431): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}}) 25.20562321s ago: executing program 5 (id=5981): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 20.810567675s ago: executing program 2 (id=6431): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}}) 19.506247296s ago: executing program 5 (id=5981): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 14.665942411s ago: executing program 2 (id=6431): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}}) 12.772734357s ago: executing program 5 (id=5981): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 8.31358981s ago: executing program 2 (id=6431): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}}) 6.430021781s ago: executing program 5 (id=5981): r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) 3.82613728s ago: executing program 1 (id=6635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = epoll_create(0x2) epoll_pwait2(r1, &(0x7f00000029c0)=[{}], 0x1, &(0x7f0000002a00), &(0x7f0000002a40)={[0xd3d]}, 0x8) 3.612929709s ago: executing program 1 (id=6638): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) 3.555345101s ago: executing program 7 (id=6639): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) 3.469223696s ago: executing program 1 (id=6640): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x41) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) 3.369160154s ago: executing program 7 (id=6641): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.33093142s ago: executing program 1 (id=6642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x411c, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.500215801s ago: executing program 7 (id=6644): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) pwrite64(r2, &(0x7f00000000c0)='3', 0x1, 0x0) 2.385172373s ago: executing program 2 (id=6431): r0 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [], 0x6b}}) 1.37879487s ago: executing program 7 (id=6645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200009d96d1c800000000000000008500000020000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xbd, &(0x7f0000000200)=""/189, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.377051935s ago: executing program 1 (id=6646): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x2, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0xfffffffe, 0x1, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x351f, 0x0, 0xfffffffd, 0x1, 0x4, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000003140)={'syz1\x00', {0x818, 0x2, 0x96a, 0xffff}, 0xa, [0x1, 0xc, 0x0, 0x7, 0xd, 0x81, 0x4, 0x6, 0x1, 0x9, 0x1, 0x800, 0x5, 0x2bf, 0x1, 0x274e, 0x3, 0xfc6, 0x3, 0x2, 0x4, 0x8, 0xe98, 0xfffffffb, 0x0, 0x6, 0x8, 0x8000, 0x800, 0x0, 0x3, 0x7fff, 0x140000, 0x5, 0x80, 0x8, 0x8, 0xd, 0x4, 0x6, 0x7, 0x6, 0xcdc, 0x2, 0x5, 0x7, 0x0, 0xf4, 0x2, 0x8, 0xffffffff, 0x8, 0x0, 0x8, 0x80, 0x3, 0x5, 0x7, 0xc55, 0xd42, 0xe5d, 0x9, 0x7, 0x3], [0x584, 0x7, 0x1, 0x8, 0x8, 0x1, 0xcdd4, 0x9, 0x0, 0x7, 0x98a9, 0x3, 0x5, 0x2, 0x0, 0x4, 0x3, 0x9, 0x5, 0x1254, 0x7, 0xf, 0x3, 0x2e, 0x1, 0x1ff, 0x1ff, 0x1, 0x4, 0x9, 0x6, 0x1, 0x7, 0x9, 0x0, 0x4, 0xd0a, 0x5, 0x73, 0x8, 0x1, 0x100, 0xff, 0xf, 0x5, 0x9, 0xf0e, 0xbd, 0x9, 0x6, 0x4, 0xb5, 0x7, 0xffffff7a, 0x5, 0x7ff, 0x3, 0x1, 0x7fffffff, 0x6, 0x554, 0xc65, 0x8, 0x200], [0x3, 0xc, 0x3, 0x1, 0x8000, 0xffffffa6, 0x9, 0x96, 0x6a0c, 0x100, 0x80000001, 0x1, 0x257, 0x6, 0x1ff, 0xa, 0x2, 0x120, 0x7, 0xfffffffc, 0x4, 0xfffffffd, 0xf0, 0x0, 0x9, 0x6, 0xffffffff, 0x800005, 0x8, 0x0, 0x9, 0x4, 0x10, 0xa5, 0x10001, 0x1, 0x8, 0x6, 0x6800, 0x36, 0x101, 0x9, 0x80000001, 0x8, 0x800, 0x1, 0x5, 0xe5, 0x1, 0x401, 0xb, 0x400, 0x7f, 0x2, 0x8000, 0x4, 0x8, 0x8, 0x1, 0x1, 0xf, 0xd5, 0x68, 0xffffffff], [0x7, 0x68b, 0x9, 0x1ff, 0x8, 0x82, 0xa8, 0xc23a56b, 0x10000, 0x8db, 0x8, 0x2, 0x1ff, 0x10000, 0xd0cb, 0x90000000, 0x7ff, 0xfffffff8, 0x2, 0x1, 0x9d7, 0xffffffff, 0x5, 0x7a32, 0x3, 0x2b34, 0x4, 0x0, 0x300, 0x8004, 0x5, 0x5, 0x0, 0x80, 0x0, 0x401, 0xffffffff, 0x1000, 0x5, 0x7, 0x50, 0xff, 0x7, 0x3, 0xa, 0xa, 0x2, 0x1, 0x4, 0x3ff, 0x49e, 0x40, 0x4, 0xf8, 0x6, 0x6, 0xfff, 0x5, 0x8, 0xf8f, 0x0, 0x100, 0x14, 0x8]}, 0x45c) 1.247499634s ago: executing program 3 (id=6648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xdddd0000, 0xeeef0000, 0x1, 0x0, 0x251cc4ca}) 1.062187425s ago: executing program 1 (id=6649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 978.867032ms ago: executing program 7 (id=6650): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x100, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r0, 0x0, 0x0, 0x0, 0x80800, 0x1872cd8639e0b6ef}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 819.667086ms ago: executing program 3 (id=6651): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 558.864707ms ago: executing program 3 (id=6652): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0xa, &(0x7f0000000040)=[{0x2afd, 0x7, 0x3, 0x800}, {0x40, 0x2, 0x9, 0x9}, {0x401, 0x7, 0x3, 0xa75c}, {0x7fff, 0x7, 0x9}, {0x9, 0x1, 0x80, 0x6}, {0x7, 0x1, 0x8, 0x944e}, {0x1, 0x2, 0x3, 0x1}, {0x401, 0x47, 0xf8, 0x10}, {0x4, 0x0, 0x40, 0x3}, {0x9, 0x4, 0x6, 0xdd}]}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000)) 347.36065ms ago: executing program 3 (id=6653): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 335.174006ms ago: executing program 7 (id=6654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 187.697353ms ago: executing program 3 (id=6655): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f, 0x0, 0x83}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 0s ago: executing program 3 (id=6656): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x5, 0x0, 0x2, 0x0, 0x1000}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) kernel console output (not intermixed with test programs): to HW filter on device team0 [ 536.990547][T17942] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.997775][T17942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.035162][T17942] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.042372][T17942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.530424][T20098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.013248][T20098] veth0_vlan: entered promiscuous mode [ 538.040262][T20098] veth1_vlan: entered promiscuous mode [ 538.113914][T20098] veth0_macvtap: entered promiscuous mode [ 538.142190][T20098] veth1_macvtap: entered promiscuous mode [ 538.177500][T20098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.213227][T20098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.240225][T20098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.261318][T20098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.270049][T20098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.301594][T20098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.423137][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.423198][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.468411][T17942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.488121][T17942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.489885][T20391] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 539.748557][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6226'. [ 539.776030][T20397] IPVS: Error joining to the multicast group [ 540.192454][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6231'. [ 540.488094][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 540.488111][ T30] audit: type=1400 audit(1752146904.117:1388): avc: denied { read } for pid=20419 comm="syz.7.6236" path="socket:[70753]" dev="sockfs" ino=70753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 540.851024][ T5936] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 541.012682][ T5936] usb 2-1: Using ep0 maxpacket: 16 [ 541.019868][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.033549][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.045778][ T5936] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 541.057504][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.070132][ T5936] usb 2-1: config 0 descriptor?? [ 541.900052][ T5936] letsketch 0003:6161:4D15.0068: Device info: Â¥ [ 542.136759][ T5936] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 542.146660][ T5936] letsketch 0003:6161:4D15.0068: probe with driver letsketch failed with error -71 [ 542.160943][ T5936] usb 2-1: USB disconnect, device number 54 [ 543.191566][T20440] loop4: detected capacity change from 0 to 7 [ 543.212103][T20440] Dev loop4: unable to read RDB block 7 [ 543.230135][T20440] loop4: unable to read partition table [ 543.241598][T20440] loop4: partition table beyond EOD, truncated [ 543.259503][T20440] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 543.800782][ T5936] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 543.970754][ T5936] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 543.986115][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.999655][ T5936] usb 2-1: Product: syz [ 544.014912][ T5936] usb 2-1: Manufacturer: syz [ 544.019688][ T5936] usb 2-1: SerialNumber: syz [ 544.029341][ T5936] usb 2-1: config 0 descriptor?? [ 544.038354][ T5936] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 544.452681][ T5936] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 544.462506][ T5936] sq905c 2-1:0.0: Reading version command failed [ 544.468920][ T5936] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 544.480037][ T5936] usb 2-1: USB disconnect, device number 55 [ 545.064838][T20448] syzkaller1: entered promiscuous mode [ 545.070449][T20448] syzkaller1: entered allmulticast mode [ 546.216954][T17944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.510445][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.523965][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.534178][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.544671][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.552251][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.935868][T20450] chnl_net:caif_netlink_parms(): no params data found [ 547.058365][T20450] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.067926][T20450] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.079409][T20450] bridge_slave_0: entered allmulticast mode [ 547.087560][T20450] bridge_slave_0: entered promiscuous mode [ 547.098978][T20450] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.108114][T20450] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.118010][T20450] bridge_slave_1: entered allmulticast mode [ 547.125439][T20450] bridge_slave_1: entered promiscuous mode [ 547.187776][T20450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.203484][T20450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.268454][T20450] team0: Port device team_slave_0 added [ 547.279646][T20450] team0: Port device team_slave_1 added [ 547.516175][T20450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.555296][T20450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.581200][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.716536][T20450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.790979][ T5936] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 547.806959][T20450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.838553][T20450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.864507][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.956586][T20450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.981066][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 547.994761][ T5936] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 548.018952][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.062342][ T5936] usb 3-1: Product: syz [ 548.083989][ T5936] usb 3-1: Manufacturer: syz [ 548.108925][ T5936] usb 3-1: SerialNumber: syz [ 548.153807][ T5936] usb 3-1: config 0 descriptor?? [ 548.203485][ T5936] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 548.330150][T20450] hsr_slave_0: entered promiscuous mode [ 548.359141][T20450] hsr_slave_1: entered promiscuous mode [ 548.419751][T20450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.480113][T20450] Cannot create hsr debugfs directory [ 548.620823][ T5834] Bluetooth: hci1: command tx timeout [ 548.763392][ T5936] gspca_sonixj: reg_w1 err -110 [ 548.768339][ T5936] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 548.851188][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6262'. [ 548.994215][T17944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.654793][ T24] usb 3-1: USB disconnect, device number 65 [ 550.523431][T17944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.622634][ T30] audit: type=1400 audit(1752146914.257:1389): avc: denied { bind } for pid=20506 comm="syz.2.6267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 550.705280][ T5834] Bluetooth: hci1: command tx timeout [ 551.556101][ T30] audit: type=1326 audit(1752146915.187:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.579578][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.596128][ T30] audit: type=1326 audit(1752146915.207:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.622485][ T30] audit: type=1326 audit(1752146915.207:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.645967][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.655440][ T30] audit: type=1326 audit(1752146915.207:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.678889][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.721496][ T30] audit: type=1326 audit(1752146915.207:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.744980][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.765185][ T30] audit: type=1326 audit(1752146915.207:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.793318][ T30] audit: type=1326 audit(1752146915.207:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.826722][ T30] audit: type=1326 audit(1752146915.207:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.853143][ T30] audit: type=1326 audit(1752146915.207:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20513 