last executing test programs: 47.553628323s ago: executing program 2 (id=379): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) 20.995038213s ago: executing program 0 (id=412): quotactl$Q_QUOTAON(0x0, 0x0, 0x0, &(0x7f0000000300)='./file0/../file0/../file0\x00') r0 = socket(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 20.73131722s ago: executing program 0 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xf, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324b078b089b3b08386d1a0890e0878f0e1ac6e7049b3d6d959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xa00}}, 0x1006) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) 19.358108309s ago: executing program 0 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) 19.243240959s ago: executing program 0 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) epoll_create1(0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) 16.851811458s ago: executing program 0 (id=422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 16.714545815s ago: executing program 0 (id=423): socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000900), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff84, &(0x7f0000000080)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001c100)=""/102400, 0x19000) 10.119202202s ago: executing program 3 (id=444): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f040e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.938550447s ago: executing program 4 (id=446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800001f00000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000942000000300000000000014000100ff0200000000000000000000000000010800040001000000"], 0x38}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) 9.590201964s ago: executing program 3 (id=447): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000008940)={&(0x7f0000000000), 0xc, &(0x7f0000008780)=[{&(0x7f0000000040)={0x10}, 0x10}], 0x1, &(0x7f0000008900)=[@cred={{0x1c}}], 0x20}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ni={0x8c}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRESDEC=r0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 9.590007673s ago: executing program 2 (id=380): open(&(0x7f0000000200)='./file0\x00', 0x14d27e, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='xfs\x00', 0x800011, 0x0) 5.096837648s ago: executing program 2 (id=448): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="1100000042000106"], 0x18}], 0x1}, 0x0) 5.030313849s ago: executing program 1 (id=449): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) pread64(r0, &(0x7f0000000080)=""/169, 0xa9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00') read$FUSE(r1, 0x0, 0x0) 4.403136728s ago: executing program 3 (id=450): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10101}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.320255353s ago: executing program 1 (id=451): r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee00) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000001c0)={0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) 3.990391981s ago: executing program 3 (id=452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3.798194197s ago: executing program 4 (id=453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000001040)={0xa, &(0x7f0000000040)}) 3.787288353s ago: executing program 1 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.545698243s ago: executing program 4 (id=455): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f040e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.454629233s ago: executing program 1 (id=456): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x6802c1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x632, &(0x7f0000000280)=0x2) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x2000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB="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"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r7, 0x409, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000100)={0x2028, &(0x7f0000000080)=[{}, {}]}) r9 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r9, 0xc0884123, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000800)) 3.368737696s ago: executing program 4 (id=457): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 3.009174508s ago: executing program 4 (id=458): open(&(0x7f0000000200)='./file0\x00', 0x14d27e, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='xfs\x00', 0x800011, 0x0) 2.627928867s ago: executing program 4 (id=459): process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) inotify_init1(0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x1010c0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f0000000240), 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1}) 2.229179899s ago: executing program 2 (id=460): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) pread64(r0, &(0x7f0000000080)=""/169, 0xa9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='fd/4\x00') read$FUSE(r1, 0x0, 0x0) 2.225145544s ago: executing program 1 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008080000000000c4c6850000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x80}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="dc0000001000010400000000fbdbdf2500000000", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08002e0004000000080013"], 0xdc}, 0x1, 0xf303000000000000}, 0x0) connect$can_bcm(r7, &(0x7f00000003c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x5, 0x808, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "44a349524fa600b79ace66818d06b83bea9313846bad8dde499f4583e4030a48de3f26b12f70dcc5d1642a2e1c8aa9a4c9cab83396a325e4ec116c5cdb3f9c13"}}, 0x80}}, 0x0) dup3(r5, r6, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='mem_disconnect\x00', r4}, 0x22) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2.060610979s ago: executing program 3 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, r5, 0x0, 0x0, 0x1, &(0x7f0000000480)="ae", 0x5}) 0s ago: executing program 2 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) kernel console output (not intermixed with test programs): : denied { create } for pid=5344 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.818953][ T29] audit: type=1400 audit(1720798657.020:193): avc: denied { ioctl } for pid=5344 comm="syz.1.61" path="socket:[8359]" dev="sockfs" ino=8359 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 128.883347][ T29] audit: type=1400 audit(1720798657.100:194): avc: denied { create } for pid=5343 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.064660][ T29] audit: type=1400 audit(1720798657.180:195): avc: denied { write } for pid=5343 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.098689][ T29] audit: type=1400 audit(1720798657.230:196): avc: denied { bind } for pid=5335 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.103231][ T29] audit: type=1400 audit(1720798658.320:197): avc: denied { create } for pid=5357 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.223302][ T29] audit: type=1400 audit(1720798658.370:198): avc: denied { bind } for pid=5357 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.289658][ T29] audit: type=1400 audit(1720798658.370:199): avc: denied { accept } for pid=5357 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.400272][ T29] audit: type=1400 audit(1720798658.620:200): avc: denied { mounton } for pid=5359 comm="syz.0.65" path="/7/file0" dev="tmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.630699][ T5229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.784449][ T5378] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 130.784449][ T5378] The task syz.4.71 (5378) triggered the difference, watch for misbehavior. [ 130.859740][ T5229] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 130.896724][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.921380][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.949385][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.976877][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.007189][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.051265][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.071714][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.083303][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.111085][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.149257][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.174164][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.199522][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 131.213020][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.313322][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.325596][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.373082][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.391251][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.404436][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.418504][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.427793][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.438779][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.466496][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.502205][ T5229] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.517979][ T5229] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.541365][ T5229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.570343][ T5229] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 131.592844][ T5229] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 131.627764][ T5229] usb 3-1: Product: syz [ 131.641535][ T5229] usb 3-1: Manufacturer: syz [ 131.668746][ T5229] usb 3-1: SerialNumber: syz [ 131.776303][ T5229] usb 3-1: config 0 descriptor?? [ 131.888001][ T5229] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 133.479575][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 133.500556][ T5125] usb 3-1: USB disconnect, device number 2 [ 133.562908][ T5125] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 134.674657][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 134.674680][ T29] audit: type=1400 audit(1720798662.900:202): avc: denied { connect } for pid=5417 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.379843][ T29] audit: type=1400 audit(1720798663.430:203): avc: denied { write } for pid=5427 comm="syz.0.87" name="protocols" dev="proc" ino=4026533109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 135.908374][ T5136] IPVS: starting estimator thread 0... [ 136.088487][ T5434] IPVS: using max 21 ests per chain, 50400 per kthread [ 136.253339][ T29] audit: type=1400 audit(1720798664.480:204): avc: denied { execute } for pid=5439 comm="syz.0.89" path="/14/cpu.stat" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.591933][ T29] audit: type=1400 audit(1720798664.820:205): avc: denied { setopt } for pid=5436 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.800294][ T29] audit: type=1400 audit(1720798665.020:206): avc: denied { read } for pid=5449 comm="syz.2.92" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.849868][ T29] audit: type=1400 audit(1720798665.020:207): avc: denied { open } for pid=5449 comm="syz.2.92" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 136.949439][ T29] audit: type=1400 audit(1720798665.140:208): avc: denied { ioctl } for pid=5449 comm="syz.2.92" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.286439][ T29] audit: type=1400 audit(1720798665.510:209): avc: denied { name_bind } for pid=5459 comm="syz.0.93" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 137.377489][ T29] audit: type=1400 audit(1720798665.550:210): avc: denied { create } for pid=5459 comm="syz.0.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.466770][ T29] audit: type=1400 audit(1720798665.550:211): avc: denied { map } for pid=5459 comm="syz.0.93" path="socket:[8556]" dev="sockfs" ino=8556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.609435][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.632827][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.164953][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 140.164975][ T29] audit: type=1400 audit(1720798668.390:216): avc: denied { create } for pid=5479 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 140.301102][ T5492] syz.4.106[5492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.301353][ T5492] syz.4.106[5492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.307330][ T29] audit: type=1400 audit(1720798668.440:217): avc: denied { append } for pid=5479 comm="syz.1.105" name="video0" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 140.454622][ T5494] 9pnet_fd: Insufficient options for proto=fd [ 140.485856][ T29] audit: type=1400 audit(1720798668.450:218): avc: denied { watch watch_reads } for pid=5479 comm="syz.1.105" path="/23" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.267276][ T29] audit: type=1400 audit(1720798670.440:219): avc: denied { unlink } for pid=5505 comm="syz.1.109" name="#1" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 143.084949][ T29] audit: type=1400 audit(1720798670.450:220): avc: denied { mount } for pid=5505 comm="syz.1.109" name="/" dev="overlay" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 145.140730][ T29] audit: type=1400 audit(1720798673.370:221): avc: denied { setopt } for pid=5536 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 145.185242][ T5539] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 145.478198][ T29] audit: type=1400 audit(1720798673.700:222): avc: denied { read } for pid=5546 comm="syz.4.126" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.593131][ T29] audit: type=1400 audit(1720798673.730:223): avc: denied { open } for pid=5546 comm="syz.4.126" path="/dev/ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.692192][ T29] audit: type=1400 audit(1720798673.780:224): avc: denied { ioctl } for pid=5546 comm="syz.4.126" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.759266][ T29] audit: type=1400 audit(1720798673.800:225): avc: denied { ioctl } for pid=5542 comm="syz.0.125" path="/dev/usbmon0" dev="devtmpfs" ino=706 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 145.861135][ T29] audit: type=1400 audit(1720798673.940:226): avc: denied { mounton } for pid=5549 comm="syz.2.127" path="/19/file0" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 146.127336][ T29] audit: type=1400 audit(1720798673.940:227): avc: denied { mount } for pid=5549 comm="syz.2.127" name="/" dev="ramfs" ino=8712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.766920][ T5136] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.992954][ T5136] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 147.055171][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.080253][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.093773][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.133596][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.177407][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.248546][ T5575] xt_l2tp: v2 doesn't support IP mode [ 147.254056][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.291243][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.327597][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.355876][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.382113][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.436372][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.467624][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.510334][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.540091][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.564936][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.585078][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.598339][ T5137] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.602651][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.642042][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.667352][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.690364][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.702462][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.715125][ T5136] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.725496][ T5136] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.750848][ T5136] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.770479][ T5136] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.790574][ T5136] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.809825][ T5136] usb 3-1: Product: syz [ 147.819118][ T5136] usb 3-1: Manufacturer: syz [ 147.828492][ T5136] usb 3-1: SerialNumber: syz [ 147.850997][ T5137] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.876742][ T5136] usb 3-1: config 0 descriptor?? [ 147.892491][ T5137] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 147.918541][ T5137] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.939662][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.960183][ T5137] usb 4-1: Product: syz [ 147.965270][ T5137] usb 4-1: Manufacturer: syz [ 147.971289][ T5137] usb 4-1: SerialNumber: syz [ 147.995460][ T5136] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 149.170640][ T5133] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.197918][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 149.214393][ T45] usb 3-1: USB disconnect, device number 3 [ 149.240537][ T45] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 149.393083][ T5133] usb 1-1: Using ep0 maxpacket: 32 [ 149.410870][ T29] audit: type=1400 audit(1720798677.640:228): avc: denied { create } for pid=5593 comm="syz.1.144" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.443487][ T5133] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.490430][ T5133] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.508683][ T29] audit: type=1400 audit(1720798677.670:229): avc: denied { write } for pid=5593 comm="syz.1.144" name="file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.522619][ T5133] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 149.572262][ T5133] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 149.588766][ T29] audit: type=1400 audit(1720798677.670:230): avc: denied { open } for pid=5593 comm="syz.1.144" path="/37/file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 149.617587][ T5133] usb 1-1: Product: syz [ 149.635044][ T5133] usb 1-1: Manufacturer: syz [ 149.645110][ T29] audit: type=1400 audit(1720798677.670:231): avc: denied { setopt } for pid=5595 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 149.697832][ T5133] hub 1-1:4.0: USB hub found [ 150.011185][ T5600] syz.0.141 uses old SIOCAX25GETINFO [ 150.077473][ T5133] hub 1-1:4.0: 2 ports detected [ 150.399028][ T5137] usb 4-1: USB disconnect, device number 2 [ 150.525423][ T5133] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 150.548247][ T5133] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 150.620764][ T5133] usb 1-1: USB disconnect, device number 2 [ 154.267498][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 154.267523][ T29] audit: type=1400 audit(1720798682.490:236): avc: denied { read } for pid=5639 comm="syz.3.158" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.407040][ T5642] netlink: 68 bytes leftover after parsing attributes in process `syz.3.158'. [ 154.444273][ T29] audit: type=1400 audit(1720798682.490:237): avc: denied { open } for pid=5639 comm="syz.3.158" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 154.554015][ T29] audit: type=1400 audit(1720798682.610:238): avc: denied { write } for pid=5639 comm="syz.3.158" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 155.266683][ T29] audit: type=1400 audit(1720798683.300:239): avc: denied { setopt } for pid=5644 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.667838][ T29] audit: type=1400 audit(1720798683.360:240): avc: denied { connect } for pid=5644 comm="syz.2.160" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.728383][ T5229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.028898][ T29] audit: type=1400 audit(1720798683.470:241): avc: denied { write } for pid=5644 comm="syz.2.160" laddr=fe80::e lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.251794][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 156.327879][ T5229] usb 2-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 156.360763][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.436909][ T5229] usb 2-1: Product: syz [ 156.466160][ T5229] usb 2-1: Manufacturer: syz [ 156.499386][ T5229] usb 2-1: SerialNumber: syz [ 156.538601][ T5229] usb 2-1: config 0 descriptor?? [ 156.592318][ T29] audit: type=1400 audit(1720798684.810:242): avc: denied { create } for pid=5653 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.695434][ T29] audit: type=1400 audit(1720798684.850:243): avc: denied { write } for pid=5653 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.868357][ T5125] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.106279][ T29] audit: type=1400 audit(1720798685.330:244): avc: denied { nlmsg_write } for pid=5645 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.304639][ T5647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.480096][ T5647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.722400][ T5125] usb 3-1: Using ep0 maxpacket: 32 [ 157.741589][ T5125] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.751596][ T5229] usb 2-1: MIDIStreaming interface descriptor not found [ 157.754489][ T5125] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.801200][ T29] audit: type=1400 audit(1720798685.990:245): avc: denied { write } for pid=5671 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 158.422218][ T5125] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.562400][ T5125] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 158.712613][ T5125] usb 3-1: Product: syz [ 158.760063][ T5125] usb 3-1: Manufacturer: syz [ 158.832753][ T5125] hub 3-1:4.0: USB hub found [ 159.138680][ T5229] usb 2-1: USB disconnect, device number 2 [ 159.306953][ T5686] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 159.362865][ T5686] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.172'. [ 159.760750][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.075178][ T5125] hub 3-1:4.0: 2 ports detected [ 161.170317][ T5125] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 161.176752][ T5125] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 161.251166][ T29] audit: type=1400 audit(1720798689.480:246): avc: denied { ioctl } for pid=5699 comm="syz.1.178" path="socket:[8033]" dev="sockfs" ino=8033 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.329188][ T5125] usb 3-1: USB disconnect, device number 4 [ 161.827225][ T29] audit: type=1400 audit(1720798690.050:247): avc: denied { block_suspend } for pid=5699 comm="syz.1.178" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.154826][ T29] audit: type=1400 audit(1720798690.380:248): avc: denied { create } for pid=5710 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 162.904807][ T29] audit: type=1400 audit(1720798691.020:249): avc: denied { ioctl } for pid=5710 comm="syz.2.180" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8986 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.738172][ T5125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.080326][ T29] audit: type=1400 audit(1720798695.290:250): avc: denied { create } for pid=5721 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.118449][ T5726] netlink: 'syz.4.187': attribute type 4 has an invalid length. [ 167.188693][ T5727] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 167.201051][ T29] audit: type=1400 audit(1720798695.340:251): avc: denied { write } for pid=5723 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.278276][ T29] audit: type=1400 audit(1720798695.340:252): avc: denied { connect } for pid=5723 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.391306][ T29] audit: type=1400 audit(1720798695.340:253): avc: denied { name_connect } for pid=5723 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 167.501744][ T29] audit: type=1400 audit(1720798695.350:254): avc: denied { write } for pid=5721 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.574736][ T29] audit: type=1400 audit(1720798695.650:255): avc: denied { shutdown } for pid=5723 comm="syz.0.186" lport=50779 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.070441][ T5739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 168.148224][ T5739] netlink: 'syz.4.190': attribute type 12 has an invalid length. [ 168.302359][ T5739] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.312981][ T5739] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.322837][ T5739] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.331650][ T5739] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.351628][ T29] audit: type=1400 audit(1720798696.520:256): avc: denied { create } for pid=5740 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.363049][ T5739] vxlan0: entered promiscuous mode [ 168.390239][ T29] audit: type=1400 audit(1720798696.610:257): avc: denied { write } for pid=5740 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.457470][ T29] audit: type=1400 audit(1720798696.610:258): avc: denied { nlmsg_read } for pid=5740 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.479189][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.485003][ T29] audit: type=1400 audit(1720798696.640:259): avc: denied { create } for pid=5742 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.491557][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.518798][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.532588][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.541241][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.549784][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.023158][ T5751] Cannot find set identified by id 65532 to match [ 169.489420][ T2835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.904956][ T2835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.427802][ T2835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.679222][ T5086] Bluetooth: hci5: command tx timeout [ 170.805040][ T2835] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.298752][ T5772] syz.0.200 uses obsolete (PF_INET,SOCK_PACKET) [ 172.758432][ T5086] Bluetooth: hci5: command tx timeout [ 172.898905][ T5777] nbd2: detected capacity change from 0 to 22 [ 172.925166][ T5745] chnl_net:caif_netlink_parms(): no params data found [ 172.986253][ T5778] block nbd2: shutting down sockets [ 173.004352][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.013779][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.050107][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.096780][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.122234][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.136063][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.146412][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.156346][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.165385][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.175404][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.193162][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.210039][ T2835] bridge_slave_1: left allmulticast mode [ 173.210207][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.216250][ T2835] bridge_slave_1: left promiscuous mode [ 173.218383][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.233815][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.246874][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.258489][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.267999][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.278544][ T5775] ldm_validate_partition_table(): Disk read failed. [ 173.285957][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.295925][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.304657][ T5775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.314460][ T5775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 173.323549][ T5775] Dev nbd2: unable to read RDB block 0 [ 173.332876][ T5775] nbd2: unable to read partition table [ 173.342453][ T5775] nbd2: partition table beyond EOD, truncated [ 173.371926][ T5100] ldm_validate_partition_table(): Disk read failed. [ 173.385620][ T5100] Dev nbd2: unable to read RDB block 0 [ 173.396298][ T2835] bridge_slave_0: left allmulticast mode [ 173.408584][ T5100] nbd2: unable to read partition table [ 173.411152][ T2835] bridge_slave_0: left promiscuous mode [ 173.427888][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.444447][ T5100] nbd2: partition table beyond EOD, truncated [ 173.462414][ T5100] ldm_validate_partition_table(): Disk read failed. [ 173.471157][ T5100] Dev nbd2: unable to read RDB block 0 [ 173.478944][ T5100] nbd2: unable to read partition table [ 173.485102][ T5100] nbd2: partition table beyond EOD, truncated [ 174.264676][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 174.264704][ T29] audit: type=1400 audit(1720798702.490:262): avc: denied { watch } for pid=5783 comm="syz.1.204" path="/47/net_prio.prioidx" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.404950][ T29] audit: type=1400 