last executing test programs: 12.479769026s ago: executing program 1 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x24) write$vhost_msg_v2(r1, 0x0, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3") syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fanotify_init(0x20, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) 11.584686839s ago: executing program 1 (id=506): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)=ANY=[@ANYRES32=r1]) 11.31803764s ago: executing program 1 (id=513): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x0, 0x11, 0xff, 0x20, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f0000001880)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = open_tree(r0, 0x0, 0x89901) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) mmap(&(0x7f0000992000/0x4000)=nil, 0x4000, 0x3000008, 0x8031, r2, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffe, 0x64) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) socket$inet(0x2, 0x1, 0xb393) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x50, 0x11, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r7, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r8], 0x30, 0x40}], 0x1, 0x4000011) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, 0x0, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0xfffffe0e) clock_adjtime(0x5, &(0x7f0000004dc0)={0x6, 0x400000000045, 0x2, 0x5, 0xfffffffffffffffa, 0x7cca, 0x6, 0x5, 0x1000000000004, 0x4, 0x0, 0x5, 0x10000001000, 0x2000000008c, 0xd01, 0x3, 0x4, 0x200, 0x774, 0xfffffffffffffeff, 0x6, 0x6, 0xfffffffffffffffc, 0x9014, 0x4, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.021608589s ago: executing program 1 (id=516): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020002000000000000000000000005ac14142e00000000000000000000000000000a0000202e000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000010a0101000000000000000000000000003c010000000000000a0002000a0101010000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ac14142a0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) write(r0, &(0x7f0000000180)='1', 0x1) 10.61123561s ago: executing program 1 (id=519): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00005c4000/0x3000)=nil, &(0x7f0000619000/0x2000)=nil, &(0x7f0000c36000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000f40000/0x2000)=nil, &(0x7f0000f2f000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00005db000/0x4000)=nil, &(0x7f00005fc000/0x1000)=nil, &(0x7f00000001c0)="4c263057ba", 0x5}, 0x68) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) 10.420394163s ago: executing program 1 (id=521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 10.361379623s ago: executing program 32 (id=521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 5.411207601s ago: executing program 4 (id=567): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 5.411006254s ago: executing program 4 (id=568): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x8) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.519909218s ago: executing program 4 (id=572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x900, 0x7}) 3.037237628s ago: executing program 2 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1500}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$inet6_udp(0xa, 0x2, 0x0) 2.801829926s ago: executing program 2 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 2.671510256s ago: executing program 2 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1c000000000a0102000000020000000001000000080002400000000314000400160a0108000000000000000001000000140000001000010000000000000000000000000a3a539fcae4bd591943d26252efc19d1865df6a8cfa123d5de8ce573b1835cdbca945c7367ca907db7b5dd90e86b05eff0f658725789bf3ca16d65129923de7ae35570b0bb842389dae21f30cf58b779df475c59d3aad2c89314adb601c772f4daf22aca7f8e64b100fcf439c47824c40b10e5224ed1c93287dfa71a94002c807507f4cbc7e298b3b376e2c689c103b2201e917bacc66f99aec73b3cea1ff5f8321eec6d6f54f073ec2379b9bfc38542507cd236eda4b3b368014fd67eea43fcad7e9fac4075dcabc962649ede1"], 0x58}}, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x24) write$vhost_msg_v2(r1, 0x0, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3") syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) 2.55170391s ago: executing program 2 (id=596): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='48:8f:5a:', 0x9) 2.259684814s ago: executing program 2 (id=598): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020002000000000000000000000005ac14142e00000000000000000000000000000a0000202e000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000010a0101000000000000000000000000003c010000000000000a0002000a0101010000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ac14142a0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) write(r0, &(0x7f0000000180)='1', 0x1) 1.46093836s ago: executing program 4 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b000100627269646765"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400018008000100000001000500030003"], 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 905.360034ms ago: executing program 4 (id=606): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='48:8f:5a:', 0x9) 904.942527ms ago: executing program 3 (id=607): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x38, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x28c}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1000]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 831.887478ms ago: executing program 3 (id=608): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/257], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) dup3(r1, r0, 0x80000) 761.742507ms ago: executing program 2 (id=609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 691.921963ms ago: executing program 4 (id=610): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x4, 0x4) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x2, 0xb4, 0x2000000, 0x5}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x36, 0xffffffb9, 0x1a}, 0x9c) 611.983305ms ago: executing program 0 (id=611): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4006881}, 0x20000900) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 611.766164ms ago: executing program 0 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250b00000008000300", @ANYRES32=r5, @ANYBLOB="5000508011000100ec3bd87b59ecb393bce7f9ac6700000009000100c8803781500000000400060007000400478d00000500090002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20080000}, 0x40000) 611.543954ms ago: executing program 3 (id=613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x24) write$vhost_msg_v2(r1, 0x0, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3") syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fanotify_init(0x20, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) 551.968435ms ago: executing program 0 (id=614): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x0, 0x0, 0x0, 0x11, 0xff, 0x20, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f0000001880)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = open_tree(r0, 0x0, 0x89901) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) mmap(&(0x7f0000992000/0x4000)=nil, 0x4000, 0x3000008, 0x8031, r2, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffe, 0x64) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) socket$inet(0x2, 0x1, 0xb393) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x204, 0x4, 0x18000}, 0x10) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0xfffffe0e) clock_adjtime(0x5, &(0x7f0000004dc0)={0x6, 0x400000000045, 0x2, 0x5, 0xfffffffffffffffa, 0x7cca, 0x6, 0x5, 0x1000000000004, 0x4, 0x0, 0x5, 0x10000001000, 0x2000000008c, 0xd01, 0x3, 0x4, 0x200, 0x774, 0xfffffffffffffeff, 0x6, 0x6, 0xfffffffffffffffc, 0x9014, 0x4, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 421.380219ms ago: executing program 3 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 420.676005ms ago: executing program 0 (id=616): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}], 0x2}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 299.018512ms ago: executing program 0 (id=617): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020002000000000000000000000005ac14142e00000000000000000000000000000a0000202e000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0000000000000000000000000000010a0101000000000000000000000000003c010000000000000a0002000a0101010000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ac14142a0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) write(r0, &(0x7f0000000180)='1', 0x1) 297.176685ms ago: executing program 3 (id=618): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='48:8f:5a:', 0x9) 100.321101ms ago: executing program 0 (id=619): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) sendto$packet(r1, &(0x7f0000000dc0)="43050000", 0x4, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=620): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 39.925334][ T42] audit: type=1400 audit(1786845933.558:116): avc: denied { write } for pid=5636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.961740][ T42] audit: type=1400 audit(1786845933.598:117): avc: denied { write } for pid=5639 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:32927' (ED25519) to the list of known hosts. [ 40.138631][ T42] audit: type=1400 audit(1786845933.768:118): avc: denied { name_bind } for pid=5644 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.179891][ T42] audit: type=1400 audit(1786845933.818:119): avc: denied { execute } for pid=5645 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.186786][ T42] audit: type=1400 audit(1786845933.818:120): avc: denied { execute_no_trans } for pid=5645 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.695225][ T42] audit: type=1400 audit(1786845934.328:121): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.757461][ T42] audit: type=1400 audit(1786845934.388:122): avc: denied { write } for pid=5649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.290795][ T42] audit: type=1400 audit(1786845934.928:123): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.336389][ T42] audit: type=1400 audit(1786845934.968:124): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.418202][ T42] audit: type=1400 audit(1786845935.048:125): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.773184][ T5645] cgroup: Unknown subsys name 'net' [ 42.903885][ T5645] cgroup: Unknown subsys name 'cpuset' [ 42.910589][ T5645] cgroup: Unknown subsys name 'rlimit' [ 43.189369][ T5711] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.107049][ T5645] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.560184][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 47.560201][ T42] audit: type=1400 audit(1786845941.188:161): avc: denied { execmem } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.742176][ T42] audit: type=1400 audit(1786845941.378:162): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.760222][ T42] audit: type=1400 audit(1786845941.378:163): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.767574][ T42] audit: type=1400 audit(1786845941.378:164): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.775114][ T42] audit: type=1400 audit(1786845941.388:165): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="socket:[6732]" dev="sockfs" ino=6732 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.785845][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.788546][ T5731] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.790357][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.795780][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.795812][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.799036][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.801893][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.806141][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.809174][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.810329][ T5734] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.812995][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.816931][ T5734] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.817502][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.820431][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.820593][ T5734] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.823116][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.825275][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.827812][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.830864][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.833347][ T42] audit: type=1400 audit(1786845941.468:166): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.847876][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.849546][ T42] audit: type=1400 audit(1786845941.468:167): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.860373][ T42] audit: type=1400 audit(1786845941.468:168): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.868562][ T42] audit: type=1400 audit(1786845941.468:169): avc: denied { module_request } for pid=5732 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.876784][ T42] audit: type=1400 audit(1786845941.508:170): avc: denied { sys_module } for pid=5732 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.478635][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.482652][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.485850][ T5732] bridge_slave_0: entered allmulticast mode [ 48.490477][ T5732] bridge_slave_0: entered promiscuous mode [ 48.528634][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.532163][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.535300][ T5732] bridge_slave_1: entered allmulticast mode [ 48.539260][ T5732] bridge_slave_1: entered promiscuous mode [ 48.555919][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.559667][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.562757][ T5724] bridge_slave_0: entered allmulticast mode [ 48.566629][ T5724] bridge_slave_0: entered promiscuous mode [ 48.599862][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.603035][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.606309][ T5724] bridge_slave_1: entered allmulticast mode [ 48.610473][ T5724] bridge_slave_1: entered promiscuous mode [ 48.639141][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.672108][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.679576][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.721672][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.788100][ T5732] team0: Port device team_slave_0 added [ 48.798172][ T5732] team0: Port device team_slave_1 added [ 48.825772][ T5724] team0: Port device team_slave_0 added [ 48.829219][ T5724] team0: Port device team_slave_1 added [ 48.841523][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.844896][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.847849][ T5736] bridge_slave_0: entered allmulticast mode [ 48.852832][ T5736] bridge_slave_0: entered promiscuous mode [ 48.857533][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.860659][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.863877][ T5736] bridge_slave_1: entered allmulticast mode [ 48.867780][ T5736] bridge_slave_1: entered promiscuous mode [ 48.923271][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.926145][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.938603][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.945590][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.948738][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.951837][ T5723] bridge_slave_0: entered allmulticast mode [ 48.955396][ T5723] bridge_slave_0: entered promiscuous mode [ 48.972330][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.975058][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.983467][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.987131][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.990093][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.993292][ T5723] bridge_slave_1: entered allmulticast mode [ 48.997215][ T5723] bridge_slave_1: entered promiscuous mode [ 49.001676][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.003924][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.012049][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.018767][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.043546][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.046528][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.057254][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.065791][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.082653][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.091887][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.121142][ T5736] team0: Port device team_slave_0 added [ 49.147947][ T5736] team0: Port device team_slave_1 added [ 49.189375][ T5732] hsr_slave_0: entered promiscuous mode [ 49.191809][ T5732] hsr_slave_1: entered promiscuous mode [ 49.196098][ T5723] team0: Port device team_slave_0 added [ 49.210857][ T5723] team0: Port device team_slave_1 added [ 49.216352][ T5724] hsr_slave_0: entered promiscuous mode [ 49.218820][ T5724] hsr_slave_1: entered promiscuous mode [ 49.221089][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 49.222955][ T5724] Cannot create hsr debugfs directory [ 49.225893][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.228540][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.237904][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.253821][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.256525][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.266485][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.306095][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.308996][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.319782][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.344948][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.347855][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.358169][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.397966][ T5736] hsr_slave_0: entered promiscuous mode [ 49.401194][ T5736] hsr_slave_1: entered promiscuous mode [ 49.404029][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 49.406423][ T5736] Cannot create hsr debugfs directory [ 49.472308][ T5723] hsr_slave_0: entered promiscuous mode [ 49.474557][ T5723] hsr_slave_1: entered promiscuous mode [ 49.476721][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 49.478601][ T5723] Cannot create hsr debugfs directory [ 49.813643][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.822532][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.831973][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.837983][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.844183][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.851458][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.862065][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.868350][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.891235][ T5737] Bluetooth: hci3: command tx timeout [ 49.894239][ T64] Bluetooth: hci1: command tx timeout [ 49.894295][ T5086] Bluetooth: hci0: command tx timeout [ 49.899538][ T5086] Bluetooth: hci2: command tx timeout [ 49.936510][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.942894][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.947002][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.952191][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.961463][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.967680][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.985366][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.991742][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.053568][ T5724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.060781][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.065209][ T5724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.070782][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.076512][ T5724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.082824][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.087902][ T5724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.093529][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.146765][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.176048][ T5723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.180229][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.183101][ T5723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.187138][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.190280][ T5723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.195457][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.198551][ T5723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.203766][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.212283][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.228984][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.233131][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.261922][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.264859][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.303475][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.339169][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.346516][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.364342][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.366732][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.384727][ T187] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.387279][ T187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.406823][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.416780][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.430425][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.433092][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.442597][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.445605][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.476560][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.491861][ T187] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.494158][ T187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.504681][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.507102][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.565141][ T5723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.661463][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.698444][ T5732] veth0_vlan: entered promiscuous mode [ 50.707368][ T5732] veth1_vlan: entered promiscuous mode [ 50.730706][ T5732] veth0_macvtap: entered promiscuous mode [ 50.737678][ T5732] veth1_macvtap: entered promiscuous mode [ 50.747967][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.762483][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.790385][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.796842][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.807705][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.871606][ T187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.874285][ T5736] veth0_vlan: entered promiscuous mode [ 50.876069][ T187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.877897][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.883942][ T5724] veth0_vlan: entered promiscuous mode [ 50.893073][ T5736] veth1_vlan: entered promiscuous mode [ 50.910266][ T5724] veth1_vlan: entered promiscuous mode [ 50.916430][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.918845][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.930691][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.933868][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.942516][ T5736] veth0_macvtap: entered promiscuous mode [ 50.956346][ T5736] veth1_macvtap: entered promiscuous mode [ 50.968076][ T5723] veth0_vlan: entered promiscuous mode [ 50.975153][ T5724] veth0_macvtap: entered promiscuous mode [ 50.977315][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.985470][ T5724] veth1_macvtap: entered promiscuous mode [ 50.993943][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.008416][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.014107][ T5723] veth1_vlan: entered promiscuous mode [ 51.037564][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.048229][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.115730][ T5723] veth0_macvtap: entered promiscuous mode [ 51.144081][ T5723] veth1_macvtap: entered promiscuous mode [ 51.156408][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.163880][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.187780][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.210123][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.211344][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.213006][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.258307][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.264738][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.337194][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.339640][ T5537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.341735][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.360166][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.364751][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.387110][ T5883] geneve2: entered promiscuous mode [ 51.399937][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.412325][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.469827][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.471984][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.474128][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.482492][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.499663][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.503351][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.529603][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.534144][ T5802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.549670][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.554056][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.555936][ T5889] input: syz0 as /devices/virtual/input/input5 [ 51.560244][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.563883][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.659647][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.814591][ T5818] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 51.838318][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.848564][ T5818] usb 5-1: Product: syz [ 51.850240][ T5818] usb 5-1: Manufacturer: syz [ 51.851941][ T5818] usb 5-1: SerialNumber: syz [ 51.861530][ T5818] usb 5-1: config 0 descriptor?? [ 51.875377][ T5818] hub 5-1:0.0: bad descriptor, ignoring hub [ 51.877599][ T5818] hub 5-1:0.0: probe with driver hub failed with error -5 [ 51.904662][ T5894] Zero length message leads to an empty skb [ 51.970369][ T5086] Bluetooth: hci1: command tx timeout [ 51.970421][ T64] Bluetooth: hci2: command tx timeout [ 51.972110][ T5086] Bluetooth: hci3: command tx timeout [ 51.975645][ T5737] Bluetooth: hci0: command tx timeout [ 52.081702][ T5818] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 52.087331][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 52.091351][ T5818] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 52.094106][ T5818] usb 5-1: media controller created [ 52.105152][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 52.145598][ T5818] DVB: Unable to find symbol dib7000p_attach() [ 52.147660][ T5818] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 