comm="syz.3.6270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0758e929 code=0x7fc00000 [ 551.876592][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.780779][ T5834] Bluetooth: hci1: command tx timeout [ 553.158140][T17944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.816426][T20561] input: syz0 as /devices/virtual/input/input73 [ 554.387239][T20583] input: syz0 as /devices/virtual/input/input74 [ 554.400841][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 554.594578][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 554.610285][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.676194][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.706376][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 554.736191][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 554.775820][ T24] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 554.794503][ T24] usb 2-1: Manufacturer: syz [ 554.814132][ T24] usb 2-1: config 0 descriptor?? [ 554.862711][ T5834] Bluetooth: hci1: command tx timeout [ 555.242275][ T24] appleir 0003:05AC:8243.0069: unknown main item tag 0x0 [ 555.263291][ T24] appleir 0003:05AC:8243.0069: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 555.653482][ T5832] usb 2-1: USB disconnect, device number 56 [ 556.037123][T17944] bridge_slave_1: left allmulticast mode [ 556.069758][T17944] bridge_slave_1: left promiscuous mode [ 556.086931][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.135636][T17944] bridge_slave_0: left allmulticast mode [ 556.160557][T17944] bridge_slave_0: left promiscuous mode [ 556.209867][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.380762][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 557.380798][ T30] audit: type=1400 audit(1752146921.007:1461): avc: denied { read write } for pid=19458 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.539037][ T30] audit: type=1400 audit(1752146921.007:1462): avc: denied { open } for pid=19458 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.640934][ T30] audit: type=1400 audit(1752146921.007:1463): avc: denied { ioctl } for pid=19458 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.743080][ T30] audit: type=1400 audit(1752146921.147:1464): avc: denied { allowed } for pid=20629 comm="syz.7.6320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 557.812945][ T30] audit: type=1400 audit(1752146921.147:1465): avc: denied { create } for pid=20629 comm="syz.7.6320" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 557.907551][ T30] audit: type=1400 audit(1752146921.147:1466): avc: denied { map } for pid=20629 comm="syz.7.6320" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 558.012999][ T30] audit: type=1400 audit(1752146921.147:1467): avc: denied { read write } for pid=20629 comm="syz.7.6320" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 558.108083][ T30] audit: type=1400 audit(1752146921.727:1468): avc: denied { name_bind } for pid=20633 comm="syz.2.6321" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 558.255873][ T30] audit: type=1400 audit(1752146921.887:1469): avc: denied { read write } for pid=20636 comm="syz.1.6322" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.318462][ T30] audit: type=1400 audit(1752146921.927:1470): avc: denied { open } for pid=20636 comm="syz.1.6322" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 558.530887][ T5832] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 558.690665][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 558.698242][ T5832] usb 2-1: config 1 interface 0 has no altsetting 0 [ 558.711605][ T5832] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 558.724640][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.734012][ T5832] usb 2-1: Product: syz [ 558.738287][ T5832] usb 2-1: Manufacturer: syz [ 558.745638][ T5832] usb 2-1: SerialNumber: syz [ 559.194516][ T5832] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input75 [ 559.255767][T17944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.282298][T17944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.305265][T17944] bond0 (unregistering): Released all slaves [ 559.976037][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6328'. [ 561.294160][ T5843] usb 2-1: USB disconnect, device number 57 [ 562.404027][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 562.404045][ T30] audit: type=1400 audit(1752146926.027:1502): avc: denied { create } for pid=20676 comm="syz.7.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 562.411015][T20675] netlink: 'syz.2.6338': attribute type 4 has an invalid length. [ 562.530390][ T30] audit: type=1400 audit(1752146926.027:1503): avc: denied { bind } for pid=20676 comm="syz.7.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 562.550050][ T30] audit: type=1400 audit(1752146926.087:1504): avc: denied { listen } for pid=20676 comm="syz.7.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 562.709817][ T30] audit: type=1400 audit(1752146926.277:1505): avc: denied { create } for pid=20680 comm="syz.1.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.816600][ T30] audit: type=1400 audit(1752146926.327:1506): avc: denied { write } for pid=20680 comm="syz.1.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 562.837352][ T30] audit: type=1400 audit(1752146926.417:1507): avc: denied { sqpoll } for pid=20682 comm="syz.7.6342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 562.926702][ T30] audit: type=1400 audit(1752146926.557:1508): avc: denied { module_request } for pid=20687 comm="syz.1.6344" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 563.024309][ T30] audit: type=1400 audit(1752146926.587:1509): avc: denied { sys_module } for pid=20687 comm="syz.1.6344" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 563.328370][T20704] dummy0: entered promiscuous mode [ 563.340977][T20704] macsec1: entered promiscuous mode [ 563.346647][T20704] macsec1: entered allmulticast mode [ 563.369284][T20704] dummy0: entered allmulticast mode [ 563.387984][T20704] dummy0: left allmulticast mode [ 563.399478][T20704] dummy0: left promiscuous mode [ 563.417120][T20710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6352'. [ 563.430489][T20710] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6352'. [ 563.440777][T20710] netlink: 'syz.1.6352': attribute type 6 has an invalid length. [ 563.454107][T20710] netlink: 'syz.1.6352': attribute type 5 has an invalid length. [ 563.472154][T20710] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6352'. [ 563.484631][T17944] hsr_slave_0: left promiscuous mode [ 563.499926][T17944] hsr_slave_1: left promiscuous mode [ 563.517129][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.532967][T17944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.555322][T20715] sock: sock_set_timeout: `syz.1.6353' (pid 20715) tries to set negative timeout [ 563.573068][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.580517][T17944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.610751][ T5843] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 563.637248][ T30] audit: type=1400 audit(1752146927.257:1510): avc: denied { map_create } for pid=20716 comm="syz.2.6354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 563.677472][T17944] veth1_macvtap: left promiscuous mode [ 563.683072][T17944] veth0_macvtap: left promiscuous mode [ 563.688589][T17944] veth1_vlan: left promiscuous mode [ 563.696622][ T30] audit: type=1400 audit(1752146927.257:1511): avc: denied { perfmon } for pid=20716 comm="syz.2.6354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 563.718025][T17944] veth0_vlan: left promiscuous mode [ 563.829090][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 563.842965][ T5843] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 563.861523][ T5843] usb 4-1: config 0 has no interface number 0 [ 563.867668][ T5843] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 563.897118][ T5843] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 563.925385][ T5843] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 563.936709][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.956907][ T5843] usb 4-1: Product: syz [ 563.957826][T20726] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 563.962477][T20455] IPVS: starting estimator thread 0... [ 563.975376][ T5843] usb 4-1: Manufacturer: syz [ 563.979989][ T5843] usb 4-1: SerialNumber: syz [ 563.986847][ T5843] usb 4-1: config 0 descriptor?? [ 563.992453][T20706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 563.999693][T20706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.093611][T20728] IPVS: using max 45 ests per chain, 108000 per kthread [ 564.248941][T20706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.260416][T20706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.487314][T20740] netlink: 'syz.2.6363': attribute type 4 has an invalid length. [ 564.508649][T17944] team0 (unregistering): Port device team_slave_1 removed [ 564.579225][T17944] team0 (unregistering): Port device team_slave_0 removed [ 564.928856][ T5843] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x3b [ 564.970450][T20743] batman_adv: batadv0: Adding interface: macvlan2 [ 564.977044][T20743] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 565.006009][T20743] batman_adv: batadv0: Interface activated: macvlan2 [ 565.032785][T20450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.053279][T20450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.078020][T20450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 565.091450][T20450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 565.167129][ T5843] usb 4-1: USB disconnect, device number 65 [ 565.274715][T20450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.303240][T20450] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.327816][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.336378][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.357760][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.364941][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.467743][T20765] futex_wake_op: syz.1.6372 tries to shift op by -1; fix this program [ 565.567192][T20450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.581926][T20455] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 565.765176][T20455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.782615][T20455] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.813491][T20455] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 565.830654][T20455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.845807][T20455] usb 3-1: config 0 descriptor?? [ 565.880213][T20450] veth0_vlan: entered promiscuous mode [ 565.898900][T20450] veth1_vlan: entered promiscuous mode [ 565.939690][T20450] veth0_macvtap: entered promiscuous mode [ 565.949828][T20450] veth1_macvtap: entered promiscuous mode [ 565.964254][T20450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.986624][T20450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.002702][T20450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.012159][T20450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.025288][T20450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.035999][T20450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.112991][T17969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.121164][T17969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.146537][T17969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.154810][T17969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.267455][T20455] sony 0003:054C:0268.006A: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 566.281645][T20455] sony 0003:054C:0268.006A: failed to claim input [ 566.496130][ T24] usb 3-1: USB disconnect, device number 66 [ 566.691385][T20806] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6386'. [ 566.949385][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6391'. [ 566.965434][T20816] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 567.152528][T20824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6395'. [ 567.633734][T17944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.062029][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 568.246790][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 568.246804][ T30] audit: type=1400 audit(1752146931.877:1580): avc: denied { read write } for pid=20836 comm="syz.3.6401" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 568.277803][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.294591][ T30] audit: type=1400 audit(1752146931.917:1581): avc: denied { open } for pid=20836 comm="syz.3.6401" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 568.319872][T20837] input: syz0 as /devices/virtual/input/input76 [ 568.329968][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6400'. [ 568.378228][ T30] audit: type=1400 audit(1752146931.927:1582): avc: denied { ioctl } for pid=20836 comm="syz.3.6401" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 568.453334][ T30] audit: type=1400 audit(1752146932.087:1583): avc: denied { name_bind } for pid=20844 comm="syz.1.6402" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 568.475079][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.498717][ T30] audit: type=1400 audit(1752146932.087:1584): avc: denied { node_bind } for pid=20844 comm="syz.1.6402" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 568.547903][ T30] audit: type=1400 audit(1752146932.157:1585): avc: denied { watch watch_reads } for pid=20848 comm="syz.1.6405" path="/1356" dev="tmpfs" ino=6882 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 568.654983][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.665656][ T30] audit: type=1400 audit(1752146932.277:1586): avc: denied { getopt } for pid=20852 comm="syz.3.