audit(1720798702.560:263): avc: denied { watch_sb } for pid=5783 comm="syz.1.204" path="/47/net_prio.prioidx" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.416840][ T5789] netlink: 100 bytes leftover after parsing attributes in process `syz.4.205'. [ 174.552447][ T5785] overlayfs: overlapping lowerdir path [ 174.839764][ T5086] Bluetooth: hci5: command tx timeout [ 175.727400][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.781064][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.831882][ T2835] bond0 (unregistering): Released all slaves [ 175.975440][ T29] audit: type=1400 audit(1720798704.200:264): avc: denied { search } for pid=4747 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.208593][ T29] audit: type=1400 audit(1720798704.200:265): avc: denied { read } for pid=4747 comm="dhcpcd" name="n68" dev="tmpfs" ino=2203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.298438][ T29] audit: type=1400 audit(1720798704.200:266): avc: denied { open } for pid=4747 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.344259][ T29] audit: type=1400 audit(1720798704.200:267): avc: denied { getattr } for pid=4747 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=2203 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 176.634289][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.649815][ T785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.655075][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.713490][ T5745] bridge_slave_0: entered allmulticast mode [ 176.737938][ T29] audit: type=1400 audit(1720798704.960:268): avc: denied { open } for pid=5807 comm="syz.2.211" path="/dev/ptyq8" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 176.765958][ T5745] bridge_slave_0: entered promiscuous mode [ 176.924611][ T5086] Bluetooth: hci5: command tx timeout [ 177.041453][ T785] usb 1-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 177.943094][ T5815] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 177.981215][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.011862][ T785] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.044185][ T785] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 178.054087][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.085704][ T785] usb 1-1: config 0 descriptor?? [ 178.122787][ T785] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 178.148412][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.157500][ T5745] bridge_slave_1: entered allmulticast mode [ 178.354069][ T5745] bridge_slave_1: entered promiscuous mode [ 179.169486][ T29] audit: type=1400 audit(1720798707.290:269): avc: denied { read } for pid=5829 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.201344][ T29] audit: type=1400 audit(1720798707.310:270): avc: denied { open } for pid=5829 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.293851][ T29] audit: type=1400 audit(1720798707.330:271): avc: denied { getattr } for pid=5829 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.319507][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.771725][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.855686][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.936178][ T29] audit: type=1400 audit(1720798709.100:272): avc: denied { write } for pid=5819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.258432][ T29] audit: type=1400 audit(1720798709.110:273): avc: denied { add_name } for pid=5819 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.389721][ T29] audit: type=1400 audit(1720798709.110:274): avc: denied { create } for pid=5819 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.582705][ T29] audit: type=1400 audit(1720798709.110:275): avc: denied { write } for pid=5819 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2274 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.603954][ T5229] usb 1-1: USB disconnect, device number 4 [ 181.609172][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.672816][ T29] audit: type=1400 audit(1720798709.110:276): avc: denied { append } for pid=5819 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2274 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.901840][ T29] audit: type=1400 audit(1720798710.130:277): avc: denied { remove_name } for pid=5854 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2274 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.271515][ T29] audit: type=1400 audit(1720798710.170:278): avc: denied { unlink } for pid=5854 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=2274 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.454306][ T5745] team0: Port device team_slave_0 added [ 183.604239][ T5856] overlayfs: overlapping lowerdir path [ 184.483703][ T5745] team0: Port device team_slave_1 added [ 185.571595][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.585320][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.271064][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.513047][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.528934][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.580143][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.817748][ T2835] hsr_slave_0: left promiscuous mode [ 186.864248][ T2835] hsr_slave_1: left promiscuous mode [ 186.888838][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.904880][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.934571][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.957506][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.078590][ T29] audit: type=1400 audit(1720798715.300:279): avc: denied { accept } for pid=5879 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.112338][ T5880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.134351][ T2835] veth1_macvtap: left promiscuous mode [ 187.161073][ T2835] veth0_macvtap: left promiscuous mode [ 187.167055][ T2835] veth1_vlan: left promiscuous mode [ 187.198924][ T2835] veth0_vlan: left promiscuous mode [ 187.209268][ T29] audit: type=1400 audit(1720798715.430:280): avc: denied { setopt } for pid=5879 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.246077][ T29] audit: type=1400 audit(1720798715.430:281): avc: denied { bind } for pid=5879 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 187.315177][ T29] audit: type=1400 audit(1720798715.430:282): avc: denied { name_bind } for pid=5879 comm="syz.1.226" src=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.372868][ T5890] capability: warning: `syz.4.227' uses deprecated v2 capabilities in a way that may be insecure [ 187.399952][ T29] audit: type=1400 audit(1720798715.430:283): avc: denied { node_bind } for pid=5879 comm="syz.1.226" saddr=172.20.20.187 src=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 187.486523][ T29] audit: type=1400 audit(1720798715.510:284): avc: denied { name_connect } for pid=5879 comm="syz.1.226" dest=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 187.536459][ T29] audit: type=1400 audit(1720798715.660:285): avc: denied { bind } for pid=5879 comm="syz.1.226" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.573673][ T29] audit: type=1400 audit(1720798715.660:286): avc: denied { name_bind } for pid=5879 comm="syz.1.226" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 187.613511][ T29] audit: type=1400 audit(1720798715.660:287): avc: denied { node_bind } for pid=5879 comm="syz.1.226" saddr=224.0.0.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 187.670948][ T29] audit: type=1400 audit(1720798715.670:288): avc: denied { shutdown } for pid=5879 comm="syz.1.226" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.794078][ T5897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.303786][ T5898] evm: overlay not supported [ 188.861308][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 189.036393][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 189.533920][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.551115][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.568767][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.595412][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.613067][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.622947][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.104102][ T5888] wg2: entered promiscuous mode [ 190.126864][ T5888] wg2: entered allmulticast mode [ 190.483715][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.546215][ T5745] hsr_slave_0: entered promiscuous mode [ 190.578555][ T5745] hsr_slave_1: entered promiscuous mode [ 190.586254][ T5745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.598781][ T5745] Cannot create hsr debugfs directory [ 190.719768][ T5132] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.793590][ T5917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.919190][ T5132] usb 5-1: Using ep0 maxpacket: 16 [ 190.973776][ T5132] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 190.996311][ T5132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.029561][ T5132] usb 5-1: Product: syz [ 191.048353][ T5132] usb 5-1: Manufacturer: syz [ 191.080621][ T5132] usb 5-1: SerialNumber: syz [ 191.119516][ T5132] usb 5-1: config 0 descriptor?? [ 191.192614][ T5909] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 191.199838][ T5909] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 191.266255][ T5909] vhci_hcd vhci_hcd.0: Device attached [ 191.369258][ T5921] vhci_hcd: connection closed [ 191.396824][ T5904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.417076][ T12] vhci_hcd: stop threads [ 191.463563][ T12] vhci_hcd: release socket [ 191.505544][ T12] vhci_hcd: disconnect device [ 191.583387][ T5136] usb 10-1: enqueue for inactive port 0 [ 191.719178][ T53] Bluetooth: hci2: command tx timeout [ 191.909456][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.932104][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.177929][ T5136] usb usb10-port1: attempt power cycle [ 192.234013][ T5132] usb 5-1: MIDIStreaming interface descriptor not found [ 193.848467][ T53] Bluetooth: hci2: command tx timeout [ 195.133686][ T5136] usb usb10-port1: unable to enumerate USB device [ 195.191922][ T5132] usb 5-1: USB disconnect, device number 2 [ 195.721875][ T5947] netlink: 'syz.1.236': attribute type 4 has an invalid length. [ 195.734221][ T5947] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.236'. [ 195.879432][ T53] Bluetooth: hci2: command tx timeout [ 196.026054][ T2835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.079295][ T5132] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.197076][ T2835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.224583][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 196.271023][ T5132] usb 5-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 196.290573][ T5132] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.303778][ T5132] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 196.318329][ T5132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.331878][ T5132] usb 5-1: config 0 descriptor?? [ 196.348458][ T5132] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 196.469134][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.793369][ T2835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.875923][ T2835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.018446][ T53] Bluetooth: hci2: command tx timeout [ 198.452928][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 198.498577][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.506931][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.531515][ T5901] bridge_slave_0: entered allmulticast mode [ 198.559133][ T5901] bridge_slave_0: entered promiscuous mode [ 198.592917][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.619143][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.651399][ T5901] bridge_slave_1: entered allmulticast mode [ 198.700236][ T5901] bridge_slave_1: entered promiscuous mode [ 199.964486][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.971164][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.236380][ T5229] usb 5-1: USB disconnect, device number 3 [ 200.515589][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.623609][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.660851][ T5987] overlayfs: overlapping lowerdir path [ 201.933986][ T5996] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 202.239035][ T2835] bridge_slave_1: left allmulticast mode [ 202.293052][ T2835] bridge_slave_1: left promiscuous mode [ 202.318888][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.365807][ T6002] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 202.376590][ T2835] bridge_slave_0: left allmulticast mode [ 202.388245][ T2835] bridge_slave_0: left promiscuous mode [ 202.404454][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.424466][ T6002] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.245'. [ 203.418527][ T5136] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 203.658209][ T5136] usb 5-1: Using ep0 maxpacket: 32 [ 203.680239][ T5136] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.700841][ T5136] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.718049][ T5136] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 203.727988][ T5136] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 203.882995][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.913413][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.955274][ T2835] bond0 (unregistering): Released all slaves [ 204.032479][ T5901] team0: Port device team_slave_0 added [ 204.265544][ T5901] team0: Port device team_slave_1 added [ 204.405657][ T5745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.500031][ T5745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 204.671470][ T5745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 204.704264][ T5136] usb 5-1: Product: syz [ 204.717032][ T5136] usb 5-1: Manufacturer: syz [ 204.749503][ T5745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 204.752074][ T5136] hub 5-1:4.0: USB hub found [ 204.861283][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.892015][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.950531][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.214934][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.241627][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.304185][ T5136] hub 5-1:4.0: 2 ports detected [ 205.320595][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.704123][ T5136] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 205.716083][ T5136] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 205.840737][ T5136] usb 5-1: USB disconnect, device number 4 [ 205.999909][ T2835] hsr_slave_0: left promiscuous mode [ 206.020634][ T2835] hsr_slave_1: left promiscuous mode [ 206.066615][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.095169][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.149439][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.156910][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.278903][ T2835] veth1_macvtap: left promiscuous mode [ 206.288629][ T2835] veth0_macvtap: left promiscuous mode [ 206.308492][ T2835] veth1_vlan: left promiscuous mode [ 206.313972][ T2835] veth0_vlan: left promiscuous mode [ 206.857401][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 206.857423][ T29] audit: type=1400 audit(1720798735.080:299): avc: denied { execute_no_trans } for pid=6034 comm="syz.4.253" path="/55/file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.887235][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.090561][ T29] audit: type=1400 audit(1720798735.300:300): avc: denied { shutdown } for pid=6034 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.154652][ T29] audit: type=1400 audit(1720798735.350:301): avc: denied { read } for pid=6034 comm="syz.4.