52.230929][ T5818] rc_core: IR keymap rc-dib0700-rc5 not found [ 52.239646][ T5818] Registered IR keymap rc-empty [ 52.242208][ T5818] dvb-usb: could not initialize remote control. [ 52.259503][ T5818] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 52.362991][ T5818] usb 5-1: USB disconnect, device number 2 [ 52.411587][ T5818] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 52.626232][ T42] kauditd_printk_skb: 116 callbacks suppressed [ 52.626243][ T42] audit: type=1400 audit(1786845946.258:287): avc: denied { write } for pid=5912 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.775092][ T42] audit: type=1400 audit(1786845946.408:288): avc: denied { create } for pid=5914 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.784152][ T42] audit: type=1400 audit(1786845946.408:289): avc: denied { setopt } for pid=5914 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.797708][ T42] audit: type=1400 audit(1786845946.408:290): avc: denied { bind } for pid=5914 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.805876][ T42] audit: type=1400 audit(1786845946.408:291): avc: denied { map } for pid=5914 comm="syz.3.14" path="socket:[8685]" dev="sockfs" ino=8685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.813262][ T42] audit: type=1400 audit(1786845946.418:292): avc: denied { read write } for pid=5914 comm="syz.3.14" path="socket:[8685]" dev="sockfs" ino=8685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.842441][ T42] audit: type=1400 audit(1786845946.478:293): avc: denied { create } for pid=5917 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.847163][ T5918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15'. [ 52.848620][ T42] audit: type=1400 audit(1786845946.478:294): avc: denied { ioctl } for pid=5916 comm="syz.3.15" path="socket:[10398]" dev="sockfs" ino=10398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.859697][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 52.861222][ T42] audit: type=1400 audit(1786845946.478:295): avc: denied { ioctl } for pid=5916 comm="syz.3.15" path="socket:[10395]" dev="sockfs" ino=10395 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.863676][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 52.945070][ T42] audit: type=1400 audit(1786845946.578:296): avc: denied { read write } for pid=5922 comm="syz.0.16" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.973990][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 53.299951][ T5947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.26'. [ 53.304530][ T5947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 53.308070][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 54.052378][ T5737] Bluetooth: hci2: command tx timeout [ 54.053360][ T5086] Bluetooth: hci0: command tx timeout [ 54.054221][ T5734] Bluetooth: hci1: command tx timeout [ 54.058486][ T64] Bluetooth: hci3: command tx timeout [ 54.066700][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.122105][ T5967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.33'. [ 54.134189][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 54.151442][ T5968] fido_id[5968]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.248762][ T5832] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 54.312366][ T5832] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 54.345585][ T5972] fido_id[5972]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.395489][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 55.131431][ T5079] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.154279][ T5985] loop4: detected capacity change from 0 to 7 [ 55.161461][ T5985] Dev loop4: unable to read RDB block 7 [ 55.164520][ T5985] loop4: unable to read partition table [ 55.167975][ T5985] loop4: partition table beyond EOD, truncated [ 55.171397][ T5985] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 55.289525][ T5079] usb 6-1: Using ep0 maxpacket: 8 [ 55.293958][ T5079] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.303892][ T5079] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 55.309638][ T5079] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 55.314198][ T5079] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 55.318189][ T5079] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 55.327051][ T5079] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 55.333063][ T5079] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.339189][ T5079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.430757][ T6000] syzkaller0: entered promiscuous mode [ 55.432502][ T6000] syzkaller0: entered allmulticast mode [ 55.551007][ T5079] usb 6-1: GET_CAPABILITIES returned 0 [ 55.553562][ T5079] usbtmc 6-1:16.0: can't read capabilities [ 55.553714][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.52'. [ 55.791099][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 55.806870][ T5983] usbtmc 6-1:16.0: Unable to send data, error -71 [ 55.820357][ T5818] usb 6-1: USB disconnect, device number 2 [ 55.957910][ T6033] ALSA: mixer_oss: invalid OSS volume 'mPin:' [ 55.960536][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmHWM:' [ 55.963916][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmRSS:' [ 55.966374][ T6033] ALSA: mixer_oss: invalid OSS volume 'RssAnon:' [ 55.968726][ T6033] ALSA: mixer_oss: invalid OSS volume 'RssFile:' [ 55.973617][ T6033] ALSA: mixer_oss: invalid OSS volume 'RssShmem:' [ 55.976536][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmData:' [ 55.978897][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmStk:' [ 55.989678][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmExe:' [ 55.992002][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmLib:' [ 55.994449][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmPTE:' [ 55.996951][ T6033] ALSA: mixer_oss: invalid OSS volume 'VmSwap:' [ 55.999261][ T6033] ALSA: mixer_oss: invalid OSS volume 'HugetlbPages:' [ 56.002210][ T6033] ALSA: mixer_oss: invalid OSS volume 'CoreDumping:' [ 56.004547][ T6033] ALSA: mixer_oss: invalid OSS volume 'THP_enabled:' [ 56.006632][ T6033] ALSA: mixer_oss: invalid OSS volume 'untag_mask:' [ 56.008806][ T6033] ALSA: mixer_oss: invalid OSS volume 'Threads:' [ 56.012397][ T6033] ALSA: mixer_oss: invalid OSS volume 'SigQ:' [ 56.014660][ T6033] ALSA: mixer_oss: invalid OSS volume 'SigPnd:' [ 56.017247][ T6033] ALSA: mixer_oss: invalid OSS volume 'ShdPnd:' [ 56.020388][ T6033] ALSA: mixer_oss: invalid OSS volume 'SigBlk:' [ 56.022984][ T6033] ALSA: mixer_oss: invalid OSS volume 'SigIgn:' [ 56.025414][ T6033] ALSA: mixer_oss: invalid OSS volume 'SigCgt:' [ 56.027866][ T6033] ALSA: mixer_oss: invalid OSS volume 'CapInh:' [ 56.030463][ T6033] ALSA: mixer_oss: invalid OSS volume 'CapPrm:' [ 56.033088][ T6033] ALSA: mixer_oss: invalid OSS volume 'CapEff:' [ 56.035679][ T6033] ALSA: mixer_oss: invalid OSS volume 'CapBnd:' [ 56.038300][ T6033] ALSA: mixer_oss: invalid