last executing test programs: 4m37.240398689s ago: executing program 2 (id=105): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x3, 0xfa, {0x9, 0x21, 0x8, 0xcd, 0x1, {0x22, 0xf77}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc2, 0x3, 0xec}}}}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xd8fe}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, r1, 0x3559482e553b8fc3, 0x0, 0x0, {{0x5}, {@val={0x8, 0xe}, @void}}}, 0x1c}}, 0x0) 4m35.756880733s ago: executing program 2 (id=131): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 4m35.57821765s ago: executing program 2 (id=135): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000500)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000002c0)={{@host, 0x7}, 0x1, 0x0, 0x404}) 4m35.357847973s ago: executing program 2 (id=138): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x0, 0x3, 0x0, 0x2, r1}]) 4m35.096563324s ago: executing program 2 (id=143): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') 4m34.903135732s ago: executing program 2 (id=148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 4m19.82740089s ago: executing program 32 (id=148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 2m59.414533275s ago: executing program 5 (id=1599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0x11c, 0x30, 0x2, 0x70b52d, 0x25dfdbfd, {}, [{0x108, 0x1, [@m_connmark={0x104, 0xf, 0x0, 0x0, {{0xd}, {0x4}, {0xd2, 0x6, "94e4091eb47ee366395eb8ac98cb7229537d1ef3d6329b531aafb9875514e3509b969304180ed5c4e78994332c562deec2091dc9056832709b389ba7727a57d3bef3383500a0c66a00d9b2d43f946983b14dee84f69bc04b7d991e0416dd19b7a4d2d2fee292a5a0b161c375e01df5f87ccd3100fe30b1ec2b737be0f768f70398da6a1020fbdf31151d4a57c56101130b6f4ae333cbb9ec661add251f102f99828f268e21ddda282a265fc4bf01c389c26e4481257d3e511fb59082094887dcf4500799a4ab59057ea62d7cd11e"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x11c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m59.192768934s ago: executing program 5 (id=1604): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000000000000000000100000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m59.030164854s ago: executing program 5 (id=1607): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x17) 2m58.848949257s ago: executing program 5 (id=1611): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8b) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2m58.702452162s ago: executing program 5 (id=1615): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 2m58.429657528s ago: executing program 5 (id=1620): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 2m43.361084572s ago: executing program 33 (id=1620): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40905}, 0x0) 1m50.480939976s ago: executing program 1 (id=2668): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x1, 0x20c, 0x33, 0xfffffff8, 0x2000, 0x10000, 0xfff, r1}, &(0x7f0000000440)=0x20) 1m50.335593721s ago: executing program 1 (id=2670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a30000000"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a0101000e000000"], 0x14}}, 0x0) 1m50.188701278s ago: executing program 1 (id=2672): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x64, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xbc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x23, &(0x7f0000000100)={0x5, 0xf, 0x23, 0x1, [@generic={0x1e, 0x10, 0xb, "d6dd4ce530586df8c5d8caeb9f49019700000031a520781b9e69ec"}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1m48.465417763s ago: executing program 1 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 1m48.299195323s ago: executing program 1 (id=2706): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m47.945020566s ago: executing program 1 (id=2713): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m47.643132245s ago: executing program 34 (id=2713): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 49.703246033s ago: executing program 0 (id=3609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "061c8e5de93835ed", "999c8a7343f680746ffadc3b993270f7", "4ccdd50d", "8e39dd752b2eea11"}, 0x38) 49.398513209s ago: executing program 0 (id=3616): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000040)="6c477b50101cbe", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 43.309797868s ago: executing program 0 (id=3616): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000040)="6c477b50101cbe", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 32.844388378s ago: executing program 0 (id=3616): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000040)="6c477b50101cbe", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 22.412391485s ago: executing program 0 (id=3616): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000040)="6c477b50101cbe", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 6.952733922s ago: executing program 0 (id=3616): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000040)="6c477b50101cbe", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 5.011246095s ago: executing program 6 (id=4083): unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x1000) 3.509074928s ago: executing program 3 (id=4103): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3.379728447s ago: executing program 3 (id=4104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) dup2(0xffffffffffffffff, r1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0xe, @val=@iter={0x0}}, 0x20) 2.455342155s ago: executing program 7 (id=4106): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) 1.605419441s ago: executing program 4 (id=4108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb86dd61c313a0020411"], 0x23e) 1.523947267s ago: executing program 3 (id=4109): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r1, 0x5}, 0x8) 1.497073866s ago: executing program 7 (id=4110): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x17d) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sys_exit\x00', r1}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) 1.457260118s ago: executing program 3 (id=4111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 1.361944682s ago: executing program 7 (id=4112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000}) 1.188964556s ago: executing program 3 (id=4113): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) 1.178845377s ago: executing program 4 (id=4114): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x7, 0xa4, 0x0, 0x5, @tick=0x7, {0x5a, 0x1}, {}, @addr={0x80, 0x1}}], 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r1, 0x101, 0x1, 0x0, &(0x7f0000000000)) 1.050054139s ago: executing program 6 (id=4115): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="62ca84a34db85997cd07f98ebed9f8f40d6c780a1ccb6c3f0a421aa3730950aef7819ccae9d7bb8b3219e07d519f55405b0f5962cefce680b5691f9b7b23dc1f37ad6b2c3d123427a180c1cc11ec99aec96cb78b18bde25eeae90eaf55151e927e887f24ed5769698d66735046ebb83fd7edfe4d7bfbb80b1048de6830d5271c0e1e4154c4760d20", 0x88}, {&(0x7f0000000180)="e171fb5db1e71b81b37a4ea0908fcd5b2bd3836aec5c8d888ce327e8b893c8cc58e7545154e363ca", 0x28}, {&(0x7f00000001c0)="0099326c88d665e2715ebe9e6bb6cfb8af49a3baeacd9a0f70512ba95d1d96879943ee22d27be7", 0x27}, {&(0x7f0000000300)="dd5aa59c237132593954d0a618e1350cf757253877a2b950446c86d8cc1c25bae69191eb0e9fb1648dcc6d8ba1dd28b6ecc639b1f4bc58", 0x37}, {&(0x7f0000000340)="97f497310d29c71f80f71abaa21a50c4eb1a98e27278a4aed21b821291423aa5efceffb40e2611d6cbe91e1e800589485cd14b494f9cc29bfa912015788215f580fb019258dba062a6ec891a38497b249de95b5d414e7ad695de50a7893c3bda7e872082216cabc721e853", 0x6b}, {&(0x7f00000003c0)="a114253829952e44a7073934e80604e78bec9be719d5306dc7fa83a8a74a15919a001c4a8b2dc66f72755e795f92d4e80b1cd102a7ddaf9a4cb6e72ea12c8594e9bf06dfff790f8077c24ecbee80c1e0b6104a66d0ec568a8eac7ddf8ec66437af49f78a11585b06b106daddde4e302021209dead4d9280c8c67fc9d1fb6592fe2e1d65fbdfbf4fe6ef0adad3a73b746b91e0ae66a1f4b813c9d513a28161ec9d0461b6a3acf6a55059dc71551ff396694a8c66ed6", 0xb5}, {&(0x7f00000004c0)="6790df59ad14d44010545428ee1d7211d3cf78ef0efed1e6bc2e122b945d53edef2eed9853dedd1964ad516a82c16ab98d7ad4c87b917acf79c307690937a6691c38015860439a70e51a6e5c8987c6b39cd83495e241e7f8dfb8650791332340ef163bdd0ab5459460cdc8e2ecf84738520789", 0x73}], 0x7}}], 0x2, 0x800) 966.644185ms ago: executing program 3 (id=4116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 855.904938ms ago: executing program 6 (id=4117): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 835.019708ms ago: executing program 4 (id=4118): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 672.188689ms ago: executing program 4 (id=4119): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x0, 0x1, &(0x7f0000000040)='?', 0x1}) 671.50063ms ago: executing program 6 (id=4120): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000001f00)={0x7, 0x7, 0x7fff, 0x2, 0xc0, "d171a6307f026900", 0x40, 0x9835}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 522.749218ms ago: executing program 4 (id=4121): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee00) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 470.549796ms ago: executing program 6 (id=4122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 389.528132ms ago: executing program 7 (id=4123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)='&', 0x1}], 0x1) 274.226018ms ago: executing program 6 (id=4124): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='W', 0x1}, {&(0x7f00000002c0)="592eb75b3ad6fbbf04a8cdb64a61fce6", 0x10}, {&(0x7f0000000340)="14", 0x7fffefef}], 0x3}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/44}, {&(0x7f00000004c0)=""/96}, {&(0x7f0000000400)=""/86}], 0x100000000000007b, 0x0, 0x1003) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 273.630994ms ago: executing program 4 (id=4125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400012000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 193.037176ms ago: executing program 7 (id=4126): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r1 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 0s ago: executing program 7 (id=4127): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100}}}}) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0xc, 0xffffff7f00000000, 0x3000) kernel console output (not intermixed with test programs): ][T12222] netlink: 'syz.0.2715': attribute type 12 has an invalid length. [ 238.000869][T12222] netlink: 'syz.0.2715': attribute type 29 has an invalid length. [ 238.021238][T12222] netlink: 'syz.0.2715': attribute type 2 has an invalid length. [ 238.041850][T12222] netlink: 'syz.0.2715': attribute type 2 has an invalid length. [ 238.062938][T12222] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 238.081053][T12222] netlink: 'syz.0.2715': attribute type 37 has an invalid length. [ 238.092769][T12222] netlink: 'syz.0.2715': attribute type 2 has an invalid length. [ 238.457649][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 238.457733][ T29] audit: type=1400 audit(1739430324.493:683): avc: denied { accept } for pid=12235 comm="syz.6.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.465644][T12238] team0: entered promiscuous mode [ 238.513593][ T5875] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 238.553601][T12238] team_slave_0: entered promiscuous mode [ 238.571122][T12238] team_slave_1: entered promiscuous mode [ 238.610970][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.621588][T12237] team0: left promiscuous mode [ 238.623401][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.637565][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.647521][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.655325][ T5135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.675855][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 238.696499][ T5875] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 238.698193][T12237] team_slave_0: left promiscuous mode [ 238.716640][T12237] team_slave_1: left promiscuous mode [ 238.724964][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.731406][ T5875] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.744451][ T5875] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.848791][ T5875] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.889128][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.916819][ T5875] usb 1-1: Product: syz [ 238.931276][ T5875] usb 1-1: Manufacturer: syz [ 238.951511][ T5875] usb 1-1: SerialNumber: syz [ 238.997157][T12244] chnl_net:caif_netlink_parms(): no params data found [ 239.177990][ T5875] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 239.196642][ T5875] usb 1-1: USB disconnect, device number 24 [ 239.374774][T12244] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.392150][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.412378][T12244] bridge_slave_0: entered allmulticast mode [ 239.421316][T12244] bridge_slave_0: entered promiscuous mode [ 239.442336][T12244] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.450897][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.459590][T12244] bridge_slave_1: entered allmulticast mode [ 239.471439][T12244] bridge_slave_1: entered promiscuous mode [ 239.563349][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.591492][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.665582][T12244] team0: Port device team_slave_0 added [ 239.668822][ T29] audit: type=1326 audit(1739430325.703:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.6.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faee6d8cde9 code=0x0 [ 239.703611][T12244] team0: Port device team_slave_1 added [ 239.784974][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.805869][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.842092][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.887823][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.901527][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.947627][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.011169][T12244] hsr_slave_0: entered promiscuous mode [ 240.023736][T12244] hsr_slave_1: entered promiscuous mode [ 240.030368][T12244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.048678][T12244] Cannot create hsr debugfs directory [ 240.276941][T12244] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 240.289860][T12244] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 240.301449][T12244] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 240.314850][T12244] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 240.362365][ T29] audit: type=1400 audit(1739430326.393:685): avc: denied { create } for pid=12307 comm="syz.0.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 240.381906][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.391869][ T29] audit: type=1400 audit(1739430326.403:686): avc: denied { setopt } for pid=12307 comm="syz.0.