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 568.686715][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.695567][ T30] audit: type=1400 audit(1752146932.277:1587): avc: denied { ioctl } for pid=20854 comm="syz-executor" path="socket:[73519]" dev="sockfs" ino=73519 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.721905][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.729922][ T30] audit: type=1400 audit(1752146932.327:1588): avc: denied { append } for pid=20856 comm="syz.2.6408" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 568.768934][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.778074][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.786167][ T30] audit: type=1400 audit(1752146932.427:1589): avc: denied { create } for pid=20858 comm="syz.3.6409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 568.973248][T17944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.139585][T17944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.263047][T17944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.367159][T20868] PID 20868 killed due to inadequate hugepage pool [ 569.599846][T17944] bridge_slave_1: left allmulticast mode [ 569.613757][T17944] bridge_slave_1: left promiscuous mode [ 569.619525][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.718379][T17944] bridge_slave_0: left allmulticast mode [ 569.740827][T17944] bridge_slave_0: left promiscuous mode [ 569.756207][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.207223][T17944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.220795][ T5832] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 570.224720][T17944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.226282][T17944] bond0 (unregistering): Released all slaves [ 570.268192][T20854] chnl_net:caif_netlink_parms(): no params data found [ 570.380460][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.404863][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.418329][ T5832] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 570.427600][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.438187][ T5832] usb 2-1: config 0 descriptor?? [ 570.569267][T20854] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.582388][T20911] netlink: 47 bytes leftover after parsing attributes in process `syz.3.6432'. [ 570.591961][T20854] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.599149][T20854] bridge_slave_0: entered allmulticast mode [ 570.609387][T20854] bridge_slave_0: entered promiscuous mode [ 570.644561][T20854] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.674014][T20854] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.690858][T20854] bridge_slave_1: entered allmulticast mode [ 570.714495][T20854] bridge_slave_1: entered promiscuous mode [ 570.861819][ T5834] Bluetooth: hci1: command tx timeout [ 570.868442][ T5832] aquacomputer_d5next 0003:0C70:F0BD.006B: unknown main item tag 0x0 [ 570.883126][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 570.891377][ T5832] aquacomputer_d5next 0003:0C70:F0BD.006B: unknown main item tag 0x0 [ 570.897593][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 570.899470][ T5832] aquacomputer_d5next 0003:0C70:F0BD.006B: unknown main item tag 0x0 [ 570.917976][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 570.923675][T20854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.927213][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 570.940677][ T5832] aquacomputer_d5next 0003:0C70:F0BD.006B: unknown main item tag 0x0 [ 570.943888][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 570.957219][ T5832] aquacomputer_d5next 0003:0C70:F0BD.006B: unknown main item tag 0x0 [ 570.980673][T17944] hsr_slave_0: left promiscuous mode [ 570.987261][T17944] hsr_slave_1: left promiscuous mode [ 570.993094][ T5832] aquacomputer_d5next 0003:0C70:F0BD.006B: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.1-1/input0 [ 571.006404][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.013921][T17944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.023523][T17944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.031029][T17944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.052242][T17944] veth1_macvtap: left promiscuous mode [ 571.057860][T17944] veth0_macvtap: left promiscuous mode [ 571.064902][T17944] veth1_vlan: left promiscuous mode [ 571.084612][T17944] veth0_vlan: left promiscuous mode [ 571.090239][ T5832] usb 2-1: USB disconnect, device number 58 [ 571.520728][ T5832] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 571.609542][T17944] team0 (unregistering): Port device team_slave_1 removed [ 571.647971][T17944] team0 (unregistering): Port device team_slave_0 removed [ 571.673384][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.686743][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.697689][ T5832] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 571.709896][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 571.718144][ T5832] usb 4-1: SerialNumber: syz [ 571.942847][ T5832] usb 4-1: 0:2 : does not exist [ 571.968961][ T5832] usb 4-1: USB disconnect, device number 66 [ 572.112153][T20854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.186604][T20854] team0: Port device team_slave_0 added [ 572.203749][T20854] team0: Port device team_slave_1 added [ 572.272892][T20854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.295223][T20854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.360834][T20854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.382312][T20854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.389279][T20854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.430361][T20854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.572711][T20854] hsr_slave_0: entered promiscuous mode [ 572.579107][T20854] hsr_slave_1: entered promiscuous mode [ 572.587597][T20854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.591333][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 572.596012][T20854] Cannot create hsr debugfs directory [ 572.613515][T20935] input: syz1 as /devices/virtual/input/input77 [ 572.785574][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 572.803160][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 572.823600][ T24] usb 2-1: config 5 has an invalid interface number: 114 but max is 0 [ 572.824256][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6445'. [ 572.835105][ T24] usb 2-1: config 5 has no interface number 0 [ 572.868049][ T24] usb 2-1: config 5 interface 114 has no altsetting 0 [ 572.906321][ T24] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice=28.00 [ 572.921801][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.929854][ T24] usb 2-1: Product: syz [ 572.939261][ T24] usb 2-1: Manufacturer: syz [ 572.944336][ T5829] Bluetooth: hci1: command tx timeout [ 572.950901][ T24] usb 2-1: SerialNumber: syz [ 573.020943][ T5829] Bluetooth: hci0: command tx timeout [ 573.155352][T20914] chnl_net:caif_netlink_parms(): no params data found [ 573.177868][ T24] ftdi_sio 2-1:5.114: FTDI USB Serial Device converter detected [ 573.195704][ T24] usb 2-1: Detected FT2233HP [ 573.200870][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 573.209089][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 573.220012][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 573.235869][ T24] usb 2-1: USB disconnect, device number 59 [ 573.251894][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 573.267361][ T24] ftdi_sio 2-1:5.114: device disconnected [ 573.390029][T20914] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.398333][T20914] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.406106][T20914] bridge_slave_0: entered allmulticast mode [ 573.413868][T20914] bridge_slave_0: entered promiscuous mode [ 573.435390][T20914] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.442730][T20914] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.450046][T20914] bridge_slave_1: entered allmulticast mode [ 573.458002][T20914] bridge_slave_1: entered promiscuous mode [ 573.473964][T17944] bridge_slave_1: left allmulticast mode [ 573.481922][T17944] bridge_slave_1: left promiscuous mode [ 573.487660][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.498515][T17944] bridge_slave_0: left allmulticast mode [ 573.504305][T17944] bridge_slave_0: left promiscuous mode [ 573.510038][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.678129][T17944] gretap0 (unregistering): left promiscuous mode [ 573.730544][T17944] bridge0 (unregistering): left promiscuous mode [ 573.863257][ T5832] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 573.892576][T17944] bond0 (unregistering): left allmulticast mode [ 573.898856][T17944] bond_slave_0: left allmulticast mode [ 573.904382][T17944] bond_slave_1: left allmulticast mode [ 573.909828][T17944] team0: left allmulticast mode [ 573.915161][T17944] team_slave_0: left allmulticast mode [ 573.921161][T17944] team_slave_1: left allmulticast mode [ 573.927358][T17944] bond0 (unregistering): left promiscuous mode [ 573.933818][T17944] bond_slave_0: left promiscuous mode [ 573.939272][T17944] bond_slave_1: left promiscuous mode [ 573.945021][T17944] team0: left promiscuous mode [ 573.949776][T17944] team_slave_0: left promiscuous mode [ 573.955521][T17944] team_slave_1: left promiscuous mode [ 573.973851][T17944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.985184][T17944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.994872][T17944] bond0 (unregistering): (slave team0): Releasing backup interface [ 574.004442][T17944] bond0 (unregistering): Released all slaves [ 574.023650][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 574.034044][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.051897][T20914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.054224][ T5832] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 574.081400][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.084141][T20914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.100401][ T5832] usb 4-1: config 0 descriptor?? [ 574.112396][ T5832] hub 4-1:0.0: USB hub found [ 574.117571][T17944] : left promiscuous mode [ 574.168192][T20914] team0: Port device team_slave_0 added [ 574.184823][T20914] team0: Port device team_slave_1 added [ 574.217908][T17944] tipc: Disabling bearer [ 574.224277][T17944] tipc: Left network mode [ 574.254884][T20914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.262132][T20914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.290079][T20914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.301952][T20854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 574.324253][ T5832] hub 4-1:0.0: 1 port detected [ 574.333402][T20914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.340432][T20914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.366318][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.375150][T20914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.387459][T20854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.407244][T20854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.419361][T20854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.476879][T20914] hsr_slave_0: entered promiscuous mode [ 574.483576][T20914] hsr_slave_1: entered promiscuous mode [ 574.489587][T20914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.497258][T20914] Cannot create hsr debugfs directory [ 574.731454][T17944] batadv_slave_1: left promiscuous mode [ 574.745187][T17944] hsr_slave_0: left promiscuous mode [ 574.750546][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 574.750559][ T30] audit: type=1400 audit(1752146938.377:1605): avc: denied { setopt } for pid=20969 comm="syz.1.6452" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 574.776930][ C1] vkms_vblank_simulate: vblank timer overrun [ 574.784853][T17944] hsr_slave_1: left promiscuous mode [ 575.020765][ T5829] Bluetooth: hci1: command tx timeout [ 575.078278][T17944] team0 (unregistering): Port device team_slave_1 removed [ 575.103903][ T5829] Bluetooth: hci0: command tx timeout [ 575.114487][T17944] team0 (unregistering): Port device team_slave_0 removed [ 575.123331][ T67] smc: removing ib device syz2 [ 575.173375][ T2157] usb 4-1: USB disconnect, device number 67 [ 575.175749][ T5832] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 575.988260][T20854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.043809][T20854] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.150442][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.157623][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.209607][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.216775][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.415880][ T30] audit: type=1400 audit(1752146940.037:1606): avc: denied { block_suspend } for pid=20990 comm="syz.1.6459" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 577.037030][T20994] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 577.104599][ T5829] Bluetooth: hci1: command tx timeout [ 577.180994][ T5829] Bluetooth: hci0: command tx timeout [ 577.187439][T20854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.285984][T20914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.307191][ T30] audit: type=1400 audit(1752146940.937:1607): avc: denied { read write } for pid=21005 comm="syz.1.6465" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 577.330400][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.339906][T20914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.380794][ T30] audit: type=1400 audit(1752146940.937:1608): avc: denied { open } for pid=21005 comm="syz.1.6465" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 577.407900][T20914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.426933][T20914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.559910][T20914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.609224][T20914] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.638730][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.645919][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.665541][T17969] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.672698][T17969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.689340][T20854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.762236][T20914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.871286][T20455] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 