OSS volume 'CapAmb:' [ 56.040999][ T6033] ALSA: mixer_oss: invalid OSS volume 'NoNewPrivs:' [ 56.043718][ T6033] ALSA: mixer_oss: invalid OSS volume 'Seccomp:' [ 56.046270][ T6033] ALSA: mixer_oss: invalid OSS volume 'Seccomp_filters:' [ 56.049122][ T6033] ALSA: mixer_oss: invalid OSS volume 'Speculation_Store_Bypass:' [ 56.053366][ T6033] ALSA: mixer_oss: invalid OSS volume 'SpeculationIndirectBranch:' [ 56.056537][ T6033] ALSA: mixer_oss: invalid OSS volume 'Cpus_allowed:' [ 56.059386][ T6033] ALSA: mixer_oss: invalid OSS volume 'Cpus_allowed_list:' [ 56.062527][ T6033] ALSA: mixer_oss: invalid OSS volume 'Mems_allowed:' [ 56.065308][ T6033] ALSA: mixer_oss: invalid OSS volume 'Mems_allowed_list:' [ 56.068085][ T6033] ALSA: mixer_oss: invalid OSS volume 'voluntary_ctxt_switches:' [ 56.071251][ T6033] ALSA: mixer_oss: invalid OSS volume 'nonvoluntary_ctxt_switches:' [ 56.074311][ T6033] ALSA: mixer_oss: invalid OSS volume 'x86_Thread_features:' [ 56.077261][ T6033] ALSA: mixer_oss: invalid OSS volume 'x86_Thread_features_locked:' [ 56.081490][ T6033] ALSA: mixer_oss: invalid OSS volume '' [ 56.131902][ T5734] Bluetooth: hci0: command tx timeout [ 56.133945][ T5734] Bluetooth: hci1: command tx timeout [ 56.134116][ T64] Bluetooth: hci3: command tx timeout [ 56.135973][ T5734] Bluetooth: hci2: command tx timeout [ 56.619639][ T5818] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.779614][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 56.782633][ T5818] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 56.787911][ T5818] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 56.792361][ T5818] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.796436][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.800910][ T5818] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.805074][ T5818] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.809399][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.899770][ T5079] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 57.027889][ T5818] usb 6-1: usb_control_msg returned -32 [ 57.031173][ T5818] usbtmc 6-1:16.0: can't read capabilities [ 57.034599][ T6050] netlink: 'syz.0.69': attribute type 12 has an invalid length. [ 57.037200][ T6050] netlink: 'syz.0.69': attribute type 29 has an invalid length. [ 57.052164][ T5079] usb 7-1: unable to get BOS descriptor or descriptor too short [ 57.061306][ T5079] usb 7-1: not running at top speed; connect to a high speed hub [ 57.065218][ T5079] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 57.072189][ T5079] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 57.075027][ T5079] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 57.077946][ T5079] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 57.081388][ T5079] usb 7-1: config 14 has no interface number 0 [ 57.083484][ T5079] usb 7-1: config 14 has no interface number 1 [ 57.085591][ T5079] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 57.089038][ T5079] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 57.094936][ T5079] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.098609][ T5079] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 8329, setting to 64 [ 57.102531][ T5079] usb 7-1: config 14 interface 57 has no altsetting 0 [ 57.105250][ T5079] usb 7-1: config 14 interface 228 has no altsetting 0 [ 57.110878][ T5079] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.114931][ T5079] usb 7-1: Product: syz [ 57.116306][ T5079] usb 7-1: Manufacturer: syz [ 57.117885][ T5079] usb 7-1: SerialNumber: syz [ 57.139575][ T6057] syzkaller0: entered promiscuous mode [ 57.141415][ T6057] syzkaller0: entered allmulticast mode [ 57.532571][ T5079] legousbtower 7-1:14.57: interrupt endpoints not found [ 57.933808][ T5079] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.16 build 0 [ 57.938519][ T5079] legousbtower 7-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 58.060022][ T42] kauditd_printk_skb: 47 callbacks suppressed [ 58.060037][ T42] audit: type=1400 audit(1786845951.698:344): avc: denied { connect } for pid=6084 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.073542][ T42] audit: type=1400 audit(1786845951.708:345): avc: denied { map } for pid=6084 comm="syz.3.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.081460][ T42] audit: type=1400 audit(1786845951.708:346): avc: denied { read write } for pid=6084 comm="syz.3.85" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.093167][ T42] audit: type=1400 audit(1786845951.728:347): avc: denied { map } for pid=6084 comm="syz.3.85" path="socket:[8916]" dev="sockfs" ino=8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 58.471544][ T42] audit: type=1400 audit(1786845952.108:348): avc: denied { create } for pid=6090 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.479302][ T42] audit: type=1400 audit(1786845952.108:349): avc: denied { write } for pid=6090 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.486028][ T6092] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 58.525291][ T5079] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 58.689591][ T5079] usb 5-1: Using ep0 maxpacket: 32 [ 58.693039][ T5079] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.697231][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.701796][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.705337][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.711491][ T5079] usb 5-1: config 0 descriptor?? [ 58.716753][ T5079] hub 5-1:0.0: USB hub found [ 58.924853][ T5079] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 59.061168][ T42] audit: type=1400 audit(1786845952.698:350): avc: denied { mount } for pid=6101 comm="syz.3.88" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.125659][ T42] audit: type=1400 audit(1786845952.758:351): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.338702][ T5079] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 59.351267][ T5079] hid-generic 0003:046D:C31C.0004: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 59.365528][ T5810] usb 6-1: USB disconnect, device number 3 [ 59.402054][ T42] audit: type=1400 audit(1786845953.038:352): avc: denied { setopt } for pid=6112 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.411525][ T42] audit: type=1400 audit(1786845953.038:353): avc: denied { bind } for pid=6112 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.605410][ T5079] usb 7-1: USB disconnect, device number 2 [ 59.612486][ T5079] legousbtower 7-1:14.228: LEGO USB Tower #-159 now disconnected [ 59.709872][ T5831] usb 5-1: USB disconnect, device number 3 [ 60.029722][ T5810] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 60.199511][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 60.202566][ T5810] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 60.208202][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.212594][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.216648][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.223053][ T5810] usb 5-1: config 0 descriptor?? [ 60.229863][ T5810] hub 5-1:0.0: USB hub found [ 60.348398][ T6130] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 60.430398][ T5810] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 60.539596][ T848] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 60.634065][ T5810] usbhid 5-1:0.0: can't add hid device: -71 [ 60.650058][ T5810] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 60.671836][ T5810] usb 5-1: USB disconnect, device number 4 [ 60.700310][ T848] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 60.711298][ T848] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 60.718303][ T848] usb 6-1: config 0 has no interface number 0 [ 60.721699][ T848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.728268][ T848] usb 6-1: config 0 descriptor?? [ 60.738676][ T848] cp210x 6-1:0.255: cp210x converter detected [ 61.047451][ T6144] __nla_validate_parse: 8 callbacks suppressed [ 61.047471][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 61.143138][ T848] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 61.353304][ T848] cp210x 6-1:0.255: failed to get vendor val 0x370c size 15: -32 [ 61.359137][ T848] cp210x 6-1:0.255: GPIO initialisation failed: -32 [ 61.379968][ T848] usb 6-1: cp210x converter now attached to ttyUSB0 [ 61.497820][ T6127] syz.1.95 uses obsolete (PF_INET,SOCK_PACKET) [ 61.514200][ T5818] usb 6-1: USB disconnect, device number 4 [ 61.533952][ T5818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 61.538003][ T5818] cp210x 6-1:0.255: device disconnected [ 62.142794][ T6176] syzkaller0: entered promiscuous mode [ 62.144564][ T6176] syzkaller0: entered allmulticast mode [ 62.192993][ T6168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.455261][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 62.744456][ T6208] loop6: detected capacity change from 0 to 2640 [ 62.758180][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.765636][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.768942][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.773708][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.781061][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 62.832858][ T6212] sg_write: data in/out 548828/136 bytes for SCSI command 0x0-- guessing data in; [ 62.832858][ T6212] program syz.2.130 not setting count and/or reply_len properly [ 62.864525][ T6212] tipc: Started in network mode [ 62.866888][ T6212] tipc: Node identity da8f783212e, cluster identity 4711 [ 62.869566][ T6212] tipc: Enabled bearer , priority 10 [ 62.878161][ T6211] tipc: Resetting bearer [ 62.896671][ T6211] tipc: Disabling bearer [ 63.097090][ T6215] kvm: kvm [6214]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 63.140305][ T6223] syzkaller0: entered promiscuous mode [ 63.142831][ T6223] syzkaller0: entered allmulticast mode [ 63.269655][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 63.269672][ T42] audit: type=1400 audit(1786845956.898:369): avc: denied { write } for pid=6227 comm="syz.0.137" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.275845][ T6229] random: crng reseeded on system resumption [ 63.282036][ T42] audit: type=1400 audit(1786845956.908:370): avc: denied { open } for pid=6227 comm="syz.0.137" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.486119][ T42] audit: type=1400 audit(1786845957.118:371): avc: denied { map_read map_write } for pid=6244 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.536722][ T6250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.147'. [ 63.573162][ T5831] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.741244][ T5831] usb 5-1: unable to get BOS descriptor or descriptor too short [ 63.743866][ T5831] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 63.747417][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 63.753297][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.755950][ T5831] usb 5-1: Product: syz [ 63.757285][ T5831] usb 5-1: Manufacturer: syz [ 63.758811][ T5831] usb 5-1: SerialNumber: syz [ 63.971131][ T42] audit: type=1400 audit(1786845957.608:372): avc: denied { set_context_mgr } for pid=6227 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.977219][ T42] audit: type=1400 audit(1786845957.608:373): avc: denied { map } for pid=6227 comm="syz.0.137" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.985235][ T42] audit: type=1400 audit(1786845957.608:374): avc: denied { call } for pid=6227 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.000576][ T5831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.031419][ T5831] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 64.036160][ T5831] usb 5-1: USB disconnect, device number 5 [ 64.050549][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.361340][ T42] audit: type=1400 audit(1786845957.998:375): avc: denied { mount } for pid=6282 comm="syz.3.161" name="/" dev="configfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.369334][ T42] audit: type=1400 audit(1786845957.998:376): avc: denied { search } for pid=6282 comm="syz.3.161" name="/" dev="configfs" ino=1097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.378790][ T42] audit: type=1400 audit(1786845957.998:377): avc: denied { search } for pid=6282 comm="syz.3.161" name="usb_gadget" dev="configfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.621160][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 64.640317][ T6291] netlink: 'syz.1.164': attribute type 2 has an invalid length. [ 64.646936][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 64.653077][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 64.688281][ T42] audit: type=1400 audit(1786845958.318:378): avc: denied { write } for pid=6294 comm="syz.1.166" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.092663][ T6341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 66.140568][ T6342] netlink: 'syz.2.178': attribute type 13 has an invalid length. [ 66.441211][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 66.540857][ T6360] syzkaller0: entered promiscuous mode [ 66.542983][ T6360] syzkaller0: entered allmulticast mode [ 67.294816][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 67.326217][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 67.339347][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 67.343439][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 67.345689][ T6386] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 67.362134][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 67.365652][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 67.383871][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 67.387487][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 67.405387][ T6367] kvm: kvm [6366]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 