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 240.426406][T12244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.480049][T12244] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.509591][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.516792][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.564839][T12312] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 240.574214][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.581357][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.833890][ T5135] Bluetooth: hci3: command tx timeout [ 240.921190][T12322] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.2757'. [ 241.172436][T12244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.539856][T12346] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 241.754053][T12244] veth0_vlan: entered promiscuous mode [ 241.772583][T12244] veth1_vlan: entered promiscuous mode [ 241.863775][T12244] veth0_macvtap: entered promiscuous mode [ 241.887055][T12244] veth1_macvtap: entered promiscuous mode [ 241.930460][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.952185][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.977422][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.997798][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.019264][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.051415][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.075963][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.102603][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.116608][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.123204][T12368] random: crng reseeded on system resumption [ 242.128599][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.133360][ T51] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 242.144237][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.163691][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.185104][T12244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.225038][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.250550][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.269466][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.282902][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.293675][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.305554][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.316609][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.339901][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.353410][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 242.359741][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.361997][ T51] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 242.382240][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.399833][ T51] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 242.418149][ T51] usb 1-1: Product: syz [ 242.422451][ T51] usb 1-1: Manufacturer: syz [ 242.426229][T12244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.432713][ T51] usb 1-1: SerialNumber: syz [ 242.445319][T12244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.463300][T12244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.465042][ T51] usb 1-1: config 0 descriptor?? [ 242.480232][T12244] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.492182][T12244] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.500334][ T51] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 242.662201][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 242.672638][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2778'. [ 242.779732][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.783129][ T29] audit: type=1400 audit(1739430328.813:687): avc: denied { ioctl } for pid=12367 comm="syz.4.2774" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.832531][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.861840][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.871095][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.913468][ T5135] Bluetooth: hci3: command tx timeout [ 242.959176][ T29] audit: type=1400 audit(1739430328.993:688): avc: denied { mounton } for pid=12244 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 242.983135][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.116557][ T51] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 243.205724][T12390] netlink: 'syz.6.2780': attribute type 1 has an invalid length. [ 243.278967][T12392] program syz.7.2782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.410854][ T51] usb 1-1: USB disconnect, device number 25 [ 243.817764][ T29] audit: type=1400 audit(1739430329.843:689): avc: denied { attach_queue } for pid=12414 comm="syz.4.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 243.852973][ T29] audit: type=1400 audit(1739430329.883:690): avc: denied { bind } for pid=12413 comm="syz.7.2792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.272091][ T29] audit: type=1400 audit(1739430330.303:691): avc: denied { watch watch_reads } for pid=12436 comm="syz.6.2802" path="/proc/332/net/unix" dev="proc" ino=4026534107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 244.297030][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.465800][T12445] batman_adv: batadv0: Adding interface: vlan0 [ 244.472015][T12445] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.535846][T12445] batman_adv: batadv0: Interface activated: vlan0 [ 244.737796][ T29] audit: type=1400 audit(1739430330.763:692): avc: denied { append } for pid=12459 comm="syz.7.2813" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.853664][ T29] audit: type=1400 audit(1739430330.893:693): avc: denied { read } for pid=12466 comm="syz.6.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.974961][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2821'. [ 244.995016][ T5135] Bluetooth: hci3: command tx timeout [ 245.093956][ T29] audit: type=1326 audit(1739430331.123:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12477 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee6d8cde9 code=0x7ffc0000 [ 245.117355][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.124282][ T5873] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 245.191889][ T29] audit: type=1326 audit(1739430331.123:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12477 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7faee6d8cde9 code=0x7ffc0000 [ 245.215310][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.231582][ T29] audit: type=1326 audit(1739430331.123:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12477 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee6d8cde9 code=0x7ffc0000 [ 245.289673][ T29] audit: type=1326 audit(1739430331.123:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12477 comm="syz.6.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faee6d8cde9 code=0x7ffc0000 [ 245.327166][ T5873] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 245.343624][ T5873] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 245.361325][ T5873] usb 1-1: config 0 has no interface number 0 [ 245.372158][ T5873] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.417954][ T5873] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 245.438036][ T5873] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 245.461559][ T5873] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 245.483150][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.500443][ T5873] usb 1-1: config 0 descriptor?? [ 245.507674][T12469] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 246.140020][ T5873] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input23 [ 246.341975][T12520] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 246.347020][ T5873] usb 1-1: USB disconnect, device number 26 [ 246.347089][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 246.349487][T12520] syzkaller1: linktype set to 780 [ 246.529319][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 246.549793][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2843'. [ 246.584142][T12532] QAT: failed to copy from user. [ 246.707224][ T29] audit: type=1326 audit(1739430332.743:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.7.2845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec7d78cde9 code=0x0 [ 246.842153][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'. [ 246.860340][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2849'. [ 246.890202][T12546] vlan2: entered allmulticast mode [ 246.899411][T12548] netlink: 'syz.6.2850': attribute type 6 has an invalid length. [ 246.914293][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.051401][T12554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.061066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.073401][ T5825] Bluetooth: hci3: command tx timeout [ 247.121654][T12559] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.2855'. [ 247.131125][T12559] openvswitch: netlink: Flow key attribute not present in set flow. [ 247.714392][ T1209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.763760][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2869'. [ 247.794572][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.961066][T12596] Failed to get privilege flags for destination (handle=0x2:0x7) [ 247.989235][T12598] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 248.028349][T12598] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 248.190696][ T5825] Bluetooth: hci4: unexpected event 0x06 length: 41 > 3 [ 248.433227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.942890][T12621] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2885'. [ 248.990692][T12621] netlink: 'syz.6.2885': attribute type 1 has an invalid length. [ 249.082122][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.093735][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.222789][ T51] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 249.392968][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 249.399794][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 249.440374][ T51] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 249.451726][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.470122][ T51] usb 5-1: Product: syz [ 249.472998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.475752][ T51] usb 5-1: Manufacturer: syz [ 249.506007][ T51] usb 5-1: SerialNumber: syz [ 249.537442][ T51] usb 5-1: config 0 descriptor?? [ 249.667229][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2896'. [ 249.955468][ T51] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 250.357571][ T51] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 250.378227][ T51] usb 5-1: USB disconnect, device number 12 [ 251.627357][T12698] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 252.058766][T12720] netlink: 'syz.4.2930': attribute type 39 has an invalid length. [ 252.513150][ T8] net_ratelimit: 4 callbacks suppressed [ 252.513168][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.530445][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.543092][ T5820] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 252.695867][ T5820] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.712801][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.749287][ T5820] usb 1-1: Product: syz [ 252.756708][ T5820] usb 1-1: Manufacturer: syz [ 252.761365][ T5820] usb 1-1: SerialNumber: syz [ 252.786588][ T5820] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.807153][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 253.096153][ T5820] usb 1-1: USB disconnect, device number 27 [ 253.509300][T12779] hsr0: entered promiscuous mode [ 253.533137][T12779] macsec1: entered allmulticast mode [ 253.538489][T12779] hsr0: entered allmulticast mode [ 253.562917][T12779] hsr_slave_0: entered allmulticast mode [ 253.569836][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.579789][T12779] hsr_slave_1: entered allmulticast mode [ 253.608751][T12779] hsr0: left allmulticast mode [ 253.614363][T12779] hsr_slave_0: left allmulticast mode [ 253.619927][T12779] hsr_slave_1: left allmulticast mode [ 253.793877][T12790] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2963'. [ 253.874438][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 253.884885][ T8] ath9k_htc: Failed to initialize the device [ 253.902531][ T5820] usb 1-1: ath9k_htc: USB layer deinitialized [ 254.275865][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 254.329337][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 254.329354][ T29] audit: type=1400 audit(1739430340.363:700): avc: denied { setopt } for pid=12814 comm="syz.7.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 254.505679][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 254.519239][T12823] bridge_slave_1: left allmulticast mode [ 254.525474][T12823] bridge_slave_1: left promiscuous mode [ 254.531383][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.566980][T12823] bridge_slave_0: left allmulticast mode [ 254.573072][T12823] bridge_slave_0: left promiscuous mode [ 254.578933][T12823] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.602823][ T5873] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 254.625530][T12827] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 254.643264][T12823] bridge0: left allmulticast mode [ 254.648752][T12827] overlayfs: missing 'lowerdir' [ 254.654424][T12823] bridge0: left promiscuous mode [ 254.771341][ T5873] usb 7-1: config 0 has an invalid interface number: 81 but max is 0 [ 254.790702][ T5873] usb 7-1: config 0 has no interface number 0 [ 254.802158][ T5873] usb 7-1: config 0 interface 81 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.816950][ T5873] usb 7-1: config 0 interface 81 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.853728][ T5873] usb 7-1: config 0 interface 81 has no altsetting 0 [ 254.882830][ T5873] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 254.911119][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.931383][ T5873] usb 7-1: config 0 descriptor?? [ 255.358786][ T5873] wacom 0003:056A:033B.0012: unknown main item tag 0xe [ 255.387132][ T5873] wacom 0003:056A:033B.0012: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 255.428260][ T5873] wacom 0003:056A:033B.0012: hidraw0: USB HID v0.40 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input81 [ 255.461241][ T5873] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.81/0003:056A:033B.0012/input/input24 [ 255.576126][ T5873] usb 7-1: USB disconnect, device number 9 [ 255.699485][ T29] audit: type=1400 audit(1739430341.733:701): avc: denied { connect } for pid=12856 comm="syz.7.