577.968350][T20914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.999485][T20854] veth0_vlan: entered promiscuous mode [ 578.016975][T20854] veth1_vlan: entered promiscuous mode [ 578.031029][ T5843] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 578.041592][T20455] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 578.051759][T20455] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 578.068686][T20914] veth0_vlan: entered promiscuous mode [ 578.076297][T20455] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 578.089649][T20455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 578.102524][T20455] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 578.115038][T20914] veth1_vlan: entered promiscuous mode [ 578.124050][T20854] veth0_macvtap: entered promiscuous mode [ 578.131681][T20455] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 578.137181][T20854] veth1_macvtap: entered promiscuous mode [ 578.166919][T20455] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 578.175173][T20854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.181637][T20854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.184018][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 578.194964][T20455] usb 2-1: Product: syz [ 578.199210][T20455] usb 2-1: Manufacturer: syz [ 578.207742][ T5843] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 578.215987][ T5843] usb 4-1: config 0 has no interface number 0 [ 578.223896][T20854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.236499][T20455] cdc_wdm 2-1:1.0: skipping garbage [ 578.242395][T20455] cdc_wdm 2-1:1.0: skipping garbage [ 578.250474][T20854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.250619][ T5843] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 578.268880][T20455] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 578.272546][T20854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.280639][T20455] cdc_wdm 2-1:1.0: Unknown control protocol [ 578.292936][T20854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.299618][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.313545][ T5843] usb 4-1: Product: syz [ 578.314690][T20914] veth0_macvtap: entered promiscuous mode [ 578.317728][ T5843] usb 4-1: Manufacturer: syz [ 578.333972][ T5843] usb 4-1: SerialNumber: syz [ 578.344345][ T5843] usb 4-1: config 0 descriptor?? [ 578.347233][T20914] veth1_macvtap: entered promiscuous mode [ 578.352526][ T5843] smsc95xx v2.0.0 [ 578.365782][T21038] Bluetooth: hci5: Frame reassembly failed (-84) [ 578.375713][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 578.432628][T20914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.445342][T20914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.467214][T20914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.476402][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.485519][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.495124][T20914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.504722][T20914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.513594][T20914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.593393][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.608604][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.621435][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.628936][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.678492][T17969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.689646][T17969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.367304][ T5843] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 579.391936][ T5843] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 579.412740][ T5843] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 579.440937][ T5843] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 579.475529][ T5843] usb 4-1: USB disconnect, device number 68 [ 580.150090][T21044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21044 comm=syz.3.6472 [ 580.261303][T21046] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 580.272817][T21046] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 580.282228][T21046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 580.290023][T21046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 580.301558][T21046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 580.311943][T21046] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.324288][T21046] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.334050][T21046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.352142][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.365965][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 580.380853][ T5829] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 580.388497][ T5830] Bluetooth: hci5: command 0xfc11 tx timeout [ 580.580088][T21045] chnl_net:caif_netlink_parms(): no params data found [ 580.647418][T21048] chnl_net:caif_netlink_parms(): no params data found [ 580.657007][ T10] usb 2-1: USB disconnect, device number 60 [ 580.723364][ T30] audit: type=1400 audit(1752146944.357:1609): avc: denied { name_connect } for pid=21065 comm="syz.1.6474" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 580.745185][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.758014][ T30] audit: type=1400 audit(1752146944.387:1610): avc: denied { listen } for pid=21065 comm="syz.1.6474" lport=47201 faddr=::ffff:10.1.1.2 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.783152][ T30] audit: type=1400 audit(1752146944.387:1611): avc: denied { accept } for pid=21065 comm="syz.1.6474" lport=47201 faddr=::ffff:10.1.1.2 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 580.827384][ T30] audit: type=1400 audit(1752146944.387:1612): avc: denied { setopt } for pid=21065 comm="syz.1.6474" lport=47201 faddr=::ffff:10.1.1.2 fport=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 580.832816][T21045] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.859039][T21045] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.867257][T21045] bridge_slave_0: entered allmulticast mode [ 580.875108][T21045] bridge_slave_0: entered promiscuous mode [ 580.889370][T21045] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.898630][T21045] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.905849][T21045] bridge_slave_1: entered allmulticast mode [ 580.913532][T21045] bridge_slave_1: entered promiscuous mode [ 580.967876][T21048] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.988051][T21048] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.996546][T21048] bridge_slave_0: entered allmulticast mode [ 581.007702][T21048] bridge_slave_0: entered promiscuous mode [ 581.016561][T21048] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.028803][ T30] audit: type=1400 audit(1752146944.657:1613): avc: denied { create } for pid=21072 comm="syz.3.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.038391][T21048] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.061138][T21048] bridge_slave_1: entered allmulticast mode [ 581.068734][T21048] bridge_slave_1: entered promiscuous mode [ 581.082146][ T30] audit: type=1400 audit(1752146944.687:1614): avc: denied { read } for pid=21072 comm="syz.3.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.084196][T21045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.103273][ T30] audit: type=1400 audit(1752146944.687:1615): avc: denied { write } for pid=21072 comm="syz.3.6477" path="socket:[76090]" dev="sockfs" ino=76090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.138002][T21045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.205924][T21048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.215270][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 581.223756][T21078] sctp: [Deprecated]: syz.3.6479 (pid 21078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 581.223756][T21078] Use struct sctp_sack_info instead [ 581.229276][T21048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.259264][T21045] team0: Port device team_slave_0 added [ 581.286868][T21045] team0: Port device team_slave_1 added [ 581.336717][T21048] team0: Port device team_slave_0 added [ 581.344440][T21045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.352221][T21045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.378384][T21045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.392577][T21048] team0: Port device team_slave_1 added [ 581.401535][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 581.409763][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 581.430905][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.438928][ T10] usb 2-1: Product: syz [ 581.451351][T21045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.458316][T21045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.485078][ T10] usb 2-1: Manufacturer: syz [ 581.489686][ T10] usb 2-1: SerialNumber: syz [ 581.496068][T21045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.512000][ T10] usb 2-1: config 0 descriptor?? [ 581.518480][ T10] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 581.526789][T21048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.534481][T21048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.560872][T21048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.580270][T21048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.589278][T21048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.615469][T21048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.674098][T21045] hsr_slave_0: entered promiscuous mode [ 581.684233][T21045] hsr_slave_1: entered promiscuous mode [ 581.722366][ T10] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 581.737147][ T10] visor 2-1:0.0: probe with driver visor failed with error -71 [ 581.749597][ T10] usb 2-1: USB disconnect, device number 61 [ 581.761003][T21048] hsr_slave_0: entered promiscuous mode [ 581.767040][T21048] hsr_slave_1: entered promiscuous mode [ 581.775635][T21048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.783820][T21048] Cannot create hsr debugfs directory [ 581.922532][ T2157] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 581.941925][T21045] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.011973][T21045] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.080715][ T2157] usb 4-1: Using ep0 maxpacket: 32 [ 582.088382][ T2157] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 582.088913][T21045] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.096855][ T2157] usb 4-1: config 0 has no interface number 0 [ 582.115670][ T2157] usb 4-1: config 0 interface 184 has no altsetting 0 [ 582.124558][ T2157] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 582.133651][ T2157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.141935][ T2157] usb 4-1: Product: syz [ 582.146157][ T2157] usb 4-1: Manufacturer: syz [ 582.150843][ T2157] usb 4-1: SerialNumber: syz [ 582.156805][ T2157] usb 4-1: config 0 descriptor?? [ 582.163042][ T2157] smsc75xx v1.0.0 [ 582.166741][ T2157] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 582.177164][ T2157] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 582.195844][T21045] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.287142][T21048] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.381676][ T5834] Bluetooth: hci0: command tx timeout [ 582.407152][ T5843] usb 4-1: USB disconnect, device number 69 [ 582.423525][T21048] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.463452][ T5834] Bluetooth: hci1: command tx timeout [ 582.491592][T21048] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.567732][T21048] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.688017][T21045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 582.699323][T21045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 582.714758][T21045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 582.736307][T21045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 582.778370][T21048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 582.789456][T21048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 582.803063][T21048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 582.817555][T21048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 582.896914][T21045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.927382][T21045] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.939712][T21048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.962986][T17969] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.970128][T17969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.994337][T21048] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.007032][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.014191][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.045150][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.052281][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.062678][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.069761][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.302307][T21045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.361755][T21048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.392295][T21115] dummy0: left allmulticast mode [ 583.432491][T21048] veth0_vlan: entered promiscuous mode [ 583.451378][T21048] veth1_vlan: entered promiscuous mode [ 583.498927][T21048] veth0_macvtap: entered promiscuous mode [ 583.528322][T21048] veth1_macvtap: entered promiscuous mode [ 583.565078][T21048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.609635][T21048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.629092][T21048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.650642][T21048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.662712][ T30] audit: type=1400 audit(1752146947.287:1616): avc: denied { create } for pid=21124 comm="syz.7.