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.422949][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 208.491495][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 209.439981][ T5901] hsr_slave_0: entered promiscuous mode [ 209.478826][ T5901] hsr_slave_1: entered promiscuous mode [ 209.500353][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.522737][ T5901] Cannot create hsr debugfs directory [ 211.910092][ T29] audit: type=1400 audit(1720798740.090:302): avc: denied { create } for pid=6060 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 212.179093][ T29] audit: type=1400 audit(1720798740.120:303): avc: denied { create } for pid=6060 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.626747][ T29] audit: type=1400 audit(1720798740.130:304): avc: denied { connect } for pid=6060 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 213.084495][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.202095][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.239696][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.246964][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.301281][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.308642][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.918267][ T5901] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.987268][ T5901] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.010946][ T5136] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 214.032012][ T5901] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.105844][ T5901] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.240061][ T5136] usb 2-1: Using ep0 maxpacket: 32 [ 214.302058][ T5136] usb 2-1: config index 0 descriptor too short (expected 63524, got 36) [ 214.313044][ T5136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.325763][ T5136] usb 2-1: config 0 has no interfaces? [ 214.332129][ T5136] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 214.342155][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.491834][ T5136] usb 2-1: config 0 descriptor?? [ 215.300392][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.499447][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.747022][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.818531][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.262'. [ 215.860317][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.867616][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.933164][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.940532][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.983927][ T785] usb 2-1: USB disconnect, device number 3 [ 216.014273][ T5745] veth0_vlan: entered promiscuous mode [ 216.117598][ T5745] veth1_vlan: entered promiscuous mode [ 216.288897][ T29] audit: type=1326 audit(1720798744.510:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d08b75bd9 code=0x0 [ 216.424505][ T5901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.596612][ T5745] veth0_macvtap: entered promiscuous mode [ 216.677264][ T5745] veth1_macvtap: entered promiscuous mode [ 216.891074][ T6107] random: crng reseeded on system resumption [ 217.371657][ T29] audit: type=1400 audit(1720798745.110:306): avc: denied { append } for pid=6100 comm="syz.0.263" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.788460][ T29] audit: type=1400 audit(1720798745.120:307): avc: denied { open } for pid=6100 comm="syz.0.263" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.960232][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.052388][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.062327][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.088102][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.097975][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.108566][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.121749][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.136149][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.146742][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.160414][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.171138][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.182732][ T5745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.193289][ T5745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.205783][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.343532][ T5745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.385546][ T6112] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 218.408913][ T5745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.417679][ T5745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.465619][ T5745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.931829][ T29] audit: type=1400 audit(1720798747.140:308): avc: denied { mount } for pid=6120 comm="syz.1.268" name="/" dev="autofs" ino=11044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 219.063750][ T29] audit: type=1400 audit(1720798747.200:309): avc: denied { read } for pid=6120 comm="syz.1.268" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.188280][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.196158][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.239795][ T29] audit: type=1400 audit(1720798747.200:310): avc: denied { open } for pid=6120 comm="syz.1.268" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.352110][ T29] audit: type=1400 audit(1720798747.210:311): avc: denied { ioctl } for pid=6120 comm="syz.1.268" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 219.430502][ T3820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.463327][ T3820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.490741][ T29] audit: type=1400 audit(1720798747.340:312): avc: denied { unmount } for pid=5081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 219.529015][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.664821][ T29] audit: type=1400 audit(1720798747.500:313): avc: denied { read } for pid=6119 comm="syz.0.267" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.768303][ T29] audit: type=1400 audit(1720798747.850:314): avc: denied { mount } for pid=5745 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.801209][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.858431][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.871069][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.880854][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.900366][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.908254][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.306706][ T5901] veth0_vlan: entered promiscuous mode [ 220.373928][ T5132] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 220.414229][ T5901] veth1_vlan: entered promiscuous mode [ 220.608848][ T5132] usb 2-1: Using ep0 maxpacket: 32 [ 220.676371][ T5132] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.860183][ T5132] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.080730][ T5132] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 221.245560][ T5132] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 221.357396][ T5132] usb 2-1: Product: syz [ 221.377158][ T5132] usb 2-1: Manufacturer: syz [ 221.417501][ T5132] hub 2-1:4.0: USB hub found [ 221.441093][ T5901] veth0_macvtap: entered promiscuous mode [ 221.831825][ T5901] veth1_macvtap: entered promiscuous mode [ 221.964667][ T5086] Bluetooth: hci0: command tx timeout [ 222.073958][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.135832][ T29] audit: type=1326 audit(1720798750.340:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.0.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d08b75bd9 code=0x0 [ 222.158103][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.368108][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.423086][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.474031][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.538355][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.551697][ T5132] hub 2-1:4.0: 2 ports detected [ 222.600569][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.715339][ T6159] random: crng reseeded on system resumption [ 223.499052][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.591843][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.648577][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 223.677656][ T5132] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 223.700793][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.717972][ T5132] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 223.777524][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.787513][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.800214][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.810136][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.823021][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.832946][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.843461][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.855829][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.887959][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 223.959626][ T5132] usb 2-1: USB disconnect, device number 4 [ 224.045591][ T5086] Bluetooth: hci0: command tx timeout [ 224.051404][ T6162] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 224.101667][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.168160][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.194351][ T5901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.207937][ T29] audit: type=1400 audit(1720798752.430:316): avc: denied { rename } for pid=4515 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.218132][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.319754][ T29] audit: type=1400 audit(1720798752.430:317): avc: denied { unlink } for pid=4515 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.384742][ T29] audit: type=1400 audit(1720798752.440:318): avc: denied { create } for pid=4515 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 224.887258][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.904999][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.174884][ T6132] bridge_slave_0: entered allmulticast mode [ 225.425664][ T6132] bridge_slave_0: entered promiscuous mode [ 225.944109][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.998309][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.005700][ T6132] bridge_slave_1: entered allmulticast mode [ 226.050591][ T6132] bridge_slave_1: entered promiscuous mode [ 226.118185][ T5097] Bluetooth: hci0: command tx timeout [ 226.384095][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.443843][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.500117][ T1272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.508152][ T1272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.382581][ T6132] team0: Port device team_slave_0 added [ 227.421360][ T6132] team0: Port device team_slave_1 added [ 227.507796][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.525833][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.587139][ T6188] overlayfs: overlapping lowerdir path [ 227.634823][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.646341][ T4477] Bluetooth: hci1: command 0x0406 tx timeout [ 227.653759][ T5094] Bluetooth: hci3: command 0x0406 tx timeout [ 227.659889][ T5097] Bluetooth: hci4: command 0x0406 tx timeout [ 227.733173][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.770506][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.849021][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.920092][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.048128][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.199488][ T5086] Bluetooth: hci0: command tx timeout [ 228.275806][ T6196] netlink: 'syz.0.285': attribute type 1 has an invalid length. [ 228.318970][ T6196] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.285'. [ 230.520479][ T2835] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.871581][ T2835] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.626504][ T6200] netlink: 'syz.2.286': attribute type 4 has an invalid length. [ 235.290366][ T6132] hsr_slave_0: entered promiscuous mode [ 235.378812][ T6132] hsr_slave_1: entered promiscuous mode [ 235.447966][ T6132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.468354][ T6132] Cannot create hsr debugfs directory [ 235.612375][ T2835] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.667822][ T2835] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.795363][ T785] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 236.148287][ T785] usb 1-1: Using ep0 maxpacket: 32 [ 236.308663][ T785] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.369067][ T785] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.445724][ T785] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.468783][ T785] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 236.552558][ T785] usb 1-1: Product: syz [ 236.556770][ T785] usb 1-1: Manufacturer: syz [ 236.608777][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.616604][ T785] hub 1-1:4.0: USB hub found [ 236.638571][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.646979][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.659638][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.668476][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 236.677221][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.712203][ T2835] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.733294][ T2835] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.792807][ T29] audit: type=1804 audit(1720798764.830:319): pid=6220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.293" name="/newroot/79/bus/bus" dev="overlay" ino=447 res=1 errno=0 [ 237.244367][ T2835] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.275755][ T2835] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.478590][ T785] hub 1-1:4.0: 2 ports detected [ 237.751840][ T6231] overlayfs: overlapping lowerdir path [ 237.931110][ T785] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 237.937514][ T785] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 238.068442][ T785] usb 1-1: USB disconnect, device number 5 [ 238.618499][ T2835] bridge_slave_1: left allmulticast mode [ 238.624205][ T2835] bridge_slave_1: left promiscuous mode [ 238.643885][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.742154][ T2835] bridge_slave_0: left allmulticast mode [ 238.747868][ T2835] bridge_slave_0: left promiscuous mode [ 238.838531][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.929002][ T5086] Bluetooth: hci3: command tx timeout [ 239.267609][ T29] audit: type=1400 audit(1720798767.490:320): avc: denied { create } for pid=6236 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 239.655741][ T6237] trusted_key: syz.2.297 sent an empty control message without MSG_MORE. [ 240.479378][ T29] audit: type=1400 audit(1720798768.700:321): avc: denied { search } for pid=4515 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.008830][ T5086] Bluetooth: hci3: command tx timeout [ 243.078718][ T5086] Bluetooth: hci3: command tx timeout [ 245.178085][ T5086] Bluetooth: hci3: command tx timeout [ 245.489764][ T5086] block nbd2: Receive control failed (result -32) [ 245.560798][ T6257] block nbd2: shutting down sockets [ 245.816023][ T29] audit: type=1400 audit(1720798774.040:322): avc: denied { connect } for pid=6260 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 245.918665][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.964438][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.982326][ T2835] bond0 (unregistering): Released all slaves [ 246.148538][ T5229] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 246.350004][ T5229] usb 3-1: Using ep0 maxpacket: 32 [ 246.390487][ T5229] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 246.464159][ T5229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.576485][ T5229] usb 3-1: config 0 has no interfaces? [ 246.625202][ T5229] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 246.730918][ T5229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.890374][ T5229] usb 3-1: config 0 descriptor?? [ 247.176420][ T2835] IPVS: stopping master sync thread 5727 ... [ 247.900218][ T6276] overlayfs: overlapping lowerdir path [ 247.942524][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 248.511625][ T5136] usb 3-1: USB disconnect, device number 5 [ 248.572670][ T29] audit: type=1804 audit(1720798776.770:323): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.305" name="/newroot/85/bus/bus" dev="overlay" ino=486 res=1 errno=0 [ 248.869789][ T29] audit: type=1400 audit(1720798777.090:324): avc: denied { connect } for pid=6289 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.915235][ T2835] hsr_slave_0: left promiscuous mode [ 248.944456][ T29] audit: type=1400 audit(1720798777.100:325): avc: denied { setopt } for pid=6289 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.998260][ T2835] hsr_slave_1: left promiscuous mode [ 249.057394][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.059066][ T29] audit: type=1400 audit(1720798777.100:326): avc: denied { bind } for pid=6289 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.098287][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.168195][ T29] audit: type=1400 audit(1720798777.140:327): avc: denied { write } for pid=6289 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.199547][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.220129][ T29] audit: type=1400 audit(1720798777.280:328): avc: denied { read } for pid=6289 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.240020][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.395519][ T2835] veth1_macvtap: left promiscuous mode [ 249.422229][ T2835] veth0_macvtap: left promiscuous mode [ 249.447019][ T2835] veth1_vlan: left promiscuous mode [ 249.458826][ T2835] veth0_vlan: left promiscuous mode [ 251.228300][ T29] audit: type=1400 audit(1720798779.450:329): avc: denied { create } for pid=6305 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.318208][ T29] audit: type=1400 audit(1720798779.520:330): avc: denied { setopt } for pid=6305 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.392704][ T29] audit: type=1400 audit(1720798779.520:331): avc: denied { write } for pid=6305 comm="syz.2.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.158299][ T29] audit: type=1400 audit(1720798780.380:332): avc: denied { read } for pid=6312 comm="syz.2.313" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.249964][ T29] audit: type=1400 audit(1720798780.390:333): avc: denied { open } for pid=6312 comm="syz.2.313" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.416645][ T29] audit: type=1400 audit(1720798780.640:334): avc: denied { ioctl } for pid=6312 comm="syz.2.313" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.608935][ T29] audit: type=1400 audit(1720798780.810:335): avc: denied { map } for pid=6312 comm="syz.2.313" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.655674][ T29] audit: type=1400 audit(1720798780.880:336): avc: denied { set_context_mgr } for pid=6312 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 252.823932][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 252.934535][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 253.943568][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 254.320173][ T6326] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 254.510070][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.554429][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.585837][ T6224] bridge_slave_0: entered allmulticast mode [ 254.600653][ T6224] bridge_slave_0: entered promiscuous mode [ 254.640592][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.647831][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.686942][ T6224] bridge_slave_1: entered allmulticast mode [ 254.712064][ T6224] bridge_slave_1: entered promiscuous mode [ 255.017570][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.063595][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.088282][ T6132] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.132583][ T6132] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.520584][ T29] audit: type=1804 audit(1720798783.740:337): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.320" name="/newroot/13/bus/bus" dev="overlay" ino=93 res=1 errno=0 [ 255.587743][ T6132] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.650206][ T6132] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.799255][ T6224] team0: Port device team_slave_0 added [ 255.924767][ T6224] team0: Port device team_slave_1 added [ 256.471765][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.510728][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.575889][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.765204][ T2835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.870230][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.900044][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.009524][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.153257][ T2835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.829741][ T2835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.352362][ T6224] hsr_slave_0: entered promiscuous mode [ 258.424025][ T6224] hsr_slave_1: entered promiscuous mode [ 258.465208][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.496444][ T6224] Cannot create hsr debugfs directory [ 258.695254][ T6370] binder: 6366:6370 ioctl 4018620d 0 returned -22 [ 258.801372][ T2835] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.879858][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 260.772138][ T2835] bridge_slave_1: left allmulticast mode [ 260.800014][ T2835] bridge_slave_1: left promiscuous mode [ 260.816912][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.890189][ T2835] bridge_slave_0: left allmulticast mode [ 260.910580][ T2835] bridge_slave_0: left promiscuous mode [ 260.930166][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.405985][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.412514][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.931442][ T29] audit: type=1400 audit(1720798790.160:338): avc: denied { remount } for pid=6393 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 262.680886][ T5086] Bluetooth: hci2: command 0x0406 tx timeout [ 262.956762][ T29] audit: type=1804 audit(1720798791.180:339): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.333" name="/newroot/82/bus/bus" dev="overlay" ino=457 res=1 errno=0 [ 262.987150][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.076003][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.115975][ T2835] bond0 (unregistering): Released all slaves [ 263.927226][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.406930][ T2835] hsr_slave_0: left promiscuous mode [ 264.434459][ T2835] hsr_slave_1: left promiscuous mode [ 264.461106][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.551089][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.578806][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.766488][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.497110][ T2835] veth1_macvtap: left promiscuous mode [ 265.550414][ T2835] veth0_macvtap: left promiscuous mode [ 265.557599][ T2835] veth1_vlan: left promiscuous mode [ 265.778978][ T2835] veth0_vlan: left promiscuous mode [ 269.541876][ T6427] FAT-fs (nullb0): bogus number of reserved sectors [ 269.563200][ T6427] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 269.698461][ T29] audit: type=1400 audit(1720798797.900:340): avc: denied { write } for pid=6424 comm="syz.0.338" name="ptp0" dev="devtmpfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 270.101453][ T6439] binder: 6425:6439 ioctl 4018620d 0 returned -22 [ 270.238289][ T53] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 270.339410][ T6427] Falling back ldisc for pts0. [ 272.944726][ T6452] syz.1.340 (6452) used greatest stack depth: 21104 bytes left [ 273.125601][ T29] audit: type=1400 audit(1720798801.360:341): avc: denied { connect } for pid=6468 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.190964][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 273.193014][ T29] audit: type=1400 audit(1720798801.420:342): avc: denied { write } for pid=6468 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 273.355149][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 273.467588][ T29] audit: type=1400 audit(1720798801.690:343): avc: denied { getopt } for pid=6472 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.707899][ T29] audit: type=1400 audit(1720798805.930:344): avc: denied { getopt } for pid=6482 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 278.001866][ T29] audit: type=1400 audit(1720798806.230:345): avc: denied { read } for pid=6487 comm="syz.2.350" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 278.628574][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.640768][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.649524][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.662635][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.675654][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.684204][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.834971][ T6224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.912290][ T6224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.998238][ T6224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.192681][ T6224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.764598][ T53] Bluetooth: hci5: command tx timeout [ 282.848594][ T53] Bluetooth: hci5: command tx timeout [ 284.944826][ T53] Bluetooth: hci5: command tx timeout [ 286.170627][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.216151][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.229587][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.240211][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.250589][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 286.264095][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.848522][ T29] audit: type=1400 audit(1720798815.050:346): avc: denied { ioctl } for pid=6534 comm="syz.0.358" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 287.194884][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 287.357236][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.378443][ T29] audit: type=1400 audit(1720798815.600:347): avc: denied { bind } for pid=6546 comm="syz.2.