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.805440][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.864433][ T5820] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 255.874009][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880415][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.962788][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 255.969158][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.979442][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.991351][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.001841][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 256.011767][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.028134][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.042052][ T8] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.051306][ T8] usb 5-1: Manufacturer: syz [ 256.064358][ T8] usb 5-1: config 0 descriptor?? [ 256.069511][ T5820] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.080767][ T5820] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.095834][ T5820] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 256.106432][ T5820] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 256.116586][ T5820] usb 1-1: Product: syz [ 256.120818][ T5820] usb 1-1: Manufacturer: syz [ 256.130523][ T5820] hub 1-1:4.0: USB hub found [ 256.150380][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3000'. [ 256.200538][T12867] team0 (unregistering): Port device team_slave_0 removed [ 256.220274][T12867] team0 (unregistering): Port device team_slave_1 removed [ 256.282242][T12869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.294000][T12869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.355385][ T5820] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 256.423199][ T8] rc_core: IR keymap rc-hauppauge not found [ 256.429790][ T8] Registered IR keymap rc-empty [ 256.437021][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.463136][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.505758][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 256.523583][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 256.539102][ T29] audit: type=1400 audit(1739430342.573:702): avc: denied { read } for pid=12874 comm="syz.6.3003" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 256.541166][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.563185][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.655162][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.684775][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.714713][ T1209] usb 1-1: USB disconnect, device number 28 [ 256.726000][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.753502][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.782857][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.813588][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.854140][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.884483][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.902846][ T8] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.934798][ T8] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 256.962946][ T8] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 256.989907][ T8] usb 5-1: USB disconnect, device number 13 [ 257.225266][T12910] netlink: 'syz.0.3015': attribute type 30 has an invalid length. [ 257.394123][ T5978] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 257.570552][ T5978] usb 7-1: Using ep0 maxpacket: 8 [ 257.589912][ T5978] usb 7-1: config 0 has no interfaces? [ 257.602847][ T5978] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.611951][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.646497][ T5978] usb 7-1: config 0 descriptor?? [ 257.705627][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3020'. [ 258.298033][ T8] usb 7-1: USB disconnect, device number 10 [ 259.224878][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3042'. [ 259.240756][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3042'. [ 259.285502][T12969] erspan0: entered promiscuous mode [ 259.311280][T12969] erspan0: left promiscuous mode [ 259.330674][T12975] openvswitch: netlink: Unknown nsh attribute 0 [ 259.635191][T12983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3049'. [ 261.823423][ T29] audit: type=1400 audit(1739430347.853:703): avc: denied { ioctl } for pid=13069 comm="syz.6.3090" path="socket:[39111]" dev="sockfs" ino=39111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.848130][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.029409][ T29] audit: type=1326 audit(1739430348.053:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf9b8cde9 code=0x7ffc0000 [ 262.110719][ T29] audit: type=1326 audit(1739430348.053:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf9b8cde9 code=0x7ffc0000 [ 262.134135][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.147015][ T29] audit: type=1326 audit(1739430348.053:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faaf9b8c9eb code=0x7ffc0000 [ 262.184137][ T29] audit: type=1326 audit(1739430348.053:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faaf9b8b750 code=0x7ffc0000 [ 262.227815][ T29] audit: type=1326 audit(1739430348.053:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf9b8cde9 code=0x7ffc0000 [ 262.241994][T13082] input: syz0 as /devices/virtual/input/input28 [ 262.302214][ T29] audit: type=1326 audit(1739430348.053:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf9b8cde9 code=0x7ffc0000 [ 262.335658][ T29] audit: type=1326 audit(1739430348.053:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7faaf9b8cde9 code=0x7ffc0000 [ 262.361839][ T29] audit: type=1326 audit(1739430348.053:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.4.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf9b8cde9 code=0x7ffc0000 [ 262.744201][T13099] netlink: 'syz.4.3104': attribute type 2 has an invalid length. [ 262.752065][T13099] netlink: 85376 bytes leftover after parsing attributes in process `syz.4.3104'. [ 263.008525][ T5873] IPVS: starting estimator thread 0... [ 263.032084][T13113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13113 comm=syz.3.3110 [ 263.134813][T13110] IPVS: using max 32 ests per chain, 76800 per kthread [ 263.443016][ T5978] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 263.552522][ T29] audit: type=1400 audit(1739430349.583:712): avc: denied { bind } for pid=13128 comm="syz.0.3119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 263.574281][T13128] delete_channel: no stack [ 263.627961][ T5978] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 263.639884][ T5978] usb 5-1: config 4 has no interface number 0 [ 263.663263][ T5978] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 263.698335][ T5978] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 263.718307][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.737013][ T5978] usb 5-1: Product: syz [ 263.741241][ T5978] usb 5-1: Manufacturer: syz [ 263.754460][ T5978] usb 5-1: SerialNumber: syz [ 264.207475][ T5978] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 264.233535][ T5978] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 264.270887][ T5978] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 264.287251][ T5978] usb 5-1: media controller created [ 264.305362][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.349544][ T5978] DVB: Unable to find symbol dib7000p_attach() [ 264.356290][ T5978] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 264.423294][ T5978] rc_core: IR keymap rc-dib0700-rc5 not found [ 264.431328][ T5978] Registered IR keymap rc-empty [ 264.444314][ T5978] dvb-usb: could not initialize remote control. [ 264.462736][ T5978] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 264.480166][ T5978] dib0700: There's no endpoint for remote controller [ 264.491640][T13152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3128'. [ 264.737780][ T5978] usb 5-1: USB disconnect, device number 14 [ 264.764534][ T5978] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 265.494341][T13194] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 265.532857][T13194] pim6reg0: persist enabled [ 265.544114][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3149'. [ 265.592845][T13194] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 265.603311][T13194] pim6reg0: persist disabled [ 266.134067][ T5873] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 266.227317][T13216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3157'. [ 266.245954][T13216] netlink: 'syz.6.3157': attribute type 7 has an invalid length. [ 266.262799][T13216] netlink: 'syz.6.3157': attribute type 8 has an invalid length. [ 266.278944][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3157'. [ 266.297342][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 266.319510][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.349813][ T5873] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 266.379939][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.421565][ T5873] usb 1-1: config 0 descriptor?? [ 266.848324][ T5873] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 266.861311][ T5873] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 266.901625][ T5873] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 266.912825][ T5873] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 266.939885][ T5873] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 266.970380][ T5873] elo 0003:04E7:0009.0013: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 267.007582][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'. [ 267.025203][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3165'. [ 267.051932][ T5873] usb 1-1: USB disconnect, device number 29 [ 267.247033][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 267.247048][ T29] audit: type=1400 audit(1739430353.283:730): avc: denied { search } for pid=13238 comm="syz.4.3167" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 267.353094][ T29] audit: type=1400 audit(1739430353.323:731): avc: denied { read } for pid=13238 comm="syz.4.3167" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 267.389665][ T29] audit: type=1400 audit(1739430353.323:732): avc: denied { open } for pid=13238 comm="syz.4.3167" path="/390/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 267.416528][ T29] audit: type=1400 audit(1739430353.373:733): avc: denied { unmount } for pid=9140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 267.474542][T13243] trusted_key: syz.7.3169 sent an empty control message without MSG_MORE. [ 267.569484][T13250] netlink: 'syz.3.3172': attribute type 29 has an invalid length. [ 267.581383][T13250] netlink: 'syz.3.3172': attribute type 29 has an invalid length. [ 267.621110][T13250] netlink: 508 bytes leftover after parsing attributes in process `syz.3.3172'. [ 267.640904][T13250] unsupported nla_type 58 [ 267.658137][ T29] audit: type=1400 audit(1739430353.693:734): avc: denied { read write } for pid=13255 comm="syz.0.3174" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.695144][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3175'. [ 267.709446][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3175'. [ 267.728739][ T29] audit: type=1400 audit(1739430353.723:735): avc: denied { open } for pid=13255 comm="syz.0.3174" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.818390][ T29] audit: type=1400 audit(1739430353.733:736): avc: denied { map } for pid=13255 comm="syz.0.3174" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.914810][ T29] audit: type=1400 audit(1739430353.733:737): avc: denied { execute } for pid=13255 comm="syz.0.3174" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 267.951838][ T29] audit: type=1400 audit(1739430353.793:738): avc: denied { ioctl } for pid=13255 comm="syz.0.3174" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.021827][T13270] pim6reg1: entered promiscuous mode [ 268.028381][T13270] pim6reg1: entered allmulticast mode [ 268.185799][ T29] audit: type=1400 audit(1739430354.223:739): avc: denied { watch } for pid=13275 comm="syz.0.3184" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.728038][T13294] netlink: 'syz.0.3193': attribute type 1 has an invalid length. [ 269.114429][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 269.313518][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.333299][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 269.378866][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.404628][ T9] usb 7-1: config 0 descriptor?? [ 269.603293][T13329] input: syz0 as /devices/virtual/input/input30 [ 269.664062][ T9] usb 7-1: USB disconnect, device number 11 [ 269.973749][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3217'. [ 270.195495][T13362] overlayfs: failed to clone upperpath [ 270.218900][T13362] overlayfs: failed to clone upperpath [ 270.829914][T13385] batadv_slave_1: entered promiscuous mode [ 270.861526][T13384] batadv_slave_1: left promiscuous mode [ 270.960230][T13390] netlink: 'syz.7.3236': attribute type 19 has an invalid length. [ 271.194592][T13403] loop7: detected capacity change from 0 to 4 [ 271.211791][T13402] C: renamed from team_slave_0 [ 271.246317][T13402] netlink: 'syz.6.3241': attribute type 2 has an invalid length. [ 271.255126][T13402] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3241'. [ 271.265661][T13403] loop7: detected capacity change from 4 to 3 [ 271.281492][T13402] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.305525][T12244] Dev loop7: unable to read RDB block 3 [ 271.331150][T12244] loop7: unable to read partition table [ 271.349404][T12244] loop7: partition table beyond EOD, truncated [ 271.378352][T13403] Dev loop7: unable to read RDB block 3 [ 271.394219][T13403] loop7: unable to read partition table [ 271.424509][T13403] loop7: partition table beyond EOD, truncated [ 271.454509][T13403] loop_reread_partitions: partition scan of loop7 (R%0Öå—ÊT·$7ñ)]W°ÝÈð?”18úá´;9ƒ×C?š-ôá…z׌¨€× ²žç»…97dª¥÷) failed (rc=-5) [ 271.709354][T13416] ip6gretap0: entered promiscuous mode [ 271.749738][T13416] ip6gretap0: left promiscuous mode [ 271.994254][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 272.175219][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 272.194757][ T8] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 272.205628][ T8] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 272.214496][ T8] usb 5-1: Manufacturer: syz [ 272.221064][ T8] usb 5-1: config 0 descriptor?? [ 272.274727][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 272.274752][ T29] audit: type=1400 audit(1739430358.303:747): avc: denied { read } for pid=13441 comm="syz.6.