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 583.685964][T21048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.694814][T21048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.703829][ T30] audit: type=1400 audit(1752146947.317:1617): avc: denied { setopt } for pid=21124 comm="syz.7.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 583.824176][T21045] veth0_vlan: entered promiscuous mode [ 583.865898][T21045] veth1_vlan: entered promiscuous mode [ 583.945332][ T30] audit: type=1400 audit(1752146947.567:1618): avc: denied { mount } for pid=21132 comm="syz.1.6492" name="/" dev="ramfs" ino=76561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 583.983446][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.017691][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.067270][T21045] veth0_macvtap: entered promiscuous mode [ 584.067849][T21140] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6495'. [ 584.077873][T21045] veth1_macvtap: entered promiscuous mode [ 584.111688][T17960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.126689][T21045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.140905][T17960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.172179][T21045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.184061][T21045] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.194916][T21045] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.204406][T21045] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.213191][T21045] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.352503][ T78] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 584.403824][T17969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.416101][T17969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.438331][T17942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.446431][T17942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.460792][ T5834] Bluetooth: hci0: command tx timeout [ 584.522973][ T78] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 584.533235][ T78] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.545172][ T78] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 584.558701][ T78] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 584.566923][ T78] usb 4-1: Manufacturer: syz [ 584.573687][ T78] usb 4-1: config 0 descriptor?? [ 584.633060][ T78] rc_core: IR keymap rc-hauppauge not found [ 584.640276][ T78] Registered IR keymap rc-empty [ 584.647607][ T78] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 584.661714][ T78] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 584.678350][T21156] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6501'. [ 584.797835][T21161] syzkaller1: entered promiscuous mode [ 584.811539][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 584.822105][T21161] syzkaller1: entered allmulticast mode [ 584.828920][ T78] usb 4-1: USB disconnect, device number 70 [ 585.864028][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.891070][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 585.902839][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 585.914318][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 585.923090][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.117603][T21182] chnl_net:caif_netlink_parms(): no params data found [ 586.165877][T21182] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.173225][T21182] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.180378][T21182] bridge_slave_0: entered allmulticast mode [ 586.187439][T21182] bridge_slave_0: entered promiscuous mode [ 586.196308][T21182] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.204243][T21182] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.211623][T21182] bridge_slave_1: entered allmulticast mode [ 586.218280][T21182] bridge_slave_1: entered promiscuous mode [ 586.241023][T21182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.253105][T21182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.280106][T21182] team0: Port device team_slave_0 added [ 586.287890][T21182] team0: Port device team_slave_1 added [ 586.315000][T21182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.322126][T21182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.347969][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.354503][T21182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.366267][T21182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.373345][T21182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.399203][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.407594][T21182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.439978][T21182] hsr_slave_0: entered promiscuous mode [ 586.448756][T21182] hsr_slave_1: entered promiscuous mode [ 586.455014][T21182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.463145][T21182] Cannot create hsr debugfs directory [ 586.552185][T21182] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.704955][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 586.704971][ T30] audit: type=1400 audit(1752146950.337:1626): avc: denied { mounton } for pid=21192 comm="syz.1.6513" path="/1401/file0" dev="tmpfs" ino=7116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 586.821487][T21182] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.841160][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.853385][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.861683][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.870968][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.878529][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.983811][T21182] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.065568][T21182] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.124734][ T30] audit: type=1400 audit(1752146950.757:1627): avc: denied { read write } for pid=21207 comm="syz.3.6518" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.153982][ T30] audit: type=1400 audit(1752146950.757:1628): avc: denied { open } for pid=21207 comm="syz.3.6518" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.177452][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.330194][ T30] audit: type=1400 audit(1752146950.957:1629): avc: denied { connect } for pid=21214 comm="syz.1.6520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 587.331601][T21182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 587.366225][T21182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 587.385143][ T2157] hid-generic 0005:16C0:5505.006C: hidraw0: BLUETOOTH HID v4.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 587.386201][T21182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 587.425805][T21199] chnl_net:caif_netlink_parms(): no params data found [ 587.444382][T21182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.515068][T21199] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.522831][T21199] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.530825][T21199] bridge_slave_0: entered allmulticast mode [ 587.538517][T21199] bridge_slave_0: entered promiscuous mode [ 587.546628][T21199] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.554220][T21199] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.561447][T21199] bridge_slave_1: entered allmulticast mode [ 587.571707][T21199] bridge_slave_1: entered promiscuous mode [ 587.601163][T21199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.615180][T21199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.650382][T21199] team0: Port device team_slave_0 added [ 587.659183][T21199] team0: Port device team_slave_1 added [ 587.689685][T21199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.697696][T21199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.724132][T21199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.737767][T21199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.746164][T21199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.772242][T21199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.810941][ T2157] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 587.826523][T21199] hsr_slave_0: entered promiscuous mode [ 587.834233][T21199] hsr_slave_1: entered promiscuous mode [ 587.840172][T21199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.847898][T21199] Cannot create hsr debugfs directory [ 587.961107][ T2157] usb 2-1: Using ep0 maxpacket: 32 [ 587.981357][ T5834] Bluetooth: hci0: command tx timeout [ 587.995232][ T2157] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 588.009520][ T2157] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 588.028018][ T2157] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 588.045062][T21182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.051155][ T2157] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 588.068876][ T2157] usb 2-1: config 0 interface 0 has no altsetting 0 [ 588.078409][ T2157] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 588.087616][ T2157] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 588.105920][ T2157] usb 2-1: Product: syz [ 588.111309][ T2157] usb 2-1: Manufacturer: syz [ 588.115923][ T2157] usb 2-1: SerialNumber: syz [ 588.119628][T21182] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.122949][ T2157] usb 2-1: config 0 descriptor?? [ 588.137863][ T2157] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 588.157974][ T2157] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 588.172335][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.179450][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.209302][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.216434][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.288743][T21199] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.417463][ T30] audit: type=1400 audit(1752146952.047:1630): avc: denied { getopt } for pid=21240 comm="syz.3.6528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.444839][T19536] usb 2-1: USB disconnect, device number 62 [ 588.476156][T21199] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.476899][T19536] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 588.547865][T21199] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.670514][T21199] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.720117][T21248] netlink: 'syz.7.6529': attribute type 12 has an invalid length. [ 588.728308][T21248] netlink: 'syz.7.6529': attribute type 29 has an invalid length. [ 588.736878][T21248] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6529'. [ 588.759703][T21248] netlink: 59 bytes leftover after parsing attributes in process `syz.7.6529'. [ 588.887542][T21182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.898403][T21199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 588.922945][T21199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 588.939578][T21199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 588.947231][ T5834] Bluetooth: hci1: command tx timeout [ 588.968231][T21199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 589.007414][T21182] veth0_vlan: entered promiscuous mode [ 589.036360][T21182] veth1_vlan: entered promiscuous mode [ 589.081811][T21182] veth0_macvtap: entered promiscuous mode [ 589.098604][T21182] veth1_macvtap: entered promiscuous mode [ 589.140334][T21182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.161741][T21199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.173280][T21182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.193097][T21182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.202799][T21182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.217293][T21182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.227828][T21182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.253523][T21199] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.290002][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.297161][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.326214][T17942] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.333337][T17942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.503886][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.527299][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.597933][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.614501][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.643908][ T30] audit: type=1400 audit(1752146953.267:1631): avc: denied { create } for pid=21273 comm="syz.1.6537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 589.670562][ T30] audit: type=1400 audit(1752146953.267:1632): avc: denied { sys_admin } for pid=21273 comm="syz.1.6537" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 589.939005][T21199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.030770][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 590.053198][T21288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.181107][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 590.208145][ T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 590.229370][ T24] usb 4-1: config 0 has no interface number 0 [ 590.249600][ T24] usb 4-1: config 0 interface 41 has no altsetting 0 [ 590.265051][ T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 590.281847][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.298054][ T24] usb 4-1: Product: syz [ 590.303470][ T24] usb 4-1: Manufacturer: syz [ 590.308093][ T24] usb 4-1: SerialNumber: syz [ 590.315034][ T24] usb 4-1: config 0 descriptor?? [ 590.324682][ T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 590.391957][T21199] veth0_vlan: entered promiscuous mode [ 590.420140][T21199] veth1_vlan: entered promiscuous mode [ 590.449234][T21199] veth0_macvtap: entered promiscuous mode [ 590.460030][T21199] veth1_macvtap: entered promiscuous mode [ 