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.671035][ T29] audit: type=1400 audit(1720798815.900:348): avc: denied { create } for pid=6553 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 287.719033][ T53] Bluetooth: hci5: command tx timeout [ 287.754761][ T29] audit: type=1400 audit(1720798815.900:349): avc: denied { getopt } for pid=6553 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 288.486161][ T53] Bluetooth: hci0: command tx timeout [ 288.573808][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.601370][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.613936][ T6494] bridge_slave_0: entered allmulticast mode [ 288.638527][ T6494] bridge_slave_0: entered promiscuous mode [ 288.741089][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.756692][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.772692][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.781392][ T6494] bridge_slave_1: entered allmulticast mode [ 288.801324][ T6494] bridge_slave_1: entered promiscuous mode [ 289.065214][ T2835] bridge_slave_1: left allmulticast mode [ 289.086703][ T2835] bridge_slave_1: left promiscuous mode [ 289.096300][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.116398][ T2835] bridge_slave_0: left allmulticast mode [ 289.141502][ T2835] bridge_slave_0: left promiscuous mode [ 289.173114][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.388561][ T6568] QAT: Stopping all acceleration devices. [ 290.228541][ T6578] binder: 6572:6578 ioctl 4018620d 0 returned -22 [ 290.454166][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.480984][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.514020][ T2835] bond0 (unregistering): Released all slaves [ 290.528289][ T53] Bluetooth: hci0: command tx timeout [ 290.683340][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.690631][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.794987][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.847056][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.050073][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.057300][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.395537][ T2835] hsr_slave_0: left promiscuous mode [ 292.128486][ T2835] hsr_slave_1: left promiscuous mode [ 292.191306][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.209093][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.598328][ T53] Bluetooth: hci0: command tx timeout [ 293.036280][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 293.124923][ T6602] FAT-fs (nullb0): bogus number of reserved sectors [ 293.140990][ T6602] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 293.171198][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 293.223106][ T29] audit: type=1400 audit(1720798821.440:350): avc: denied { read } for pid=6603 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 293.360004][ T6606] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 293.564449][ T53] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 293.605258][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.617107][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.625635][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.635909][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.644523][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.657109][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.885458][ T6607] Falling back ldisc for pts0. [ 294.293416][ T6494] team0: Port device team_slave_0 added [ 294.398859][ T6494] team0: Port device team_slave_1 added [ 294.679993][ T53] Bluetooth: hci0: command tx timeout [ 294.752027][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.782260][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.832925][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.894966][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 295.019480][ T6625] mac80211_hwsim hwsim7 •CTY<: renamed from wlan1 (while UP) [ 295.047347][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.080482][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.200751][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.464504][ T29] audit: type=1400 audit(1720798823.680:351): avc: denied { write } for pid=6636 comm="syz.2.378" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 295.858837][ T53] Bluetooth: hci4: command tx timeout [ 297.387803][ T6494] hsr_slave_0: entered promiscuous mode [ 297.449042][ T6494] hsr_slave_1: entered promiscuous mode [ 297.471081][ T6494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.495885][ T6494] Cannot create hsr debugfs directory [ 297.609360][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.618831][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.627299][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.640344][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.662679][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.671564][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.837586][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.854899][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.862974][ T6531] bridge_slave_0: entered allmulticast mode [ 297.872115][ T6531] bridge_slave_0: entered promiscuous mode [ 297.878613][ T53] Bluetooth: hci4: command tx timeout [ 297.967912][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.979839][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.987085][ T6531] bridge_slave_1: entered allmulticast mode [ 297.998452][ T6531] bridge_slave_1: entered promiscuous mode [ 298.614798][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.630698][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.033251][ T29] audit: type=1400 audit(1720798827.010:352): avc: denied { write } for pid=6659 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 299.397019][ T6610] chnl_net:caif_netlink_parms(): no params data found [ 299.617148][ T6531] team0: Port device team_slave_0 added [ 299.808487][ T53] Bluetooth: hci3: command tx timeout [ 299.822143][ T6666] QAT: Stopping all acceleration devices. [ 299.884593][ T6531] team0: Port device team_slave_1 added [ 299.958368][ T5086] Bluetooth: hci4: command tx timeout [ 300.226099][ T6675] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 300.331372][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.366786][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.431630][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.550048][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.566605][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.604174][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.116608][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.141130][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.158834][ T6610] bridge_slave_0: entered allmulticast mode [ 301.177174][ T6610] bridge_slave_0: entered promiscuous mode [ 301.287932][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.335835][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.345741][ T6610] bridge_slave_1: entered allmulticast mode [ 301.354313][ T6610] bridge_slave_1: entered promiscuous mode [ 301.467324][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.546694][ T6531] hsr_slave_0: entered promiscuous mode [ 301.554434][ T6531] hsr_slave_1: entered promiscuous mode [ 301.563079][ T6531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.571626][ T6531] Cannot create hsr debugfs directory [ 301.594682][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.695701][ T2835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.879065][ T5086] Bluetooth: hci3: command tx timeout [ 302.019541][ T6610] team0: Port device team_slave_0 added [ 302.038230][ T5086] Bluetooth: hci4: command tx timeout [ 302.081956][ T2835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.327617][ T6610] team0: Port device team_slave_1 added [ 302.401134][ T29] audit: type=1400 audit(1720798830.630:353): avc: denied { bind } for pid=6700 comm="syz.0.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 302.480561][ T2835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.789131][ T2835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.944173][ T6494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.002478][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.018256][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.087024][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.112748][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.125999][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.152383][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.248620][ T6494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.280542][ T6494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.317248][ T6494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.419773][ T29] audit: type=1400 audit(1720798831.640:354): avc: denied { watch_reads } for pid=6707 comm="syz.0.388" path="/109/net_prio.prioidx" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 303.458218][ T29] audit: type=1400 audit(1720798831.640:355): avc: denied { watch } for pid=6707 comm="syz.0.388" path="/109/net_prio.prioidx" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 303.701605][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 303.742905][ T6610] hsr_slave_0: entered promiscuous mode [ 303.764808][ T6610] hsr_slave_1: entered promiscuous mode [ 303.787743][ T6610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.799478][ T6610] Cannot create hsr debugfs directory [ 303.958570][ T5086] Bluetooth: hci3: command tx timeout [ 304.697427][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.714532][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.738937][ T6655] bridge_slave_0: entered allmulticast mode [ 304.761502][ T6655] bridge_slave_0: entered promiscuous mode [ 304.856295][ T2835] bridge_slave_1: left allmulticast mode [ 304.867368][ T2835] bridge_slave_1: left promiscuous mode [ 304.887196][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.905550][ T2835] bridge_slave_0: left allmulticast mode [ 304.948161][ T2835] bridge_slave_0: left promiscuous mode [ 304.954021][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.992496][ T2835] bridge_slave_1: left allmulticast mode [ 305.008189][ T2835] bridge_slave_1: left promiscuous mode [ 305.015215][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.060160][ T2835] bridge_slave_0: left allmulticast mode [ 305.065868][ T2835] bridge_slave_0: left promiscuous mode [ 305.078398][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.270178][ T5086] Bluetooth: hci3: command tx timeout [ 306.276907][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 306.468411][ T29] audit: type=1400 audit(1720798834.690:356): avc: denied { unmount } for pid=5084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.136247][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.148710][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.167160][ T2835] bond0 (unregistering): Released all slaves [ 307.288308][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.301527][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.313857][ T2835] bond0 (unregistering): Released all slaves [ 307.347442][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.358354][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.365700][ T6655] bridge_slave_1: entered allmulticast mode [ 307.376063][ T6655] bridge_slave_1: entered promiscuous mode [ 307.786717][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.805172][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.370910][ T6655] team0: Port device team_slave_0 added [ 308.409335][ T6655] team0: Port device team_slave_1 added [ 308.806121][ T2835] hsr_slave_0: left promiscuous mode [ 308.821401][ T2835] hsr_slave_1: left promiscuous mode [ 308.851276][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.867156][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.946477][ T2835] hsr_slave_0: left promiscuous mode [ 308.960730][ T2835] hsr_slave_1: left promiscuous mode [ 308.978516][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.011998][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.038576][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.053785][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.145573][ T2835] veth0_macvtap: left promiscuous mode [ 309.159172][ T2835] veth1_vlan: left promiscuous mode [ 309.164834][ T2835] veth0_vlan: left promiscuous mode [ 310.465410][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 310.599565][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 312.197873][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 312.249951][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 312.735257][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.746451][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.773659][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.830883][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.837882][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.865635][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.066454][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.316978][ T6655] hsr_slave_0: entered promiscuous mode [ 313.349688][ T6655] hsr_slave_1: entered promiscuous mode [ 313.472347][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.619096][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.626380][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.746022][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.753434][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.028180][ T6610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.063867][ T6610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.102638][ T6610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.338739][ T6610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.758085][ T29] audit: type=1400 audit(1720798843.980:357): avc: denied { getopt } for pid=6793 comm="syz.0.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.927531][ T6655] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.974304][ T6531] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.006133][ T6531] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.040594][ T6531] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.066506][ T6531] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.154769][ T6655] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.335459][ T6655] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.541977][ T6655] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.881275][ T2835] bridge_slave_1: left allmulticast mode [ 316.886979][ T2835] bridge_slave_1: left promiscuous mode [ 316.896047][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.915504][ T2835] bridge_slave_0: left allmulticast mode [ 316.935597][ T2835] bridge_slave_0: left promiscuous mode [ 316.943354][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.630963][ T2835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.665296][ T2835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.687451][ T2835] bond0 (unregistering): Released all slaves [ 318.387403][ T6655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.497959][ T6655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.640516][ T2835] hsr_slave_0: left promiscuous mode [ 318.652216][ T2835] hsr_slave_1: left promiscuous mode [ 318.662108][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.670275][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.691706][ T2835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.708349][ T2835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.745797][ T2835] veth1_macvtap: left promiscuous mode [ 318.756716][ T2835] veth0_macvtap: left promiscuous mode [ 318.768604][ T2835] veth1_vlan: left promiscuous mode [ 318.781536][ T2835] veth0_vlan: left promiscuous mode [ 319.024091][ T29] audit: type=1400 audit(1720798847.250:358): avc: denied { read } for pid=6819 comm="syz.0.