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.423741][T13447] loop9: detected capacity change from 0 to 7 [ 272.450990][T13447] Dev loop9: unable to read RDB block 7 [ 272.458758][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.467470][T13447] loop9: unable to read partition table [ 272.485744][T13447] loop9: partition table beyond EOD, truncated [ 272.514597][T13447] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 272.524351][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.549119][ T8] usb 5-1: Limiting number of CPorts to U8_MAX [ 272.582223][ T8] usb 5-1: Not enough endpoints found in device, aborting! [ 272.784186][ T5978] usb 5-1: USB disconnect, device number 15 [ 272.878323][T13430] lo: entered promiscuous mode [ 272.884433][T13430] tunl0: entered promiscuous mode [ 272.890339][T13430] gre0: entered promiscuous mode [ 272.898352][T13430] gretap0: entered promiscuous mode [ 272.903976][T13430] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.093119][ T5875] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 273.113855][ T51] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 273.146330][T13472] syz_tun: entered promiscuous mode [ 273.152129][T13472] syz_tun: left promiscuous mode [ 273.307756][ T51] usb 7-1: config index 0 descriptor too short (expected 4114, got 18) [ 273.334724][ T5875] usb 1-1: config 1 has an invalid interface number: 166 but max is 0 [ 273.356499][ T51] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 273.372790][ T5875] usb 1-1: config 1 has no interface number 0 [ 273.379012][ T5875] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=b6.97 [ 273.391643][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.415209][ T51] usb 7-1: Product: syz [ 273.419434][ T51] usb 7-1: Manufacturer: syz [ 273.430442][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.441882][ T51] usb 7-1: SerialNumber: syz [ 273.453695][ T51] usb 7-1: config 0 descriptor?? [ 273.497670][ T29] audit: type=1400 audit(1739430359.533:748): avc: denied { audit_write } for pid=13479 comm="syz.4.3276" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 273.685330][ T51] usb 7-1: USB disconnect, device number 12 [ 273.697335][ T5875] cdc_subset 1-1:1.166: probe with driver cdc_subset failed with error -22 [ 273.709614][ T29] audit: type=1326 audit(1739430359.743:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13483 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaf9b8cde9 code=0x7fc00000 [ 273.733008][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.847854][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3283'. [ 273.917334][ T5820] usb 1-1: USB disconnect, device number 30 [ 274.179567][T13509] 9pnet: p9_errstr2errno: server reported unknown error — [ 274.428986][ T29] audit: type=1326 audit(1739430360.453:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13483 comm="syz.4.3278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faaf9b8cde9 code=0x7fc00000 [ 274.436691][T13519] macsec3: entered promiscuous mode [ 274.523357][T13519] team0: entered promiscuous mode [ 274.562983][T13519] team_slave_0: entered promiscuous mode [ 274.577580][T13525] loop2: detected capacity change from 0 to 7 [ 274.583009][T13519] team_slave_1: entered promiscuous mode [ 274.589278][T13525] Dev loop2: unable to read RDB block 7 [ 274.589338][T13525] loop2: AHDI p2 p3 [ 274.589367][T13525] loop2: partition table partially beyond EOD, truncated [ 274.621426][T13525] loop2: p3 start 335544320 is beyond EOD, truncated [ 274.724614][T13519] macsec3: entered allmulticast mode [ 274.734633][T13519] team0: entered allmulticast mode [ 274.760779][T13519] team_slave_0: entered allmulticast mode [ 274.773296][T13519] team_slave_1: entered allmulticast mode [ 274.779866][T13519] team0: Device macsec3 is already an upper device of the team interface [ 274.793792][T13519] team0: left allmulticast mode [ 274.798736][T13519] team_slave_0: left allmulticast mode [ 274.825059][T13519] team_slave_1: left allmulticast mode [ 274.830651][T13519] team0: left promiscuous mode [ 274.841997][T13519] team_slave_0: left promiscuous mode [ 274.857027][T13519] team_slave_1: left promiscuous mode [ 275.541716][ T5135] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 275.549011][ T29] audit: type=1400 audit(1739430361.573:751): avc: denied { read } for pid=13552 comm="syz.0.3308" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 275.635854][T13553] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.666209][T13553] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 275.715889][T13553] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.741507][T13553] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.778118][T13553] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.809841][T13553] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.821823][T13553] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.847779][T13553] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.884475][T13553] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.914186][T13553] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 276.201745][T13579] io-wq is not configured for unbound workers [ 277.640048][ T5135] Bluetooth: hci2: command 0x0406 tx timeout [ 277.793571][ T5135] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.813496][ T5820] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 277.883171][ T5135] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.883831][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 277.939644][ T29] audit: type=1400 audit(1739430363.973:752): avc: denied { ioctl } for pid=13660 comm="syz.0.3353" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 277.964728][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.982910][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 277.996034][ T5820] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.005143][ T5820] usb 7-1: config 0 has no interface number 0 [ 278.011262][ T5820] usb 7-1: config 0 interface 184 has no altsetting 0 [ 278.052196][ T5820] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.072104][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.095336][ T5820] usb 7-1: Product: syz [ 278.099569][ T5820] usb 7-1: Manufacturer: syz [ 278.113318][ T5820] usb 7-1: SerialNumber: syz [ 278.120234][ T5820] usb 7-1: config 0 descriptor?? [ 278.138713][ T5820] smsc75xx v1.0.0 [ 278.270926][T13667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.451058][T13673] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.760689][ T29] audit: type=1400 audit(1739430364.783:753): avc: denied { ioctl } for pid=13683 comm="syz.3.3364" path="socket:[41880]" dev="sockfs" ino=41880 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.793180][ T5820] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 278.816161][ T5820] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 278.932500][T13692] syzkaller1: entered promiscuous mode [ 278.940539][T13692] syzkaller1: entered allmulticast mode [ 279.035746][ T5820] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 279.047655][ T5820] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 279.059852][ T5820] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 279.071745][ T5820] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 279.081629][ T5820] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 279.094657][ T5820] usb 7-1: USB disconnect, device number 13 [ 279.714357][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 279.873236][ T5825] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.912829][ T5820] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 279.954431][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 279.954439][ T5135] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.985437][ T29] audit: type=1400 audit(1739430366.023:754): avc: denied { relabelfrom } for pid=13727 comm="syz.4.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.006382][ T29] audit: type=1400 audit(1739430366.023:755): avc: denied { relabelto } for pid=13727 comm="syz.4.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.084284][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 280.093061][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.114489][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.124461][ T5820] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.145072][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.156710][ T5820] usb 7-1: config 0 descriptor?? [ 280.175093][ T5820] hub 7-1:0.0: USB hub found [ 280.295229][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 280.306598][T13739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3387'. [ 280.370614][ T5820] hub 7-1:0.0: config failed, hub has too many ports! (err -19) [ 280.539720][T13751] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 13751 comm: syz.4.3393) [ 280.552009][ T29] audit: type=1800 audit(1739430366.593:756): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3393" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=40768 res=0 errno=0 [ 280.780680][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 280.789758][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 280.798611][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 280.805868][ T5820] usbhid 7-1:0.0: can't add hid device: -32 [ 280.812035][ T5820] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 280.854034][ T5820] usb 7-1: USB disconnect, device number 14 [ 280.883579][ T5978] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 281.043816][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 281.073347][ T35] wlan0: Trigger new scan to find an IBSS to join [ 281.088114][ T5978] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 281.097402][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.105633][ T5978] usb 5-1: Product: syz [ 281.110520][ T5978] usb 5-1: Manufacturer: syz [ 281.118124][ T5978] usb 5-1: SerialNumber: syz [ 281.127235][ T5978] usb 5-1: config 0 descriptor?? [ 281.136069][ T5978] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 281.557147][ T5978] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 281.574041][T13784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.574549][ T5978] visor 5-1:0.0: probe with driver visor failed with error -5 [ 281.765365][ T29] audit: type=1400 audit(1739430367.803:757): avc: denied { watch } for pid=13793 comm="syz.0.3414" path="/643/file0" dev="tmpfs" ino=3313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.792582][ T5978] usb 5-1: USB disconnect, device number 16 [ 281.892834][ T8] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 281.953314][ T5135] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.033200][ T5135] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.044524][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 282.052508][ T8] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 282.065107][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.082832][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.091909][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.113994][ T8] usbtmc 7-1:16.0: bulk endpoints not found [ 282.124382][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 282.287180][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 282.296459][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.306618][ T9] usb 1-1: config 0 descriptor?? [ 282.321161][ T9] cp210x 1-1:0.0: cp210x converter detected [ 282.545445][T13788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.554298][T13788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.566274][ T8] usb 7-1: USB disconnect, device number 15 [ 282.719257][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 282.952590][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 283.184186][ T9] usb 1-1: USB disconnect, device number 31 [ 283.213134][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 283.242136][ T9] cp210x 1-1:0.0: device disconnected [ 283.484019][T13827] lo: entered promiscuous mode [ 283.494320][T13827] tunl0: entered promiscuous mode [ 283.500414][T13827] gre0: entered promiscuous mode [ 283.508142][T13827] gretap0: entered promiscuous mode [ 283.513483][T13827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 283.937408][ T29] audit: type=1400 audit(1739430369.973:758): avc: denied { mounton } for pid=13848 comm="syz.7.3440" path="/120/file0" dev="tmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 283.983545][ T29] audit: type=1400 audit(1739430369.993:759): avc: denied { mounton } for pid=13848 comm="syz.7.3440" path="/120/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 284.036778][T11480] wlan0: Trigger new scan to find an IBSS to join [ 284.283454][ T5978] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 284.330809][ T29] audit: type=1400 audit(1739430370.363:760): avc: denied { watch_sb } for pid=13865 comm="syz.4.3446" path="/437" dev="tmpfs" ino=2231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 284.443224][ T5978] usb 7-1: Using ep0 maxpacket: 8 [ 284.451563][ T5978] usb 7-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 284.461551][ T5978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.470578][ T5978] usb 7-1: Product: syz [ 284.475115][ T5978] usb 7-1: Manufacturer: syz [ 284.479812][ T5978] usb 7-1: SerialNumber: syz [ 284.487002][ T5978] usb 7-1: config 0 descriptor?? [ 284.494545][ T5978] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 284.754445][T13851] Invalid source name [ 284.760537][T13851] UBIFS error (pid: 13851): cannot open "./file0", error -22 [ 284.763088][ T29] audit: type=1326 audit(1739430370.793:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13849 comm="syz.0.3439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7cd8cde9 code=0x7fc00000 [ 284.947755][T13880] vlan2: entered promiscuous mode [ 284.956257][T13880] vlan2: entered allmulticast mode [ 285.484323][T13904] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3464'. [ 285.527480][ T5978] gspca_sonixj: reg_w err -71 [ 285.532252][ T5978] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 285.555935][ T5978] usb 7-1: USB disconnect, device number 16 [ 285.571541][ T29] audit: type=1400 audit(1739430371.603:762): avc: denied { write } for pid=13905 comm="syz.3.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.593308][ T1209] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 285.773709][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 285.798573][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.821044][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.860928][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 285.890137][ T1209] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 285.914666][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.925101][ T1209] usb 1-1: config 0 descriptor?? [ 286.262904][ T8] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 286.358666][ T1209] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 286.428202][ T1209] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 286.442778][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 286.468076][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.479278][ T1209] microsoft 0003:045E:07DA.0014: no inputs found [ 286.493136][ T8] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 286.502265][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.514653][ T1209] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 286.530102][ T8] usb 5-1: config 0 descriptor?? [ 286.619777][ T1209] usb 1-1: USB disconnect, device number 32 [ 286.968857][ T8] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 287.073606][ T1109] wlan0: Trigger new scan to find an IBSS to join [ 287.266900][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 287.349367][ T5978] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 287.372104][ T51] usb 5-1: USB disconnect, device number 17 [ 287.404702][ T29] audit: type=1326 audit(1739430373.443:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.0.3493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e7cd8cde9 code=0x0 [ 287.528768][ T5978] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.541105][ T5978] usb 7-1: config 0 has no interfaces? [ 287.551011][ T5978] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 287.561414][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.580604][ T5978] usb 7-1: config 0 descriptor?? [ 287.974776][ T1109] wlan0: Creating new IBSS network, BSSID d6:79:80:24:b5:6b [ 288.078235][T13957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.106321][T13957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.167570][ T8] usb 7-1: USB disconnect, device number 17 [ 288.444367][ T1209] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 288.605228][ T1209] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 288.618602][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.628991][ T1209] usb 5-1: config 0 descriptor?? [ 288.644861][ T1209] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 289.275849][T14018] netlink: 'syz.6.3516': attribute type 4 has an invalid length. [ 289.341838][ T29] audit: type=1400 audit(1739430375.373:764): avc: denied { read write } for pid=14021 comm="syz.7.3518" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 289.401241][ T29] audit: type=1400 audit(1739430375.373:765): avc: denied { open } for pid=14021 comm="syz.7.3518" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 289.650786][ T1209] gspca_stv06xx: I2C: Read error writing address: -71 [ 289.660689][ T1209] usb 5-1: USB disconnect, device number 18 [ 289.662455][T14036] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 289.682941][T14036] SELinux: failed to load policy [ 290.675239][T14069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.017840][T14083] geneve2: entered promiscuous mode [ 291.032759][T14083] geneve2: entered allmulticast mode [ 291.377612][ T29] audit: type=1400 audit(1739430377.413:766): avc: denied { setopt } for pid=14093 comm="syz.0.