590.479126][T21199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.492674][T21199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.509267][T21199] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.546866][T21199] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.559300][T21199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.573849][T21199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.673292][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.687244][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.713881][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.723605][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.852572][ T30] audit: type=1400 audit(1752146954.487:1633): avc: denied { execute } for pid=21295 comm="syz.1.6541" dev="hugetlbfs" ino=79709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 590.874161][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.886205][ T30] audit: type=1400 audit(1752146954.517:1634): avc: denied { execute_no_trans } for pid=21295 comm="syz.1.6541" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=79709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 590.914806][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.051808][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.063030][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.072682][ T30] audit: type=1400 audit(1752146954.697:1635): avc: denied { mount } for pid=21302 comm="syz.1.6543" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 591.073027][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.095455][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.115857][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.123512][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.389741][T21300] chnl_net:caif_netlink_parms(): no params data found [ 591.545804][T21300] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.560933][T21300] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.568234][T21300] bridge_slave_0: entered allmulticast mode [ 591.575706][T21300] bridge_slave_0: entered promiscuous mode [ 591.586156][T21300] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.593602][T21300] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.601346][T21300] bridge_slave_1: entered allmulticast mode [ 591.608780][T21300] bridge_slave_1: entered promiscuous mode [ 591.656842][T21300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.688930][T21300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.745039][T21300] team0: Port device team_slave_0 added [ 591.754621][T21300] team0: Port device team_slave_1 added [ 591.787159][T21300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.794464][T21300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.821288][T21300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.839287][T21300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.846994][T21300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.879015][T21300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.953998][T21300] hsr_slave_0: entered promiscuous mode [ 591.960462][T21300] hsr_slave_1: entered promiscuous mode [ 591.972443][T21300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.980139][T21300] Cannot create hsr debugfs directory [ 592.165659][T21300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.247426][T21300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.323429][T21300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.406540][T21300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.602750][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 592.614902][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 592.629605][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 592.634836][T21300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 592.650201][T21300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 592.657580][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 592.666634][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 592.679589][T21300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 592.706676][T21300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 592.801450][ T5832] usb 4-1: USB disconnect, device number 71 [ 592.839778][T21331] netlink: 'syz.7.6550': attribute type 29 has an invalid length. [ 592.891499][T21331] netlink: 'syz.7.6550': attribute type 29 has an invalid length. [ 593.067505][T21300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.115264][T21342] vivid-000: disconnect [ 593.126714][T21318] chnl_net:caif_netlink_parms(): no params data found [ 593.134943][T21342] vivid-000: reconnect [ 593.167956][T21300] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.183973][ T5834] Bluetooth: hci0: command tx timeout [ 593.215228][T17942] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.222364][T17942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.359868][T17942] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.367019][T17942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.566593][T21357] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 593.573150][T21357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 593.603574][T21318] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.613007][T21318] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.622115][T21318] bridge_slave_0: entered allmulticast mode [ 593.623482][T21357] vhci_hcd vhci_hcd.0: Device attached [ 593.631900][T21318] bridge_slave_0: entered promiscuous mode [ 593.672118][T21318] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.679252][T21318] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.713922][T21318] bridge_slave_1: entered allmulticast mode [ 593.729298][T21318] bridge_slave_1: entered promiscuous mode [ 593.809197][T21318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.834874][T21318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.869495][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 593.869513][ T30] audit: type=1400 audit(1752146957.497:1639): avc: denied { watch } for pid=21365 comm="syz.7.6561" path="/152/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 593.871358][ T2157] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 593.889736][ T30] audit: type=1400 audit(1752146957.497:1640): avc: denied { watch_sb watch_reads } for pid=21365 comm="syz.7.6561" path="/152/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 593.940743][ T5832] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 593.992071][T21318] team0: Port device team_slave_0 added [ 594.009427][T21318] team0: Port device team_slave_1 added [ 594.110704][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 594.117353][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.146855][T21318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.148794][T21374] netlink: del zone limit has 4 unknown bytes [ 594.160737][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.170487][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 594.185074][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.213201][ T5832] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 594.225013][T21318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.236210][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.248179][T21318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.256691][ T5832] usb 2-1: config 0 descriptor?? [ 594.262163][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.292481][T21318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.374406][T21300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.408268][T21318] hsr_slave_0: entered promiscuous mode [ 594.414989][T21318] hsr_slave_1: entered promiscuous mode [ 594.422368][T21318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.429988][T21318] Cannot create hsr debugfs directory [ 594.512741][T21358] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 594.524625][ T5832] usbhid 2-1:0.0: can't add hid device: -71 [ 594.539268][ T5832] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 594.549687][ T1097] vhci_hcd: stop threads [ 594.566654][ T5832] usb 2-1: USB disconnect, device number 63 [ 594.569774][ T1097] vhci_hcd: release socket [ 594.582847][T21300] veth0_vlan: entered promiscuous mode [ 594.597529][ T1097] vhci_hcd: disconnect device [ 594.612317][T21300] veth1_vlan: entered promiscuous mode [ 594.701191][ T5834] Bluetooth: hci1: command tx timeout [ 594.739882][T21318] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.775604][T21300] veth0_macvtap: entered promiscuous mode [ 594.786442][T21300] veth1_macvtap: entered promiscuous mode [ 594.820285][T21318] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.842544][T21300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.853723][T21300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.864515][T21300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.873633][T21300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.883917][T21300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.892740][T21300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.983917][T21318] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.049886][T21318] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.077618][T17942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.095930][T17942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.183276][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.207987][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.218315][T21379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6564'. [ 595.264075][ T5834] Bluetooth: hci0: command tx timeout [ 595.271605][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6564'. [ 595.361586][T21318] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 595.409522][T21318] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.428171][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6566'. [ 595.450712][T21382] netlink: 'syz.1.6566': attribute type 30 has an invalid length. [ 595.510960][T21318] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 595.530070][T21382] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.539310][T21382] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.548078][T21382] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.556803][T21382] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.572630][T21318] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.735717][T21318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.780109][T21318] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.807304][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.814490][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.843495][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.850682][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.166605][T21318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.218273][ T30] audit: type=1400 audit(1752146959.847:1641): avc: denied { bind } for pid=21406 comm="syz.7.6571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 596.253606][T17960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.296547][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.310767][T17960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.611458][T21413] serio: Serial port ptm0 [ 596.667333][T21318] veth0_vlan: entered promiscuous mode [ 596.685637][T21318] veth1_vlan: entered promiscuous mode [ 596.692186][ T5980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.702951][ T5980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 596.738850][T21318] veth0_macvtap: entered promiscuous mode [ 596.757923][T21318] veth1_macvtap: entered promiscuous mode [ 596.781285][ T5834] Bluetooth: hci1: command tx timeout [ 596.784934][T21318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.802131][T21318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.827293][T21318] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.838570][T21318] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.859791][T21318] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.877388][T21318] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.969836][T17960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.986477][T17960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.014346][T17960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.036576][T17960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.508729][ T30] audit: type=1400 audit(1752146961.137:1642): avc: denied { bind } for pid=21430 comm="syz.3.6580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 597.564480][ T30] audit: type=1400 audit(1752146961.137:1643): avc: denied { node_bind } for pid=21430 comm="syz.3.6580" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 597.629525][ T30] audit: type=1400 audit(1752146961.217:1644): avc: denied { read } for pid=21434 comm="syz.1.6579" path="socket:[80621]" dev="sockfs" ino=80621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 597.891345][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.915778][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.926620][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.960779][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.966478][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.272123][ T30] audit: type=1400 audit(1752146961.907:1645): avc: denied { create } for pid=21444 comm="syz.3.6583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 598.274974][T21439] chnl_net:caif_netlink_parms(): no params data found [ 598.328066][ T30] audit: type=1400 audit(1752146961.957:1646): avc: denied { ioctl } for pid=21444 comm="syz.3.6583" path="socket:[80668]" dev="sockfs" ino=80668 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 598.521366][T21439] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.530465][T21439] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.537842][T21439] bridge_slave_0: entered allmulticast mode [ 598.546440][T21439] bridge_slave_0: entered promiscuous mode [ 598.554898][T21439] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.562811][T21439] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.569973][T21439] bridge_slave_1: entered allmulticast mode [ 598.576791][T21439] bridge_slave_1: entered promiscuous mode [ 598.605060][T21439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.616559][T21439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.653404][T21439] team0: Port device team_slave_0 added [ 598.662553][T21439] team0: Port device team_slave_1 added [ 598.684130][T21439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.692466][T21439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.718851][T21439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.732338][T21439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.739286][T21439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.765581][T21439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.807766][T21439] hsr_slave_0: entered promiscuous mode [ 598.814723][T21439] hsr_slave_1: entered promiscuous mode [ 598.820688][T21439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.828261][T21439] Cannot create hsr debugfs directory [ 598.933730][T21439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.024693][T21439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.085603][T21439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.096061][ T2157] vhci_hcd: vhci_device speed not set [ 599.149958][T21439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.264350][T21439] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 599.279881][T21439] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 599.289055][T21439] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 599.298904][T21439] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 599.389291][ T30] audit: type=1400 audit(1752146963.007:1647): avc: denied { accept } for pid=21455 comm="syz.1.6584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 599.650991][ T30] audit: type=1400 audit(1752146963.277:1648): avc: denied { create } for pid=21467 comm="syz.1.