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 319.790417][ T6826] ptrace attach of "./syz-executor exec"[5084] was attempted by " [ 320.280222][ T2835] team0 (unregistering): Port device team_slave_1 removed [ 320.466262][ T2835] team0 (unregistering): Port device team_slave_0 removed [ 321.097643][ T6655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 321.133273][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.149647][ T6655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 321.225848][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.353903][ T29] audit: type=1400 audit(1720798849.580:359): avc: denied { mount } for pid=6830 comm="syz.0.408" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 321.368387][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.430800][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.438120][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.490083][ T6831] netlink: 156 bytes leftover after parsing attributes in process `syz.0.408'. [ 321.515545][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.522894][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.800756][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.015055][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.070276][ T29] audit: type=1400 audit(1720798850.300:360): avc: denied { read write } for pid=6841 comm="syz.0.410" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 322.084544][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.100579][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.117934][ T29] audit: type=1400 audit(1720798850.300:361): avc: denied { open } for pid=6841 comm="syz.0.410" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 322.203444][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.210681][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.306311][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.404944][ T29] audit: type=1400 audit(1720798850.630:362): avc: denied { map } for pid=6841 comm="syz.0.410" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 322.467188][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.474795][ T29] audit: type=1400 audit(1720798850.660:363): avc: denied { execute } for pid=6841 comm="syz.0.410" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 322.591549][ T6494] veth0_vlan: entered promiscuous mode [ 322.612486][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.619704][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.666957][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.674310][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.787079][ T6494] veth1_vlan: entered promiscuous mode [ 322.844898][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.851980][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.030385][ T6655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.112864][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.129147][ T6494] veth0_macvtap: entered promiscuous mode [ 323.184339][ T6494] veth1_macvtap: entered promiscuous mode [ 323.372711][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.398849][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.429889][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.464097][ T6494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.485716][ T6494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.507355][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.660794][ T6494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.675962][ T6494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.687338][ T6494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.706673][ T6494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.779932][ T6610] veth0_vlan: entered promiscuous mode [ 323.883486][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.907041][ T6610] veth1_vlan: entered promiscuous mode [ 323.987276][ T6866] ptrace attach of "./syz-executor exec"[5084] was attempted by " [ 324.696577][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.713644][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.837985][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.846171][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.980844][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.330122][ T6610] veth0_macvtap: entered promiscuous mode [ 325.433147][ T6610] veth1_macvtap: entered promiscuous mode [ 325.533666][ T6531] veth0_vlan: entered promiscuous mode [ 325.574253][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.593133][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.625612][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.207053][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.221149][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.303953][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.316095][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.342399][ T6610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.373544][ T6610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.411233][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.505650][ T6531] veth1_vlan: entered promiscuous mode [ 326.648952][ T6610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.684965][ T6610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.694384][ T6610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.703738][ T6610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.120852][ T6531] veth0_macvtap: entered promiscuous mode [ 327.165436][ T29] audit: type=1400 audit(1720798855.390:364): avc: denied { setopt } for pid=6889 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.185118][ T29] audit: type=1400 audit(1720798855.410:365): avc: denied { write } for pid=6889 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 327.438470][ T6531] veth1_macvtap: entered promiscuous mode [ 327.475130][ T6655] veth0_vlan: entered promiscuous mode [ 327.633527][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.663775][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.682341][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.694173][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.704536][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.715250][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.762866][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.865410][ T6655] veth1_vlan: entered promiscuous mode [ 327.919014][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.921870][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.929211][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.964786][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.019299][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.030071][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.042825][ T6531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.055102][ T6531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.080326][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.175430][ T6531] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.185717][ T6531] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.228538][ T6531] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.244312][ T6531] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.413566][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.434960][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.532721][ T6655] veth0_macvtap: entered promiscuous mode [ 328.618237][ T6655] veth1_macvtap: entered promiscuous mode [ 328.758685][ T53] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 328.910221][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.955226][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.005739][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.033974][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.055332][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.084029][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.111489][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.144734][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.186845][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.232486][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.257169][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.285369][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.311861][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.328936][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.362007][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.377021][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.432368][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.475070][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.606248][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.647588][ T6655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.668168][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.674896][ T6655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.708088][ T6655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.741128][ T6655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.960523][ T6918] mac80211_hwsim hwsim19 •CTY<: renamed from wlan1 [ 330.110736][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.179064][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.649426][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.659813][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.667938][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.707729][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.719968][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 330.737178][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.342101][ T5086] Bluetooth: hci5: command 0x0406 tx timeout [ 332.898181][ T53] Bluetooth: hci1: command tx timeout [ 333.135947][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.264172][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.317846][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.441125][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.506868][ T29] audit: type=1400 audit(1720798861.730:366): avc: denied { execute } for pid=6948 comm="syz.1.437" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=2371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 333.533002][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.730093][ T29] audit: type=1400 audit(1720798861.940:367): avc: denied { create } for pid=6950 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 333.756554][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.784711][ T29] audit: type=1400 audit(1720798862.000:368): avc: denied { cmd } for pid=6950 comm="syz.3.439" path="socket:[17831]" dev="sockfs" ino=17831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 334.085468][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.238359][ T29] audit: type=1400 audit(1720798862.460:369): avc: denied { write } for pid=6963 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.261021][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.302312][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.919135][ T5095] Bluetooth: hci1: command tx timeout [ 338.538254][ T5086] Bluetooth: hci1: command tx timeout [ 338.668511][ T6976] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 339.098366][ T51] bridge_slave_1: left allmulticast mode [ 339.176930][ T51] bridge_slave_1: left promiscuous mode [ 339.216406][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.362104][ T51] bridge_slave_0: left allmulticast mode [ 339.367913][ T51] bridge_slave_0: left promiscuous mode [ 339.387790][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.598287][ T5095] Bluetooth: hci1: command tx timeout [ 340.966534][ T7022] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.457'. [ 340.999082][ T7022] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 341.348199][ T7026] XFS (nullb0): Invalid superblock magic number [ 341.461006][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.510115][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.556460][ T51] bond0 (unregistering): Released all slaves [ 341.652233][ T51] bond1 (unregistering): Released all slaves [ 342.056481][ T29] audit: type=1400 audit(1720798870.260:370): avc: denied { create } for pid=7032 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 342.153823][ T29] audit: type=1400 audit(1720798870.300:371): avc: denied { bind } for pid=7032 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 342.222040][ T29] audit: type=1400 audit(1720798870.400:372): avc: denied { write } for pid=7032 comm="syz.4.459" path="socket:[17139]" dev="sockfs" ino=17139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 342.377708][ T7042] netlink: 156 bytes leftover after parsing attributes in process `syz.1.461'. [ 342.748507][ T7051] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 342.776495][ T7051] CIFS: Unable to determine destination address [ 343.815836][ T6927] chnl_net:caif_netlink_parms(): no params data found [ 344.343168][ T7065] [ 344.345643][ T7065] ====================================================== [ 344.352667][ T7065] WARNING: possible circular locking dependency detected [ 344.359678][ T7065] 6.10.0-rc7-syzkaller-00141-g43db1e03c086 #0 Not tainted [ 344.366778][ T7065] ------------------------------------------------------ [ 344.373783][ T7065] syz.2.466/7065 is trying to acquire lock: [ 344.379676][ T7065] ffff8880b9238a80 (lock#11){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 344.390062][ T7065] [ 344.390062][ T7065] but task is already holding lock: [ 344.397416][ T7065] ffff8880b923ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 344.406891][ T7065] [ 344.406891][ T7065] which lock already depends on the new lock. [ 344.406891][ T7065] [ 344.417276][ T7065] [ 344.417276][ T7065] the existing dependency chain (in reverse order) is: [ 344.426276][ T7065] [ 344.426276][ T7065] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 344.433561][ T7065] _raw_spin_lock_nested+0x31/0x40 [ 344.439206][ T7065] raw_spin_rq_lock_nested+0x29/0x130 [ 344.445107][ T7065] sched_mm_cid_before_execve+0x114/0x5e0 [ 344.451351][ T7065] exit_signals+0x34d/0x960 [ 344.456395][ T7065] do_exit+0x54e/0x2ba0 [ 344.461082][ T7065] __x64_sys_exit+0x42/0x50 [ 344.466111][ T7065] do_syscall_64+0xcd/0x250 [ 344.471144][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.477578][ T7065] [ 344.477578][ T7065] -> #1 (&sighand->siglock){-.-.