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 291.474191][ T29] audit: type=1400 audit(1739430377.503:767): avc: denied { read } for pid=14099 comm="syz.4.3551" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.510039][ T29] audit: type=1400 audit(1739430377.513:768): avc: denied { open } for pid=14099 comm="syz.4.3551" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.622320][ T29] audit: type=1400 audit(1739430377.543:769): avc: denied { ioctl } for pid=14099 comm="syz.4.3551" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 291.648546][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.700290][ T1209] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 291.800405][T14107] can0: slcan on pts0. [ 291.818757][T14109] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.3556'. [ 291.839758][T14109] openvswitch: netlink: Flow key attr not present in new flow. [ 291.862584][ T1209] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 291.884017][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.899238][ T1209] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.911076][ T1209] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 291.926586][ T1209] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 291.942366][ T1209] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 291.947230][T14105] can0 (unregistered): slcan off pts0. [ 291.951064][ T1209] usb 7-1: Manufacturer: syz [ 291.974379][ T1209] usb 7-1: config 0 descriptor?? [ 292.293710][ T5978] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 292.425896][ T1209] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 292.444693][ T1209] appleir 0003:05AC:8243.0016: No inputs registered, leaving [ 292.455278][ T1209] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 292.476966][ T5978] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 292.492910][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.518594][ T5978] usb 5-1: config 0 descriptor?? [ 293.387938][T14144] PKCS7: Unknown OID: [5] 0.0 [ 293.402932][T14144] PKCS7: Only support pkcs7_signedData type [ 293.582115][ T5978] usb 5-1: Cannot set autoneg [ 293.588074][ T5978] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 293.610882][ T5978] usb 5-1: USB disconnect, device number 19 [ 293.820331][T14161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.582540][ T5873] usb 7-1: USB disconnect, device number 18 [ 294.821808][ T29] audit: type=1326 audit(1739430380.853:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14196 comm="syz.7.3593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec7d78cde9 code=0x0 [ 294.844747][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.106451][T14203] IPVS: You probably need to specify IP address on multicast interface. [ 295.116906][T14203] IPVS: Error connecting to the multicast addr [ 295.799660][T14215] Bluetooth: hci0: load_link_keys: too big key_count value 35584 [ 296.283870][ T29] audit: type=1400 audit(1739430382.303:771): avc: denied { append } for pid=14238 comm="syz.7.3613" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.754788][ T1209] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 296.923644][ T29] audit: type=1400 audit(1739430382.953:772): avc: denied { write } for pid=14255 comm="syz.4.3622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 296.924690][ T1209] usb 7-1: Using ep0 maxpacket: 32 [ 296.953768][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 296.974394][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 296.984704][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 296.996061][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.005786][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.016361][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.025498][ T1209] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.038226][ T1209] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.049696][ T1209] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 297.058904][ T1209] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 297.070251][ T1209] usb 7-1: Product: syz [ 297.074799][ T1209] usb 7-1: Manufacturer: syz [ 297.083002][ T1209] hub 7-1:4.0: USB hub found [ 297.231012][ T29] audit: type=1400 audit(1739430383.263:773): avc: denied { map } for pid=14263 comm="syz.7.3623" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 297.325115][ T1209] hub 7-1:4.0: 2 ports detected [ 297.463876][T14257] chnl_net:caif_netlink_parms(): no params data found [ 297.529469][ T1209] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 297.536602][ T1209] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 297.576071][ T1209] usb 7-1: USB disconnect, device number 19 [ 297.715600][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.754496][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.761823][T14257] bridge_slave_0: entered allmulticast mode [ 297.774587][T14257] bridge_slave_0: entered promiscuous mode [ 297.783510][T14257] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.790789][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.811566][T14257] bridge_slave_1: entered allmulticast mode [ 297.818876][T14257] bridge_slave_1: entered promiscuous mode [ 297.920943][T14257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.936893][T14257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.044173][T14257] team0: Port device team_slave_0 added [ 298.058289][T14257] team0: Port device team_slave_1 added [ 298.112628][T14257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.130514][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.188250][T14257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.231243][T14257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.246274][T14257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.283796][T14257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.295089][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 298.378956][T14257] hsr_slave_0: entered promiscuous mode [ 298.399259][T14257] hsr_slave_1: entered promiscuous mode [ 298.409160][T14257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.439130][T14257] Cannot create hsr debugfs directory [ 298.454285][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 298.470942][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 298.487390][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.519051][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.541616][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.554017][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.583677][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.600226][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 298.604082][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.757583][T14257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.830227][ T9] usb 5-1: usb_control_msg returned -32 [ 298.835917][ T9] usbtmc 5-1:16.0: can't read capabilities [ 298.875063][T14257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.944342][T14257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.997728][T14257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.073083][ T5825] Bluetooth: hci2: command tx timeout [ 299.137028][T14257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.147043][T14257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.161029][T14257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.170315][T14257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.260529][T14257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.281410][T14257] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.305451][T11480] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.312633][T11480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.328088][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.335325][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.645895][T14257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.759924][T14257] veth0_vlan: entered promiscuous mode [ 299.807036][T14257] veth1_vlan: entered promiscuous mode [ 299.856333][T14257] veth0_macvtap: entered promiscuous mode [ 299.868632][T14257] veth1_macvtap: entered promiscuous mode [ 299.898263][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.909062][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.931850][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.947519][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.961762][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.999072][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.027274][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.063447][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.079731][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.090989][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.119149][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.130447][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.143925][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.156310][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.181946][T14257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.201314][T14357] netlink: 'syz.6.3661': attribute type 4 has an invalid length. [ 300.214309][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.239429][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.250498][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.262556][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.292811][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.306173][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.318771][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.330475][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.353004][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.365071][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.376287][T14257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.423861][T14257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.442083][T14257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.487618][T14257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.502368][T14257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.533713][T14257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.542464][T14257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.721506][T11480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.745374][T11480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.820178][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.835453][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.952032][ T29] audit: type=1400 audit(1739430386.983:774): avc: denied { setopt } for pid=14380 comm="syz.3.3671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.090811][ T5873] usb 5-1: USB disconnect, device number 20 [ 301.141950][ T29] audit: type=1400 audit(1739430387.173:775): avc: denied { write } for pid=14384 comm="syz.7.3673" name="/" dev="ocfs2_dlmfs" ino=45643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.164491][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.190981][T14385] (syz.7.3673,14385,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 301.253321][ T29] audit: type=1400 audit(1739430387.223:776): avc: denied { add_name } for pid=14384 comm="syz.7.3673" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.293998][ T29] audit: type=1400 audit(1739430387.223:777): avc: denied { create } for pid=14384 comm="syz.7.3673" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 301.339993][ T29] audit: type=1400 audit(1739430387.223:778): avc: denied { associate } for pid=14384 comm="syz.7.3673" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 301.724023][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3684'. [ 302.116515][T14425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 302.134001][T14425] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 302.141839][T14425] gretap1: entered promiscuous mode [ 302.148299][T14425] gretap1: entered allmulticast mode [ 302.631656][ T3591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.207710][ T5135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.221374][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.231215][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.241350][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.254095][ T5135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 303.260181][T14464] pimreg: entered allmulticast mode [ 303.270527][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.321588][ T29] audit: type=1400 audit(1739430389.343:779): avc: denied { write } for pid=14466 comm="syz.6.3709" path="socket:[45807]" dev="sockfs" ino=45807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.364575][T14464] pimreg: left allmulticast mode [ 303.611902][T14476] overlayfs: failed to clone upperpath [ 303.802522][T14461] chnl_net:caif_netlink_parms(): no params data found [ 303.814615][T14482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14482 comm=syz.6.3714 [ 303.915349][ T3591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.010825][ T3591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.090737][T14461] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.100890][T14461] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.110023][T14461] bridge_slave_0: entered allmulticast mode [ 304.120322][T14461] bridge_slave_0: entered promiscuous mode [ 304.134429][T14461] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.141692][T14461] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.149466][T14461] bridge_slave_1: entered allmulticast mode [ 304.158627][T14461] bridge_slave_1: entered promiscuous mode [ 304.233000][ T3591] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.360075][T14461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.386916][T14461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.456850][T14461] team0: Port device team_slave_0 added [ 304.487091][T14461] team0: Port device team_slave_1 added [ 304.579371][T14461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.597633][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.659958][T14461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.701019][T14461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.710051][T14461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.739103][T14461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.820693][ T3591] bridge_slave_1: left allmulticast mode [ 304.833452][ T3591] bridge_slave_1: left promiscuous mode [ 