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 599.656188][T21468] IPVS: Unknown mcast interface: veth0_virt_wifi [ 599.681392][T21470] input: syz1 as /devices/virtual/input/input79 [ 599.688309][ T30] audit: type=1400 audit(1752146963.287:1649): avc: denied { setopt } for pid=21467 comm="syz.1.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 599.738153][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.750037][T21439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.763050][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.771698][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.794016][T21439] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.808757][T17959] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.815921][T17959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.826689][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.848829][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.895785][T17942] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.902979][T17942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.061459][ T5829] Bluetooth: hci0: command tx timeout [ 600.076519][ T30] audit: type=1400 audit(1752146963.707:1650): avc: denied { connect } for pid=21482 comm="syz.1.6593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.175290][ T30] audit: type=1400 audit(1752146963.737:1651): avc: denied { write } for pid=21482 comm="syz.1.6593" path="socket:[81985]" dev="sockfs" ino=81985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.222867][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.271272][T21472] chnl_net:caif_netlink_parms(): no params data found [ 600.290656][ T30] audit: type=1400 audit(1752146963.907:1652): avc: denied { read } for pid=21489 comm="syz.1.6594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 600.483274][T21472] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.490445][T21472] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.498036][T21472] bridge_slave_0: entered allmulticast mode [ 600.509059][T21472] bridge_slave_0: entered promiscuous mode [ 600.519482][T21439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.529123][T21472] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.538926][T21472] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.546797][T21472] bridge_slave_1: entered allmulticast mode [ 600.554817][T21472] bridge_slave_1: entered promiscuous mode [ 600.616402][ T30] audit: type=1400 audit(1752146964.247:1653): avc: denied { connect } for pid=21504 comm="syz.7.6599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.637353][T21472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.649188][ T30] audit: type=1400 audit(1752146964.247:1654): avc: denied { write } for pid=21504 comm="syz.7.6599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.657990][T21472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.669300][T20455] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 600.687293][ T30] audit: type=1400 audit(1752146964.317:1655): avc: denied { read } for pid=21504 comm="syz.7.6599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.783149][T21472] team0: Port device team_slave_0 added [ 600.797105][T21439] veth0_vlan: entered promiscuous mode [ 600.819756][T21472] team0: Port device team_slave_1 added [ 600.874338][T21439] veth1_vlan: entered promiscuous mode [ 600.880442][T20455] usb 2-1: Using ep0 maxpacket: 8 [ 600.887422][T20455] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 600.897479][T21472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.905208][T20455] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 600.913277][T21472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.939244][T20455] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 600.951713][T20455] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 600.961061][T20455] usb 2-1: config 0 has no interface number 0 [ 600.967134][T20455] usb 2-1: config 0 has no interface number 1 [ 600.973276][T21472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.984516][T20455] usb 2-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 600.999278][T21472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.006387][T21472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.010807][ T2157] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 601.032390][T20455] usb 2-1: config 0 interface 3 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 601.032420][T20455] usb 2-1: config 0 interface 3 has no altsetting 0 [ 601.032596][T21472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.075275][T20455] usb 2-1: New USB device found, idVendor=16d8, idProduct=700a, bcdDevice=47.3f [ 601.084687][T20455] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.093116][T20455] usb 2-1: Product: syz [ 601.110288][T20455] usb 2-1: Manufacturer: syz [ 601.119507][T21472] hsr_slave_0: entered promiscuous mode [ 601.128877][T20455] usb 2-1: SerialNumber: syz [ 601.135217][T21472] hsr_slave_1: entered promiscuous mode [ 601.142321][T20455] usb 2-1: config 0 descriptor?? [ 601.150140][T21472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.158198][T21472] Cannot create hsr debugfs directory [ 601.166065][T20455] option 2-1:0.126: GSM modem (1-port) converter detected [ 601.222804][ T2157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.234474][ T2157] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 601.243650][ T2157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.256271][ T2157] usb 4-1: config 0 descriptor?? [ 601.279662][T21439] veth0_macvtap: entered promiscuous mode [ 601.319579][T21439] veth1_macvtap: entered promiscuous mode [ 601.379390][T20455] option 2-1:0.3: GSM modem (1-port) converter detected [ 601.402947][T20455] usb 2-1: USB disconnect, device number 64 [ 601.409942][T20455] option 2-1:0.126: device disconnected [ 601.428638][T21472] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.440282][T20455] option 2-1:0.3: device disconnected [ 601.470245][T21439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.483732][T21439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.525965][T21439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.546120][T21439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.557606][T21439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.566579][T21439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.598800][T21472] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.676933][ T2157] petalynx 0003:18B1:0037.006D: unknown main item tag 0x5 [ 601.684404][ T2157] petalynx 0003:18B1:0037.006D: unknown global tag 0xd [ 601.691936][ T2157] petalynx 0003:18B1:0037.006D: item 0 2 1 13 parsing failed [ 601.699973][ T2157] petalynx 0003:18B1:0037.006D: parse failed [ 601.706188][ T2157] petalynx 0003:18B1:0037.006D: probe with driver petalynx failed with error -22 [ 601.709113][T21472] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.754401][T17959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.769476][T17959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.798662][T21472] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.827627][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.839282][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.901177][ T5829] Bluetooth: hci1: command tx timeout [ 601.949233][T21472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 601.988713][T19536] usb 4-1: USB disconnect, device number 72 [ 602.034350][T21472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.045303][T21472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 602.057951][T21472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 602.179032][T21472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.192174][ T30] audit: type=1400 audit(1752146965.827:1656): avc: denied { mount } for pid=21520 comm="syz.1.6603" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 602.225582][T21472] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.248350][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.255492][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.291846][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.298992][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.499300][T21472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.046128][T21472] veth0_vlan: entered promiscuous mode [ 603.075796][T21472] veth1_vlan: entered promiscuous mode [ 603.107016][T21472] veth0_macvtap: entered promiscuous mode [ 603.116494][T21472] veth1_macvtap: entered promiscuous mode [ 603.131603][T21472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.148617][T21472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.159306][T21472] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.168530][T21472] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.177257][T21472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.187637][T21472] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.265304][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.277224][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.305564][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.313820][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.973249][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.988797][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.997518][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.007517][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.009351][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6615'. [ 604.026803][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 604.040619][T21558] ipvlan2: entered promiscuous mode [ 604.336595][T21555] chnl_net:caif_netlink_parms(): no params data found [ 604.353924][T21567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.414405][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 604.414423][ T30] audit: type=1400 audit(1752146968.047:1667): avc: denied { name_connect } for pid=21570 comm="syz.1.6618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 604.440769][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.480226][T21555] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.496947][T21555] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.504645][T21555] bridge_slave_0: entered allmulticast mode [ 604.512485][T21555] bridge_slave_0: entered promiscuous mode [ 604.520554][T21555] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.530303][T21555] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.537703][T21555] bridge_slave_1: entered allmulticast mode [ 604.545138][T21555] bridge_slave_1: entered promiscuous mode [ 604.594462][T21555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.626001][T21555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.714371][T21555] team0: Port device team_slave_0 added [ 604.741162][T21555] team0: Port device team_slave_1 added [ 604.763606][T21555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.770562][T21555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.801785][T21555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.817814][T21555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.825940][T21555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.855116][T21555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.895803][T21555] hsr_slave_0: entered promiscuous mode [ 604.902219][T21555] hsr_slave_1: entered promiscuous mode [ 604.908273][T21555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.916297][T21555] Cannot create hsr debugfs directory [ 605.035430][T21555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.118847][T21555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.189967][T21555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.316488][T21555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.436765][T21555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 605.448212][T21555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 605.458491][T21555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 605.468712][T21555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 605.539504][T21555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.569966][T21555] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.580542][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.587664][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.617618][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.624751][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.705807][ T30] audit: type=1400 audit(1752146969.337:1668): avc: denied { create } for pid=21582 comm="syz.1.6620" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 605.726579][ C1] vkms_vblank_simulate: vblank timer overrun [ 605.765246][ T30] audit: type=1400 audit(1752146969.337:1669): avc: denied { mounton } for pid=21582 comm="syz.1.6620" path="/1449/file0" dev="tmpfs" ino=7363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 605.891484][ T30] audit: type=1400 audit(1752146969.527:1670): avc: denied { create } for pid=21591 comm="syz.3.