}-{2:2}: [ 344.485406][ T7065] _raw_spin_lock_irqsave+0x3a/0x60 [ 344.491139][ T7065] __lock_task_sighand+0xc2/0x340 [ 344.496726][ T7065] group_send_sig_info+0x290/0x300 [ 344.502383][ T7065] bpf_send_signal_common+0x2e8/0x3a0 [ 344.508285][ T7065] bpf_send_signal_thread+0x16/0x20 [ 344.514012][ T7065] ___bpf_prog_run+0x3e51/0xabd0 [ 344.519473][ T7065] __bpf_prog_run32+0xc1/0x100 [ 344.524787][ T7065] bpf_trace_run4+0x245/0x5a0 [ 344.530602][ T7065] __bpf_trace_mmap_lock_acquire_returned+0x134/0x180 [ 344.537912][ T7065] __mmap_lock_do_trace_acquire_returned+0x456/0x790 [ 344.545138][ T7065] lock_mm_and_find_vma+0xeb/0x6a0 [ 344.550807][ T7065] do_user_addr_fault+0x29c/0xe50 [ 344.556370][ T7065] exc_page_fault+0x5c/0xc0 [ 344.561422][ T7065] asm_exc_page_fault+0x26/0x30 [ 344.566800][ T7065] rep_movs_alternative+0x4a/0x70 [ 344.572360][ T7065] _copy_to_user+0xac/0xc0 [ 344.577314][ T7065] rng_dev_read+0x25d/0x720 [ 344.582342][ T7065] vfs_readv+0x6cb/0x8a0 [ 344.587130][ T7065] __x64_sys_preadv+0x22b/0x310 [ 344.592514][ T7065] do_syscall_64+0xcd/0x250 [ 344.597551][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.603985][ T7065] [ 344.603985][ T7065] -> #0 (lock#11){+.+.}-{2:2}: [ 344.610940][ T7065] __lock_acquire+0x2478/0x3b30 [ 344.616320][ T7065] lock_acquire+0x1b1/0x560 [ 344.621359][ T7065] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 344.628488][ T7065] stack_map_get_build_id_offset+0x5d9/0x7c0 [ 344.634992][ T7065] __bpf_get_stack+0x6bf/0x700 [ 344.640272][ T7065] bpf_get_stack_raw_tp+0x124/0x160 [ 344.645995][ T7065] ___bpf_prog_run+0x3e51/0xabd0 [ 344.651468][ T7065] __bpf_prog_run32+0xc1/0x100 [ 344.656773][ T7065] bpf_trace_run2+0x231/0x590 [ 344.661990][ T7065] __bpf_trace_tlb_flush+0xd2/0x110 [ 344.667734][ T7065] trace_tlb_flush+0xf3/0x170 [ 344.672984][ T7065] switch_mm_irqs_off+0x68b/0xbc0 [ 344.678540][ T7065] __schedule+0xd2b/0x5d00 [ 344.683489][ T7065] preempt_schedule_common+0x44/0xc0 [ 344.689323][ T7065] preempt_schedule_thunk+0x1a/0x30 [ 344.695049][ T7065] try_to_wake_up+0xc08/0x13e0 [ 344.700343][ T7065] wake_up_q+0x91/0x140 [ 344.705024][ T7065] futex_wake+0x43e/0x4e0 [ 344.709885][ T7065] do_futex+0x1e5/0x350 [ 344.714568][ T7065] __x64_sys_futex+0x1e1/0x4c0 [ 344.719862][ T7065] do_syscall_64+0xcd/0x250 [ 344.724894][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.731323][ T7065] [ 344.731323][ T7065] other info that might help us debug this: [ 344.731323][ T7065] [ 344.741547][ T7065] Chain exists of: [ 344.741547][ T7065] lock#11 --> &sighand->siglock --> &rq->__lock [ 344.741547][ T7065] [ 344.753761][ T7065] Possible unsafe locking scenario: [ 344.753761][ T7065] [ 344.761199][ T7065] CPU0 CPU1 [ 344.766556][ T7065] ---- ---- [ 344.771915][ T7065] lock(&rq->__lock); [ 344.776000][ T7065] lock(&sighand->siglock); [ 344.783123][ T7065] lock(&rq->__lock); [ 344.789722][ T7065] lock(lock#11); [ 344.793466][ T7065] [ 344.793466][ T7065] *** DEADLOCK *** [ 344.793466][ T7065] [ 344.801707][ T7065] 3 locks held by syz.2.466/7065: [ 344.806738][ T7065] #0: ffff8880b923ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 344.816686][ T7065] #1: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 344.826109][ T7065] #2: ffff88807ffa4418 (&mm->mmap_lock){++++}-{3:3}, at: stack_map_get_build_id_offset+0x1e8/0x7c0 [ 344.836906][ T7065] [ 344.836906][ T7065] stack backtrace: [ 344.842792][ T7065] CPU: 0 PID: 7065 Comm: syz.2.466 Not tainted 6.10.0-rc7-syzkaller-00141-g43db1e03c086 #0 [ 344.852772][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 344.862834][ T7065] Call Trace: [ 344.866114][ T7065] [ 344.869042][ T7065] dump_stack_lvl+0x116/0x1f0 [ 344.873744][ T7065] check_noncircular+0x31a/0x400 [ 344.878715][ T7065] ? __pfx_check_noncircular+0x10/0x10 [ 344.884198][ T7065] ? lockdep_lock+0xc6/0x200 [ 344.888887][ T7065] ? __pfx_lockdep_lock+0x10/0x10 [ 344.893920][ T7065] __lock_acquire+0x2478/0x3b30 [ 344.898793][ T7065] ? __pfx___lock_acquire+0x10/0x10 [ 344.904007][ T7065] ? lock_acquire+0x1b1/0x560 [ 344.908703][ T7065] lock_acquire+0x1b1/0x560 [ 344.913226][ T7065] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 344.920012][ T7065] ? __pfx_lock_acquire+0x10/0x10 [ 344.925059][ T7065] ? kvm_guest_state+0xfa/0x160 [ 344.929913][ T7065] ? perf_callchain_user+0x21c/0xa20 [ 344.935207][ T7065] ? down_read_trylock+0x1ed/0x3f0 [ 344.940322][ T7065] ? stack_map_get_build_id_offset+0x1e8/0x7c0 [ 344.946484][ T7065] __mmap_lock_do_trace_acquire_returned+0x97/0x790 [ 344.953089][ T7065] ? __mmap_lock_do_trace_acquire_returned+0x7f/0x790 [ 344.959865][ T7065] ? __pfx_get_perf_callchain+0x10/0x10 [ 344.965424][ T7065] stack_map_get_build_id_offset+0x5d9/0x7c0 [ 344.971413][ T7065] __bpf_get_stack+0x6bf/0x700 [ 344.976186][ T7065] ? __pfx___bpf_get_stack+0x10/0x10 [ 344.981480][ T7065] bpf_get_stack_raw_tp+0x124/0x160 [ 344.986693][ T7065] ? __pfx_bpf_get_stack_raw_tp+0x10/0x10 [ 344.992424][ T7065] ___bpf_prog_run+0x3e51/0xabd0 [ 344.997367][ T7065] ? __pfx_mark_lock+0x10/0x10 [ 345.002147][ T7065] __bpf_prog_run32+0xc1/0x100 [ 345.006919][ T7065] ? __pfx___bpf_prog_run32+0x10/0x10 [ 345.012297][ T7065] ? __pfx_lock_acquire+0x10/0x10 [ 345.017336][ T7065] ? __pfx___cant_migrate+0x10/0x10 [ 345.022539][ T7065] bpf_trace_run2+0x231/0x590 [ 345.027243][ T7065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 345.032454][ T7065] ? find_held_lock+0x2d/0x110 [ 345.037224][ T7065] ? psi_task_switch+0x20c/0x900 [ 345.042171][ T7065] __bpf_trace_tlb_flush+0xd2/0x110 [ 345.047385][ T7065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 345.053200][ T7065] ? kvm_sched_clock_read+0x11/0x20 [ 345.058420][ T7065] ? __phys_addr+0xc6/0x150 [ 345.062932][ T7065] trace_tlb_flush+0xf3/0x170 [ 345.067640][ T7065] switch_mm_irqs_off+0x68b/0xbc0 [ 345.072671][ T7065] ? calc_load_fold_active+0x80/0xd0 [ 345.077963][ T7065] __schedule+0xd2b/0x5d00 [ 345.082396][ T7065] ? sched_clock_cpu+0x6d/0x4d0 [ 345.087261][ T7065] ? rcu_is_watching+0x12/0xc0 [ 345.092026][ T7065] ? __pfx___schedule+0x10/0x10 [ 345.096882][ T7065] ? find_held_lock+0x2d/0x110 [ 345.101652][ T7065] ? try_to_wake_up+0x5d7/0x13e0 [ 345.106592][ T7065] ? preempt_schedule_thunk+0x1a/0x30 [ 345.111984][ T7065] preempt_schedule_common+0x44/0xc0 [ 345.117278][ T7065] preempt_schedule_thunk+0x1a/0x30 [ 345.122481][ T7065] try_to_wake_up+0xc08/0x13e0 [ 345.127253][ T7065] ? __pfx_try_to_wake_up+0x10/0x10 [ 345.132460][ T7065] ? __pfx_lock_release+0x10/0x10 [ 345.137501][ T7065] ? plist_check_head+0x9e/0x140 [ 345.142470][ T7065] wake_up_q+0x91/0x140 [ 345.146637][ T7065] ? do_raw_spin_unlock+0x172/0x230 [ 345.151840][ T7065] futex_wake+0x43e/0x4e0 [ 345.156190][ T7065] ? __pfx_futex_wake+0x10/0x10 [ 345.161055][ T7065] ? __pfx___might_resched+0x10/0x10 [ 345.166349][ T7065] do_futex+0x1e5/0x350 [ 345.170503][ T7065] ? __pfx_do_futex+0x10/0x10 [ 345.175183][ T7065] __x64_sys_futex+0x1e1/0x4c0 [ 345.179950][ T7065] ? __pfx___x64_sys_futex+0x10/0x10 [ 345.185251][ T7065] do_syscall_64+0xcd/0x250 [ 345.189769][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.195673][ T7065] RIP: 0033:0x7fae3ed75bd9 [ 345.200087][ T7065] Code: Unable to access opcode bytes at 0x7fae3ed75baf. [ 345.207093][ T7065] RSP: 002b:00007fae3fae40f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 345.215514][ T7065] RAX: ffffffffffffffda RBX: 00007fae3ef03f68 RCX: 00007fae3ed75bd9 [ 345.223478][ T7065] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae3ef03f6c [ 345.231439][ T7065] RBP: 00007fae3ef03f60 R08: 00007fae3fae5080 R09: 00007fae3fae46c0 [ 345.239401][ T7065] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fae3ef03f6c [ 345.247366][ T7065] R13: 000000000000000b R14: 00007fff1d81b6d0 R15: 00007fff1d81b7b8 [ 345.255361][ T7065] [ 345.258534][ C1] vkms_vblank_simulate: vblank timer overrun Connection to 10.128.10.4 closed by remote host. [ 346.518220][ T51] hsr_slave_0: left promiscuous mode [ 346.624481][ T51] hsr_slave_1: left promiscuous mode [ 346.659176][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.666636][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.710996][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.728345][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.780168][ T51] veth1_macvtap: left promiscuous mode [ 346.785752][ T51] veth0_macvtap: left promiscuous mode [ 346.796920][ T51] veth1_vlan: left promiscuous mode [ 346.807022][ T51] veth0_vlan: left promiscuous mode [ 347.147447][ T51] team0 (unregistering): Port device team_slave_1 removed [ 347.185698][ T51] team0 (unregistering): Port device team_slave_0 removed [ 347.934173][ T51] IPVS: stop unused estimator thread 0... [ 348.027190][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.112301][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.167728][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.221261][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.414725][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.492114][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.546191][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.599726][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.800604][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.872383][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.943133][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.031757][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.211001][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.271108][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.331387][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.391608][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.589790][ T51] bridge_slave_1: left allmulticast mode [ 349.595517][ T51] bridge_slave_1: left promiscuous mode [ 349.610969][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.623074][ T51] bridge_slave_0: left allmulticast mode [ 349.629187][ T51] bridge_slave_0: left promiscuous mode [ 349.635024][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.647828][ T51] bridge_slave_1: left allmulticast mode [ 349.654178][ T51] bridge_slave_1: left promiscuous mode [ 349.665588][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.676274][ T51] bridge_slave_0: left allmulticast mode [ 349.682952][ T51] bridge_slave_0: left promiscuous mode [ 349.690887][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.704767][ T51] bridge_slave_1: left allmulticast mode [ 349.712668][ T51] bridge_slave_1: left promiscuous mode [ 349.719095][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.732173][ T51] bridge_slave_0: left allmulticast mode [ 349.737856][ T51] bridge_slave_0: left promiscuous mode [ 349.743946][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.761845][ T51] bridge_slave_1: left allmulticast mode [ 349.773417][ T51] bridge_slave_1: left promiscuous mode [ 349.779564][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.792737][ T51] bridge_slave_0: left allmulticast mode [ 349.800363][ T51] bridge_slave_0: left promiscuous mode [ 349.806386][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.689275][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.702471][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.715190][ T51] bond0 (unregistering): Released all slaves [ 350.734840][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.746379][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.756878][ T51] bond0 (unregistering): Released all slaves [ 350.775839][ T51] bond0 (unregistering): Released all slaves [ 350.796239][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.807243][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.827775][ T51] bond0 (unregistering): Released all slaves [ 350.846292][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.857616][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.880711][ T51] bond0 (unregistering): Released all slaves [ 350.966929][ T29] audit: type=1400 audit(1720798879.190:373): avc: denied { setrlimit } for pid=7134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 351.993348][ T51] hsr_slave_0: left promiscuous mode [ 352.000926][ T51] hsr_slave_1: left promiscuous mode [ 352.006986][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.015132][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.023872][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.031628][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.045302][ T51] hsr_slave_0: left promiscuous mode [ 352.051609][ T51] hsr_slave_1: left promiscuous mode [ 352.057678][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.065454][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.074168][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.081612][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.093232][ T51] hsr_slave_0: left promiscuous mode [ 352.100171][ T51] hsr_slave_1: left promiscuous mode [ 352.106206][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.113797][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.122138][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.129586][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.143138][ T51] hsr_slave_0: left promiscuous mode [ 352.150109][ T51] hsr_slave_1: left promiscuous mode [ 352.156591][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.164556][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.172539][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.180187][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.193761][ T51] veth1_macvtap: left promiscuous mode [ 352.199531][ T51] veth0_macvtap: left promiscuous mode [ 352.205226][ T51] veth1_vlan: left promiscuous mode [ 352.210846][ T51] veth0_vlan: left promiscuous mode [ 352.217518][ T51] veth1_macvtap: left promiscuous mode [ 352.223311][ T51] veth0_macvtap: left promiscuous mode [ 352.229013][ T51] veth1_vlan: left promiscuous mode [ 352.234322][ T51] veth0_vlan: left promiscuous mode [ 352.241295][ T51] veth1_macvtap: left promiscuous mode [ 352.246828][ T51] veth0_macvtap: left promiscuous mode [ 352.252588][ T51] veth1_vlan: left promiscuous mode [ 352.257947][ T51] veth0_vlan: left promiscuous mode [ 352.265728][ T51] veth1_macvtap: left promiscuous mode [ 352.271312][ T51] veth0_macvtap: left promiscuous mode [ 352.276991][ T51] veth1_vlan: left promiscuous mode [ 352.283564][ T51] veth0_vlan: left promiscuous mode [ 352.931137][ T51] team0 (unregistering): Port device team_slave_1 removed [ 352.950514][ T51] team0 (unregistering): Port device team_slave_0 removed [ 353.301927][ T51] team0 (unregistering): Port device team_slave_1 removed [ 353.331088][ T51] team0 (unregistering): Port device team_slave_0 removed [ 353.718527][ T51] team0 (unregistering): Port device team_slave_1 removed [ 353.744530][ T51] team0 (unregistering): Port device team_slave_0 removed [ 354.084266][ T51] team0 (unregistering): Port device team_slave_1 removed [ 354.120658][ T51] team0 (unregistering): Port device team_slave_0 removed