304.839298][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.940291][ T3591] bridge_slave_0: left allmulticast mode [ 304.957618][ T3591] bridge_slave_0: left promiscuous mode [ 304.975573][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.319190][ T5825] Bluetooth: hci2: command tx timeout [ 305.888882][ T3591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.902207][ T29] audit: type=1400 audit(1739430391.933:780): avc: denied { mount } for pid=14521 comm="syz.3.3732" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 305.933429][ T3591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.947573][ T3591] bond0 (unregistering): Released all slaves [ 306.071297][T14461] hsr_slave_0: entered promiscuous mode [ 306.085382][T14461] hsr_slave_1: entered promiscuous mode [ 306.091705][T14461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.101479][T14461] Cannot create hsr debugfs directory [ 306.442196][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3738'. [ 306.709939][ T3591] hsr_slave_0: left promiscuous mode [ 306.730219][ T3591] hsr_slave_1: left promiscuous mode [ 306.751124][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.779409][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.803876][ T3591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.812596][ T3591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.855877][ T3591] veth1_macvtap: left promiscuous mode [ 306.861591][ T3591] veth0_macvtap: left promiscuous mode [ 306.868221][ T3591] veth1_vlan: left promiscuous mode [ 306.874058][ T3591] veth0_vlan: left promiscuous mode [ 307.397850][ T5825] Bluetooth: hci2: command tx timeout [ 308.316415][ T3591] team0 (unregistering): Port device team_slave_1 removed [ 308.457623][ T3591] team0 (unregistering): Port device team_slave_0 removed [ 308.716350][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 309.069514][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 309.079526][T14619] netlink: 'syz.3.3772': attribute type 21 has an invalid length. [ 309.475629][ T5825] Bluetooth: hci2: command tx timeout [ 309.711339][T14626] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 310.241569][T14461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 310.251587][T14461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 310.271791][T14461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 310.306800][T14461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 310.456372][T14461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.483765][T14461] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.512593][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.519823][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.544401][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.551569][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.582147][T14461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.596274][T14461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.801338][T14461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.841664][T14666] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3791'. [ 310.855972][T14461] veth0_vlan: entered promiscuous mode [ 310.868430][T14461] veth1_vlan: entered promiscuous mode [ 310.901893][T14461] veth0_macvtap: entered promiscuous mode [ 310.912111][T14461] veth1_macvtap: entered promiscuous mode [ 310.955826][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.978551][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.995390][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.006271][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.017954][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.028697][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.039431][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.051530][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.080389][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.092321][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.105672][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.116404][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.126621][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.139261][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.152229][T14461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.189750][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.213878][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.226332][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.237560][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.247840][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.260516][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.271390][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.298832][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.309013][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.321436][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.332056][T14461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.345047][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.375193][T14678] program syz.6.3797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.390899][T14461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.418278][T14461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.439878][T14461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.452414][T14461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.461512][T14461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.560922][ T5825] Bluetooth: hci2: command tx timeout [ 311.664691][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.672561][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.721379][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.739743][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.096811][ T29] audit: type=1400 audit(1739430398.123:781): avc: denied { read } for pid=14699 comm="syz.4.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.359965][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 313.290888][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.812442][ T5135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.852897][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.870560][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.894332][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.904488][ T5135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 313.924497][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.258964][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.288498][T14758] chnl_net:caif_netlink_parms(): no params data found [ 314.385757][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.508286][T14792] loop2: detected capacity change from 0 to 7 [ 314.522110][T14792] Dev loop2: unable to read RDB block 7 [ 314.529109][T14792] loop2: unable to read partition table [ 314.535317][T14792] loop2: partition table beyond EOD, truncated [ 314.541726][T14792] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 314.600464][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.715143][T14758] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.722513][T14758] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.735589][T14758] bridge_slave_0: entered allmulticast mode [ 314.744882][T14758] bridge_slave_0: entered promiscuous mode [ 314.761581][T14758] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.777026][T14758] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.785168][T14758] bridge_slave_1: entered allmulticast mode [ 314.792215][T14758] bridge_slave_1: entered promiscuous mode [ 314.880388][ T29] audit: type=1400 audit(1739430400.913:782): avc: denied { listen } for pid=14803 comm="syz.7.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 314.888053][T14758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.937331][T14758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.946512][ T29] audit: type=1400 audit(1739430400.913:783): avc: denied { accept } for pid=14803 comm="syz.7.3850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 315.050617][T14758] team0: Port device team_slave_0 added [ 315.062888][ T51] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 315.071578][T14809] veth0_macvtap: left promiscuous mode [ 315.130391][ T1109] bridge_slave_1: left allmulticast mode [ 315.136322][ T1109] bridge_slave_1: left promiscuous mode [ 315.142002][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.155557][ T1109] bridge_slave_0: left allmulticast mode [ 315.161265][ T1109] bridge_slave_0: left promiscuous mode [ 315.167361][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.244432][ T51] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 315.258709][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.275311][ T51] usb 7-1: config 0 has no interfaces? [ 315.291809][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.312731][ T51] usb 7-1: config 0 has no interfaces? [ 315.343359][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.356868][ T51] usb 7-1: config 0 has no interfaces? [ 315.372432][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.397157][ T51] usb 7-1: config 0 has no interfaces? [ 315.404181][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.427618][ T51] usb 7-1: config 0 has no interfaces? [ 315.437887][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.448343][ T51] usb 7-1: config 0 has no interfaces? [ 315.463278][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.474389][ T51] usb 7-1: config 0 has no interfaces? [ 315.492124][ T51] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.515689][ T51] usb 7-1: config 0 has no interfaces? [ 315.523174][ T51] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 315.532308][ T51] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 315.551440][ T51] usb 7-1: Product: syz [ 315.557676][ T51] usb 7-1: Manufacturer: syz [ 315.562365][ T51] usb 7-1: SerialNumber: syz [ 315.613136][ T51] usb 7-1: config 0 descriptor?? [ 315.952636][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.965840][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.976420][ T1109] bond0 (unregistering): Released all slaves [ 315.991734][T14758] team0: Port device team_slave_1 added [ 316.045492][ T5825] Bluetooth: hci2: command tx timeout [ 316.182953][ T9] usb 7-1: USB disconnect, device number 20 [ 316.228271][T14823] bond0: entered promiscuous mode [ 316.239369][T14823] bond_slave_0: entered promiscuous mode [ 316.245280][T14823] bond_slave_1: entered promiscuous mode [ 316.363994][T14758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.381639][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.410256][ T5978] IPVS: starting estimator thread 0... [ 316.466959][T14758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.523551][T14829] IPVS: using max 24 ests per chain, 57600 per kthread [ 316.560984][T14758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.577627][T14758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.642802][T14758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.880186][ T1109] hsr_slave_0: left promiscuous mode [ 316.887297][ T1109] hsr_slave_1: left promiscuous mode [ 316.893314][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.900916][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.912050][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.922429][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.959444][ T1109] veth1_macvtap: left promiscuous mode [ 316.966666][ T1109] veth0_macvtap: left promiscuous mode [ 316.972286][ T1109] veth1_vlan: left promiscuous mode [ 316.977996][ T1109] veth0_vlan: left promiscuous mode [ 317.326807][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.349815][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.976180][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 318.061456][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 318.114859][ T5825] Bluetooth: hci2: command tx timeout [ 319.032061][T14758] hsr_slave_0: entered promiscuous mode [ 319.046016][T14758] hsr_slave_1: entered promiscuous mode [ 319.083392][T14758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.102730][T14758] Cannot create hsr debugfs directory [ 319.456890][T14866] vlan3: entered promiscuous mode [ 319.929485][T14758] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.958239][T14758] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.011124][T14758] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.028142][T14758] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.193523][ T5825] Bluetooth: hci2: command tx timeout [ 320.206017][T14758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.228668][T14758] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.241459][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.248684][T11472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.267096][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.274272][T11472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.365629][T14896] input: syz0 as /devices/virtual/input/input32 [ 320.516840][T11472] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.737444][T14758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.843375][T14758] veth0_vlan: entered promiscuous mode [ 320.852857][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 320.863948][T14758] veth1_vlan: entered promiscuous mode [ 320.915266][T14758] veth0_macvtap: entered promiscuous mode [ 320.937720][T14758] veth1_macvtap: entered promiscuous mode [ 320.978447][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.990335][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.016874][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.023315][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.042876][ T9] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 321.063360][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.074947][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.087143][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.094308][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.101350][ T9] usb 7-1: Product: syz [ 321.121206][ T9] usb 7-1: Manufacturer: syz [ 321.132818][ T9] usb 7-1: SerialNumber: syz [ 321.149612][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.163301][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.174403][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.185040][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.195627][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.206014][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.216817][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.226739][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.239089][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.250238][T14758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.279073][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.308275][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.327910][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.340546][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.350772][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.355625][T14911] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 