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 605.960734][ T30] audit: type=1400 audit(1752146969.547:1671): avc: denied { connect } for pid=21591 comm="syz.3.6623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 606.036124][T21555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.051243][ T30] audit: type=1400 audit(1752146969.547:1672): avc: denied { setopt } for pid=21591 comm="syz.3.6623" laddr=172.20.20.10 lport=11 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 606.076008][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.077888][ T5829] Bluetooth: hci0: command tx timeout [ 606.137784][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 606.148960][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 606.159004][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 606.171708][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 606.181564][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.244092][ T30] audit: type=1400 audit(1752146969.547:1673): avc: denied { write } for pid=21591 comm="syz.3.6623" path="socket:[83446]" dev="sockfs" ino=83446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 606.254521][T21555] veth0_vlan: entered promiscuous mode [ 606.296120][T21555] veth1_vlan: entered promiscuous mode [ 606.311479][ T30] audit: type=1400 audit(1752146969.547:1674): avc: denied { read } for pid=21591 comm="syz.3.6623" path="socket:[83446]" dev="sockfs" ino=83446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 606.389299][ T30] audit: type=1400 audit(1752146969.667:1675): avc: denied { execute_no_trans } for pid=21595 comm="syz.3.6625" path="/1384/file0" dev="tmpfs" ino=7056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 606.428932][ T30] audit: type=1400 audit(1752146969.667:1676): avc: denied { write } for pid=21594 comm="syz.1.6624" path="socket:[82927]" dev="sockfs" ino=82927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 606.448495][T21555] veth0_macvtap: entered promiscuous mode [ 606.464191][T21555] veth1_macvtap: entered promiscuous mode [ 606.532846][T21555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.574974][T21555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.586799][T21555] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.596098][T21555] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.604971][T21555] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.619391][T21555] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.887436][T17959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.907291][T17959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.957907][T21598] chnl_net:caif_netlink_parms(): no params data found [ 606.995705][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.019428][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.209914][T21598] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.248693][T21598] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.277762][T21598] bridge_slave_0: entered allmulticast mode [ 607.311361][T21598] bridge_slave_0: entered promiscuous mode [ 607.344379][T21598] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.361408][T21598] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.368664][T21598] bridge_slave_1: entered allmulticast mode [ 607.419513][T21598] bridge_slave_1: entered promiscuous mode [ 607.674726][T21598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.712405][T21598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.222198][ T5834] Bluetooth: hci1: command tx timeout [ 608.237231][T21598] team0: Port device team_slave_0 added [ 608.288317][T21598] team0: Port device team_slave_1 added [ 608.476089][T21598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.496710][T21598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.522678][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.543568][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.561966][T21598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.576594][T21598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.601605][T21598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.627522][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.651004][T21598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.845529][T21598] hsr_slave_0: entered promiscuous mode [ 608.855751][T21598] hsr_slave_1: entered promiscuous mode [ 608.870007][T21598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.885894][T21598] Cannot create hsr debugfs directory [ 609.004022][T21598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.078561][T21598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.159276][T21598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.227464][T21598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.379626][T21598] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 609.389442][T21598] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 609.398339][T21598] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 609.408394][T21598] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 609.478475][T21598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.497581][T21598] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.509465][T17969] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.516618][T17969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.535702][T17959] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.542889][T17959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.588507][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 609.588524][ T30] audit: type=1400 audit(1752146973.217:1693): avc: denied { execmem } for pid=21658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 609.640802][ T30] audit: type=1400 audit(1752146973.257:1694): avc: denied { ioctl } for pid=21659 comm="syz.3.6647" path="socket:[84468]" dev="sockfs" ino=84468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 609.722785][T21664] input: syz0 as /devices/virtual/input/input80 [ 609.739498][ T30] audit: type=1400 audit(1752146973.307:1695): avc: denied { prog_load } for pid=21661 comm="syz.7.6645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 609.830927][ T30] audit: type=1400 audit(1752146973.307:1696): avc: denied { bpf } for pid=21661 comm="syz.7.6645" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 609.937561][ T30] audit: type=1400 audit(1752146973.317:1697): avc: denied { perfmon } for pid=21661 comm="syz.7.6645" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 609.958518][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.030735][ T30] audit: type=1400 audit(1752146973.337:1698): avc: denied { prog_run } for pid=21661 comm="syz.7.6645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 610.095191][ T30] audit: type=1400 audit(1752146973.347:1699): avc: denied { read write } for pid=21663 comm="syz.1.6646" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 610.188059][ T30] audit: type=1400 audit(1752146973.347:1700): avc: denied { open } for pid=21663 comm="syz.1.6646" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 610.211714][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.247572][ T30] audit: type=1400 audit(1752146973.357:1701): avc: denied { ioctl } for pid=21663 comm="syz.1.6646" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 610.272720][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.284640][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 610.296873][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 610.304352][ T5830] Bluetooth: hci1: command tx timeout [ 610.320943][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 610.322376][T21598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.345971][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 610.352165][ T30] audit: type=1400 audit(1752146973.397:1702): avc: denied { module_request } for pid=21598 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 610.375048][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.386915][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 610.968160][T21679] chnl_net:caif_netlink_parms(): no params data found [ 611.106949][T21699] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN NOPTI [ 611.119046][T21699] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 611.127452][T21699] CPU: 1 UID: 0 PID: 21699 Comm: syz.3.6656 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 611.139500][T21699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 611.149546][T21699] RIP: 0010:htb_qlen_notify+0x2d/0xc0 [ 611.154913][T21699] Code: fa 41 55 41 54 55 48 89 fd 53 48 89 f3 4c 8d ab a8 01 00 00 e8 b4 2a 2e f8 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 67 44 8b a3 a8 01 00 00 31 ff 44 [ 611.174509][T21699] RSP: 0000:ffffc90004aff328 EFLAGS: 00010206 [ 611.180570][T21699] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c8d9000 [ 611.188534][T21699] RDX: 0000000000000035 RSI: ffffffff898dcc5c RDI: ffff888048bd6000 [ 611.196515][T21699] RBP: ffff888048bd6000 R08: 0000000000000005 R09: 0000000000000000 [ 611.204485][T21699] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce89d80 [ 611.212441][T21699] R13: 00000000000001a8 R14: ffffffff8ce89d60 R15: ffff888048bd6000 [ 611.220396][T21699] FS: 00007f1f083826c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 611.229313][T21699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.235897][T21699] CR2: 00007f87b42760f6 CR3: 0000000026f49000 CR4: 00000000003526f0 [ 611.243856][T21699] Call Trace: [ 611.247118][T21699] [ 611.250036][T21699] qdisc_tree_reduce_backlog+0x224/0x500 [ 611.255663][T21699] hhf_change+0x892/0xde0 [ 611.259986][T21699] ? __pfx_hhf_change+0x10/0x10 [ 611.264827][T21699] ? __pfx_qdisc_get_stab+0x10/0x10 [ 611.270016][T21699] hhf_init+0x2f1/0x8c0 [ 611.274165][T21699] ? __pfx_hhf_init+0x10/0x10 [ 611.278833][T21699] qdisc_create+0x457/0xfc0 [ 611.283328][T21699] tc_modify_qdisc+0x12bb/0x2130 [ 611.288257][T21699] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 611.293560][T21699] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 611.298833][T21699] rtnetlink_rcv_msg+0x3c9/0xe90 [ 611.303761][T21699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.309213][T21699] ? ref_tracker_free+0x37c/0x830 [ 611.314229][T21699] netlink_rcv_skb+0x158/0x420 [ 611.318987][T21699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 611.324438][T21699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.329708][T21699] ? netlink_deliver_tap+0x1ae/0xd30 [ 611.335072][T21699] netlink_unicast+0x53a/0x7f0 [ 611.339818][T21699] ? __pfx_netlink_unicast+0x10/0x10 [ 611.345087][T21699] netlink_sendmsg+0x8d1/0xdd0 [ 611.349835][T21699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.355106][T21699] ____sys_sendmsg+0xa95/0xc70 [ 611.359852][T21699] ? copy_msghdr_from_user+0x10a/0x160 [ 611.365317][T21699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.370591][T21699] ? try_to_wake_up+0xa2f/0x1680 [ 611.375521][T21699] ___sys_sendmsg+0x134/0x1d0 [ 611.380189][T21699] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.385377][T21699] ? __lock_acquire+0x622/0x1c90 [ 611.390316][T21699] __sys_sendmsg+0x16d/0x220 [ 611.394897][T21699] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.399997][T21699] ? __x64_sys_futex+0x1e0/0x4c0 [ 611.404931][T21699] do_syscall_64+0xcd/0x4c0 [ 611.409423][T21699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.415302][T21699] RIP: 0033:0x7f1f0758e929 [ 611.419699][T21699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.439315][T21699] RSP: 002b:00007f1f08382038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.447726][T21699] RAX: ffffffffffffffda RBX: 00007f1f077b5fa0 RCX: 00007f1f0758e929 [ 611.455680][T21699] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 611.463633][T21699] RBP: 00007f1f07610b39 R08: 0000000000000000 R09: 0000000000000000 [ 611.471586][T21699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.479542][T21699] R13: 0000000000000000 R14: 00007f1f077b5fa0 R15: 00007fff74144ca8 [ 611.487506][T21699] [ 611.490515][T21699] Modules linked in: [ 611.494456][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.500488][T21699] ---[ end trace 0000000000000000 ]--- [ 611.506000][T21699] RIP: 0010:htb_qlen_notify+0x2d/0xc0 [ 611.511419][T21699] Code: fa 41 55 41 54 55 48 89 fd 53 48 89 f3 4c 8d ab a8 01 00 00 e8 b4 2a 2e f8 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 67 44 8b a3 a8 01 00 00 31 ff 44 [ 611.531084][T21699] RSP: 0000:ffffc90004aff328 EFLAGS: 00010206 [ 611.537171][T21699] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9000c8d9000 [ 611.545203][T21699] RDX: 0000000000000035 RSI: ffffffff898dcc5c RDI: ffff888048bd6000 [ 611.553226][T21699] RBP: ffff888048bd6000 R08: 0000000000000005 R09: 0000000000000000 [ 611.561242][T21699] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce89d80 [ 611.569227][T21699] R13: 00000000000001a8 R14: ffffffff8ce89d60 R15: ffff888048bd6000 [ 611.577251][T21699] FS: 00007f1f083826c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 611.586234][T21699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.592868][T21699] CR2: 00007f87b42760f6 CR3: 0000000026f49000 CR4: 00000000003526f0 [ 611.600883][T21699] Kernel panic - not syncing: Fatal exception in interrupt [ 611.608315][T21699] Kernel Offset: disabled [ 611.612624][T21699] Rebooting in 86400 seconds..