321.368559][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.379691][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.398675][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.415093][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.441484][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.457541][T14758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.479889][T14758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.497964][T14758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.540440][T14932] ip6tnl0: entered promiscuous mode [ 321.547541][T14932] vlan2: entered promiscuous mode [ 321.565823][T14932] ip6tnl0: left promiscuous mode [ 321.620403][T14758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.629734][T14758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.641803][T14758] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.650931][T14758] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.882280][T11480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.924575][T11480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.997750][T11501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.030150][T11501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.219264][ T9] cdc_ncm 7-1:1.0: bind() failure [ 322.259139][ T9] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 322.266439][ T9] cdc_ncm 7-1:1.1: bind() failure [ 322.303455][ T9] usb 7-1: USB disconnect, device number 21 [ 323.649132][T11501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.878443][T11501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.956024][T11501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.031165][T11501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.223921][T11501] bridge_slave_1: left allmulticast mode [ 324.229660][T11501] bridge_slave_1: left promiscuous mode [ 324.262381][ T29] audit: type=1400 audit(1739430410.293:784): avc: denied { listen } for pid=14996 comm="syz.6.3932" lport=47914 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 324.288959][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.373675][T11501] bridge_slave_0: left allmulticast mode [ 324.381753][T11501] bridge_slave_0: left promiscuous mode [ 324.406153][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.572609][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3938'. [ 324.771417][ T5135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.810783][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.828172][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.836590][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.854806][ T5135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 324.862295][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.268485][T15024] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 325.551290][T11501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.564212][T11501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.576248][T11501] bond0 (unregistering): Released all slaves [ 325.804487][T15036] Set syz1 is full, maxelem 65536 reached [ 326.073831][T15012] chnl_net:caif_netlink_parms(): no params data found [ 326.386883][T11501] hsr_slave_0: left promiscuous mode [ 326.403395][T11501] hsr_slave_1: left promiscuous mode [ 326.409574][T11501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.419152][T11501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.445711][T11501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.473077][T11501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.521012][T11501] veth1_macvtap: left promiscuous mode [ 326.543552][T11501] veth0_macvtap: left promiscuous mode [ 326.549191][T11501] veth1_vlan: left promiscuous mode [ 326.557452][T11501] veth0_vlan: left promiscuous mode [ 326.745182][ T29] audit: type=1400 audit(1739430412.773:785): avc: denied { read } for pid=15069 comm="syz.3.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 326.913052][ T5135] Bluetooth: hci2: command tx timeout [ 327.905689][T15097] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3970'. [ 328.473421][ T51] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 328.557729][T11501] team0 (unregistering): Port device team_slave_1 removed [ 328.633768][ T51] usb 7-1: Using ep0 maxpacket: 32 [ 328.647231][T11501] team0 (unregistering): Port device team_slave_0 removed [ 328.654250][ T8] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 328.658297][ T51] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 328.694111][ T51] usb 7-1: config 0 has no interface number 0 [ 328.718700][ T51] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 328.744504][ T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.752550][ T51] usb 7-1: Product: syz [ 328.757092][ T51] usb 7-1: Manufacturer: syz [ 328.776392][ T51] usb 7-1: SerialNumber: syz [ 328.799916][ T51] usb 7-1: config 0 descriptor?? [ 328.808724][ T51] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.834066][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 328.851851][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 328.872411][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.892853][ T8] usb 5-1: Product: syz [ 328.897536][ T8] usb 5-1: Manufacturer: syz [ 328.902169][ T8] usb 5-1: SerialNumber: syz [ 328.993987][ T5135] Bluetooth: hci2: command tx timeout [ 329.047923][ T51] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 329.061165][ T51] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 329.330936][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.343044][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.360665][ T8] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 329.573688][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 329.583011][ T51] usb 7-1: USB disconnect, device number 22 [ 329.590555][ T51] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 329.604338][ T51] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 329.629464][ T51] quatech2 7-1:0.51: device disconnected [ 329.903785][T15012] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.911517][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.919548][T15012] bridge_slave_0: entered allmulticast mode [ 329.938649][T15012] bridge_slave_0: entered promiscuous mode [ 329.953441][T15012] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.960888][T15012] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.969150][T15012] bridge_slave_1: entered allmulticast mode [ 329.977507][T15012] bridge_slave_1: entered promiscuous mode [ 330.060542][T15012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.105548][T15012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.206651][T15012] team0: Port device team_slave_0 added [ 330.252160][T15012] team0: Port device team_slave_1 added [ 331.074141][ T5135] Bluetooth: hci2: command tx timeout [ 331.446653][ T5873] usb 5-1: USB disconnect, device number 21 [ 331.458243][ T5873] usblp0: removed [ 333.152931][ T5135] Bluetooth: hci2: command tx timeout [ 333.412366][T15012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.440572][T15012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.466496][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.514468][ T29] audit: type=1400 audit(1739430419.523:786): avc: denied { mount } for pid=15151 comm="syz.6.3992" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 333.533243][T15012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.583100][ T29] audit: type=1400 audit(1739430419.533:787): avc: denied { unmount } for pid=15151 comm="syz.6.3992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 333.681443][T15012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.706448][T15012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.732362][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.832848][T15012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.089003][T15012] hsr_slave_0: entered promiscuous mode [ 334.089746][T15164] netlink: 'syz.7.3997': attribute type 1 has an invalid length. [ 334.104428][T15012] hsr_slave_1: entered promiscuous mode [ 334.110696][T15012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.124377][T15012] Cannot create hsr debugfs directory [ 335.047397][T15190] vti0: entered promiscuous mode [ 335.302441][T15012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 335.330930][T15012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 335.353590][T15012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 335.370641][T15012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 335.527597][T15207] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4016'. [ 335.560388][T15012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.587834][T15012] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.615058][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.622234][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.647648][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.654812][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.960819][T15012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.065479][T15012] veth0_vlan: entered promiscuous mode [ 336.116810][T15012] veth1_vlan: entered promiscuous mode [ 336.190191][T15012] veth0_macvtap: entered promiscuous mode [ 336.223089][T15012] veth1_macvtap: entered promiscuous mode [ 336.266981][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.294713][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.316712][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.370876][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.390667][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.404385][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.424613][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.436298][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.448365][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.459352][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.481426][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.503738][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.522446][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.541180][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.569461][T15012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.622858][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.636123][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.648374][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.699093][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.728228][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.762061][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.803849][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.842151][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.859171][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.871398][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.908418][T15012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.932749][T15012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.967813][T15012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.976410][T15251] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 336.983805][ T5978] IPVS: starting estimator thread 0... [ 336.992104][T15012] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.012137][T15012] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.043784][T15012] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.052543][T15012] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.104802][T15256] IPVS: using max 26 ests per chain, 62400 per kthread [ 337.214349][T11501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.222215][T11501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.369292][T11501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.407538][T11501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.783556][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 337.933273][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 337.974743][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.987037][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.999086][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 338.014978][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.031478][ T9] usb 5-1: config 0 descriptor?? [ 338.458954][ T9] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 338.667095][ T9] ft260 0003:0403:6030.0017: chip code: 6424 8183 [ 338.829390][T15314] bond_slave_1: entered promiscuous mode [ 338.853652][T15314] bond_slave_1: left promiscuous mode [ 338.876134][ T9] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 339.077649][ T9] ft260 0003:0403:6030.0017: failed to retrieve status: -71, no wakeup [ 339.097625][ T9] ft260 0003:0403:6030.0017: failed to retrieve status: -71 [ 339.110994][ T9] ft260 0003:0403:6030.0017: failed to reset I2C controller: -71 [ 339.127164][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.141340][ T9] usb 5-1: USB disconnect, device number 22 [ 339.762350][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.939219][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.147104][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.201262][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.214620][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.225802][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.240101][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.248231][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.261559][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.412471][ T1109] bridge_slave_1: left allmulticast mode [ 340.418428][ T1109] bridge_slave_1: left promiscuous mode [ 340.425241][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.447491][ T1109] bridge_slave_0: left allmulticast mode [ 340.463791][ T1109] bridge_slave_0: left promiscuous mode [ 340.469565][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.621098][T15352] vivid-000: disconnect [ 340.650993][T15346] vivid-000: reconnect [ 340.915339][T15366] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 341.668754][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.681281][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.696008][ T1109] bond0 (unregistering): Released all slaves [ 341.756137][T15365] geneve2: entered promiscuous mode [ 341.761413][T15365] geneve2: entered allmulticast mode [ 342.088185][T15396] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4098'. [ 342.344324][ T1109] hsr_slave_0: left promiscuous mode [ 342.353015][ T5825] Bluetooth: hci2: command tx timeout [ 342.362266][ T1109] hsr_slave_1: left promiscuous mode [ 342.368600][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.377026][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.397868][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.416522][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.451465][ T1109] veth1_macvtap: left promiscuous mode [ 342.461053][ T1109] veth0_macvtap: left promiscuous mode [ 342.467722][ T1109] veth1_vlan: left promiscuous mode [ 342.473181][ T1109] veth0_vlan: left promiscuous mode [ 342.542982][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 342.711276][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 342.720969][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.743759][ T9] usb 5-1: config 0 descriptor?? [ 342.752054][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 343.158170][ T9] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 343.265137][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 343.368694][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 343.559904][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 343.580781][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 343.604337][ T9] cpia1 5-1:0.0: unexpected systemstate: 00 [ 343.612020][ T9] usb 5-1: USB disconnect, device number 23 [ 344.311527][T15427] sctp: [Deprecated]: syz.3.4109 (pid 15427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.311527][T15427] Use struct sctp_sack_info instead [ 344.414984][T15337] chnl_net:caif_netlink_parms(): no params data found [ 344.434743][ T5825] Bluetooth: hci2: command tx timeout [ 344.537188][T15431] netlink: 'syz.3.4111': attribute type 3 has an invalid length. [ 344.824282][T15337] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.831417][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.840051][T15337] bridge_slave_0: entered allmulticast mode [ 344.847896][ T29] audit: type=1400 audit(1739430430.873:788): avc: denied { getopt } for pid=15439 comm="syz.4.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 344.868590][T15337] bridge_slave_0: entered promiscuous mode [ 344.895344][T15337] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.912070][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.922032][T15337] bridge_slave_1: entered allmulticast mode [ 344.938429][T15337] bridge_slave_1: entered promiscuous mode [ 345.105829][T15337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.142190][T15337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.306263][T15337] team0: Port device team_slave_0 added [ 345.337806][T15337] team0: Port device team_slave_1 added [ 345.457646][T15337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.474640][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.543817][T15337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.589508][T15337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.612262][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.677736][T15337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.757126][T15337] hsr_slave_0: entered promiscuous mode [ 345.772349][T15337] hsr_slave_1: entered promiscuous mode [ 345.789356][T15337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.812230][T15337] Cannot create hsr debugfs directory [ 345.823492][ T5913] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 450.892663][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 450.899697][ C1] rcu: 0-...!: (1 GPs behind) idle=5ef4/1/0x4000000000000000 softirq=57826/57827 fqs=0 [ 450.910928][ C1] rcu: (detected by 1, t=10502 jiffies, g=57361, q=425 ncpus=2) [ 450.918659][ C1] Sending NMI from CPU 1 to CPUs 0: [ 450.918693][ C0] NMI backtrace for cpu 0 [ 450.918713][ C0] CPU: 0 UID: 0 PID: 15443 Comm: syz.3.4116 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 450.918734][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.918748][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x0/0x20 [ 450.918787][ C0] Code: 0c 24 48 89 f2 48 89 fe bf 06 00 00 00 e9 b8 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 40 0f b6 d6 40 0f b6 f7 bf 01 00 00 00 e9 [ 450.918805][ C0] RSP: 0018:ffffc90000007e28 EFLAGS: 00000046 [ 450.918820][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81a70c68 [ 450.918831][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 450.918842][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 450.918853][ C0] R10: 0000000000000001 R11: 0000000000000003 R12: ffff88807f041340 [ 450.918864][ C0] R13: ffff8880b862c780 R14: ffff8880b862c680 R15: ffffffff896a1cd0 [ 450.918876][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 450.918894][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.918906][ C0] CR2: 0000001b2fa07ff8 CR3: 000000004b75c000 CR4: 00000000003526f0 [ 450.918918][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.918928][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.918943][ C0] Call Trace: [ 450.918949][ C0] [ 450.918960][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 450.918990][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 450.919013][ C0] ? nmi_handle+0x1ac/0x5d0 [ 450.919039][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 450.919067][ C0] ? default_do_nmi+0x6a/0x160 [ 450.919092][ C0] ? exc_nmi+0x170/0x1e0 [ 450.919115][ C0] ? end_repeat_nmi+0xf/0x53 [ 450.919140][ C0] ? __pfx_advance_sched+0x10/0x10 [ 450.919168][ C0] ? __hrtimer_run_queues+0x2a8/0xae0 [ 450.919187][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 450.919216][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 450.919244][ C0] ? __pfx___sanitizer_cov_trace_const_cmp1+0x10/0x10 [ 450.919272][ C0] [ 450.919277][ C0] [ 450.919282][ C0] __hrtimer_run_queues+0x873/0xae0 [ 450.919303][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 450.919321][ C0] ? read_tsc+0x9/0x20 [ 450.919343][ C0] hrtimer_interrupt+0x392/0x8e0 [ 450.919367][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 450.919395][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 450.919413][ C0] [ 450.919418][ C0] [ 450.919424][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.919450][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 450.919477][ C0] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 54 05 4a 7e 65 8b 05 55 05 4a 7e a9 00 01 [ 450.919494][ C0] RSP: 0018:ffffc9000b927840 EFLAGS: 00000282 [ 450.919507][ C0] RAX: 00007f75e961b000 RBX: 80000000617a1007 RCX: ffffffff8203c65e [ 450.919519][ C0] RDX: ffff888057a0a440 RSI: 0000000000000000 RDI: 0000000000000007 [ 450.919530][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 450.919540][ C0] R10: 80000000617a1007 R11: 0000000000000003 R12: 00000000000001de [ 450.919551][ C0] R13: ffff888066f3f0d8 R14: 00000000000001de R15: dffffc0000000000 [ 450.919567][ C0] ? unmap_page_range+0xabe/0x43a0 [ 450.919595][ C0] unmap_page_range+0xbbc/0x43a0 [ 450.919630][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 450.919656][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 450.919678][ C0] ? uprobe_munmap+0x20/0x5c0 [ 450.919707][ C0] unmap_single_vma+0x194/0x2b0 [ 450.919733][ C0] unmap_vmas+0x22f/0x490 [ 450.919759][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 450.919785][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 450.919813][ C0] exit_mmap+0x1c1/0xba0 [ 450.919841][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 450.919871][ C0] ? __pfx_mark_lock+0x10/0x10 [ 450.919905][ C0] __mmput+0x12a/0x410 [ 450.919935][ C0] mmput+0x62/0x70 [ 450.919960][ C0] do_exit+0x9ba/0x2d70 [ 450.919981][ C0] ? __pfx_do_exit+0x10/0x10 [ 450.919999][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 450.920026][ C0] do_group_exit+0xd3/0x2a0 [ 450.920045][ C0] __x64_sys_exit_group+0x3e/0x50 [ 450.920065][ C0] x64_sys_call+0x151f/0x1720 [ 450.920084][ C0] do_syscall_64+0xcd/0x250 [ 450.920104][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.920128][ C0] RIP: 0033:0x7f75ea98cde9 [ 450.920141][ C0] Code: Unable to access opcode bytes at 0x7f75ea98cdbf. [ 450.920149][ C0] RSP: 002b:00007ffdd3f95b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 450.920165][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f75ea98cde9 [ 450.920176][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.920187][ C0] RBP: 00007ffdd3f95bfc R08: 00000004d3f95c8f R09: 00000000000927c0 [ 450.920199][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000454 [ 450.920210][ C0] R13: 00000000000927c0 R14: 000000000005428b R15: 00007ffdd3f95c50 [ 450.920228][ C0] [ 450.920690][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g57361 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 451.432415][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 451.442380][ C1] rcu: RCU grace-period kthread stack dump: [ 451.448259][ C1] task:rcu_preempt state:R running task stack:27168 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 451.461768][ C1] Call Trace: [ 451.465055][ C1] [ 451.467993][ C1] __schedule+0xf43/0x5890 [ 451.472424][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 451.477644][ C1] ? __pfx___schedule+0x10/0x10 [ 451.482511][ C1] ? schedule+0x298/0x350 [ 451.486849][ C1] ? __pfx_lock_release+0x10/0x10 [ 451.491886][ C1] ? lock_acquire+0x2f/0xb0 [ 451.496394][ C1] ? schedule+0x1fd/0x350 [ 451.500734][ C1] schedule+0xe7/0x350 [ 451.504817][ C1] schedule_timeout+0x124/0x280 [ 451.509678][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 451.515060][ C1] ? __pfx_process_timeout+0x10/0x10 [ 451.520351][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 451.526177][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 451.531648][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 451.536465][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 451.541757][ C1] ? rcu_gp_init+0xc82/0x1630 [ 451.546443][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 451.551662][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 451.557484][ C1] rcu_gp_kthread+0x271/0x380 [ 451.562171][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 451.567378][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.572578][ C1] ? __kthread_parkme+0x148/0x220 [ 451.577618][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 451.582895][ C1] kthread+0x3af/0x750 [ 451.587009][ C1] ? __pfx_kthread+0x10/0x10 [ 451.591610][ C1] ? __pfx_kthread+0x10/0x10 [ 451.596211][ C1] ret_from_fork+0x45/0x80 [ 451.600651][ C1] ? __pfx_kthread+0x10/0x10 [ 451.605247][ C1] ret_from_fork_asm+0x1a/0x30 [ 451.610027][ C1] [ 451.613064][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 451.619378][ C1] CPU: 1 UID: 0 PID: 15463 Comm: syz.6.4124 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 451.630133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 451.640271][ C1] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 451.646949][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 fc 04 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 451.666556][ C1] RSP: 0018:ffffc900048f73f0 EFLAGS: 00000246 [ 451.672639][ C1] RAX: 0000000000080000 RBX: ffff8880b8646a00 RCX: ffffc900165d0000 [ 451.680610][ C1] RDX: 0000000000080000 RSI: ffffffff81adcee4 RDI: 0000000000000005 [ 451.688582][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 451.696547][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: ffffed10170c8d41 [ 451.704515][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 451.712494][ C1] FS: 00007faee7b2c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 451.721432][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.728015][ C1] CR2: 0000001b30417ff8 CR3: 000000007b9b8000 CR4: 00000000003526f0 [ 451.735986][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 451.743954][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 451.751923][ C1] Call Trace: [ 451.755196][ C1] [ 451.758036][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 451.764369][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 451.769578][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 451.775060][ C1] ? timekeeping_advance+0x72e/0xa90 [ 451.780349][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 451.785985][ C1] ? __asan_memcpy+0x3c/0x60 [ 451.790583][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 451.795881][ C1] ? rcu_is_watching+0x12/0xc0 [ 451.800660][ C1] ? update_process_times+0x178/0x2d0 [ 451.806056][ C1] ? __pfx_update_process_times+0x10/0x10 [ 451.811792][ C1] ? update_wall_time+0x1c/0x40 [ 451.816652][ C1] ? tick_nohz_handler+0x376/0x530 [ 451.821770][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 451.827230][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 451.832621][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 451.838346][ C1] ? read_tsc+0x9/0x20 [ 451.842426][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 451.847554][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 451.853719][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 451.859534][ C1] [ 451.862463][ C1] [ 451.865401][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.871571][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 451.877638][ C1] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 451.883728][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 451.888953][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 451.894078][ C1] flush_tlb_mm_range+0x271/0x4a0 [ 451.899109][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 451.904663][ C1] flush_tlb_batched_pending+0x93/0xd0 [ 451.910136][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 451.917001][ C1] madvise_cold_or_pageout_pte_range+0x2d2/0x20d0 [ 451.923432][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 451.930300][ C1] ? find_held_lock+0x2d/0x110 [ 451.935074][ C1] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 451.941929][ C1] walk_pgd_range+0xc7b/0x1a70 [ 451.946708][ C1] ? mt_find+0x4c8/0xa20 [ 451.950962][ C1] ? __pfx_walk_pgd_range+0x10/0x10 [ 451.956175][ C1] __walk_page_range+0x161/0x820 [ 451.961118][ C1] ? find_vma+0xc0/0x140 [ 451.965366][ C1] ? __pfx_find_vma+0x10/0x10 [ 451.970053][ C1] ? walk_page_test+0x9b/0x180 [ 451.974823][ C1] walk_page_range_mm+0x55a/0x940 [ 451.979867][ C1] ? __pfx_walk_page_range_mm+0x10/0x10 [ 451.985416][ C1] ? mlock_drain_local+0x22d/0x4f0 [ 451.990570][ C1] ? lock_acquire+0x2f/0xb0 [ 451.995080][ C1] ? mlock_drain_local+0x6f/0x4f0 [ 452.000109][ C1] walk_page_range+0x63/0x90 [ 452.004719][ C1] madvise_pageout+0x326/0x820 [ 452.009488][ C1] ? plist_add+0x458/0x600 [ 452.013914][ C1] ? __pfx_madvise_pageout+0x10/0x10 [ 452.019217][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 452.025125][ C1] madvise_vma_behavior+0x452/0x1dd0 [ 452.030421][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 452.036235][ C1] ? find_vma_prev+0xdb/0x160 [ 452.040921][ C1] ? __pfx_find_vma_prev+0x10/0x10 [ 452.046048][ C1] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 452.051604][ C1] ? __pfx_futex_wait+0x10/0x10 [ 452.056465][ C1] ? do_madvise+0x2b3/0x7c0 [ 452.060987][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 452.066711][ C1] madvise_walk_vmas+0x1cf/0x2c0 [ 452.071679][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 452.077161][ C1] do_madvise+0x366/0x7c0 [ 452.081514][ C1] ? __pfx_do_madvise+0x10/0x10 [ 452.086377][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 452.091327][ C1] ? rcu_is_watching+0x12/0xc0 [ 452.096099][ C1] __x64_sys_madvise+0xa9/0x110 [ 452.100955][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.106162][ C1] do_syscall_64+0xcd/0x250 [ 452.110685][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.116587][ C1] RIP: 0033:0x7faee6d8cde9 [ 452.121007][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.140631][ C1] RSP: 002b:00007faee7b2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 452.149062][ C1] RAX: ffffffffffffffda RBX: 00007faee6fa5fa0 RCX: 00007faee6d8cde9 [ 452.157046][ C1] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000400000000000 [ 452.165017][ C1] RBP: 00007faee6e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 452.172988][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.180958][ C1] R13: 0000000000000000 R14: 00007faee6fa5fa0 R15: 00007ffe7df9a9d8 [ 452.188945][ C1] [ 452.192368][ C1] vkms_vblank_simulate: vblank timer overrun