67.456305][ T6394] netlink: 'syz.0.201': attribute type 3 has an invalid length. [ 67.468799][ T6394] tipc: Enabling of bearer rejected, failed to enable media [ 68.198494][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 68.402399][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 68.427839][ T6442] syzkaller0: entered promiscuous mode [ 68.430928][ T6442] syzkaller0: entered allmulticast mode [ 68.491202][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 68.491214][ T42] audit: type=1400 audit(1786845962.128:405): avc: denied { write } for pid=6446 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.543525][ T42] audit: type=1400 audit(1786845962.178:406): avc: denied { listen } for pid=6446 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 68.818569][ T42] audit: type=1400 audit(1786845962.448:407): avc: denied { create } for pid=6467 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.946392][ T6474] syzkaller0: entered promiscuous mode [ 68.948590][ T6474] syzkaller0: entered allmulticast mode [ 69.219868][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 69.266570][ T42] audit: type=1400 audit(1786845962.898:408): avc: denied { create } for pid=6481 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.279549][ T42] audit: type=1400 audit(1786845962.908:409): avc: denied { bind } for pid=6481 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.641617][ T6493] syzkaller0: entered promiscuous mode [ 69.643582][ T6493] syzkaller0: entered allmulticast mode [ 69.877314][ T42] audit: type=1400 audit(1786845963.508:410): avc: denied { create } for pid=6511 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.887601][ T42] audit: type=1400 audit(1786845963.508:411): avc: denied { write } for pid=6511 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.995470][ T6519] syzkaller0: entered promiscuous mode [ 69.997327][ T6519] syzkaller0: entered allmulticast mode [ 70.015676][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 70.083735][ T42] audit: type=1400 audit(1786845963.708:412): avc: denied { mmap_zero } for pid=6526 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 70.128691][ T42] audit: type=1400 audit(1786845963.758:413): avc: denied { name_connect } for pid=6528 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 70.299591][ T5831] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.451161][ T5831] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.457441][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.462835][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.466864][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.472074][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.477477][ T5831] usb 7-1: config 0 descriptor?? [ 70.898980][ T5831] usbhid 7-1:0.0: can't add hid device: -71 [ 70.901739][ T5831] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 70.906541][ T5831] usb 7-1: USB disconnect, device number 3 [ 71.192769][ T42] audit: type=1400 audit(1786845964.828:414): avc: denied { connect } for pid=6550 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.347239][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.350815][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.420912][ T6560] syzkaller0: entered promiscuous mode [ 71.424927][ T6560] syzkaller0: entered allmulticast mode [ 71.561519][ T6573] netlink: 'syz.1.274': attribute type 13 has an invalid length. [ 71.929749][ T5079] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 72.080256][ T5079] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.084306][ T5079] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.087917][ T5079] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.092141][ T5079] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.097218][ T5079] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.102386][ T5079] usb 8-1: config 0 descriptor?? [ 72.193771][ T6594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.285'. [ 72.466159][ T6609] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 72.466159][ T6609] Please contact the netfilter-devel mailing list or update your nftables rules. [ 72.511889][ T5079] usbhid 8-1:0.0: can't add hid device: -71 [ 72.514422][ T5079] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 72.536714][ T5079] usb 8-1: USB disconnect, device number 2 [ 72.575967][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 72.780941][ T6633] netlink: 'syz.0.298': attribute type 13 has an invalid length. [ 73.418022][ T6642] lo: Caught tx_queue_len zero misconfig [ 73.549468][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.553656][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.605430][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.610324][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.720337][ T6097] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.724551][ T6097] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.728109][ T6097] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.732696][ T6097] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.853818][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 73.957328][ T6667] syzkaller0: entered promiscuous mode [ 73.963190][ T6667] syzkaller0: entered allmulticast mode [ 73.976290][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.177097][ T6678] netlink: 68 bytes leftover after parsing attributes in process `syz.3.316'. [ 74.223247][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 74.223263][ T42] audit: type=1400 audit(1786845967.858:416): avc: denied { bind } for pid=6680 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.238176][ T42] audit: type=1400 audit(1786845967.858:417): avc: denied { setopt } for pid=6680 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.391804][ T6690] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 74.501715][ T6700] netlink: 68 bytes leftover after parsing attributes in process `syz.0.327'. [ 74.580969][ T6708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'. [ 74.590693][ T6710] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.677678][ T6722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.693677][ T6725] netlink: 68 bytes leftover after parsing attributes in process `syz.2.339'. [ 74.768558][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 74.863639][ T42] audit: type=1400 audit(1786845968.498:418): avc: denied { accept } for pid=6735 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.870311][ T42] audit: type=1400 audit(1786845968.498:419): avc: denied { write } for pid=6735 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.877188][ T42] audit: type=1400 audit(1786845968.508:420): avc: denied { read } for pid=6735 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 75.972194][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 75.981987][ T42] audit: type=1400 audit(1786845969.618:421): avc: denied { getopt } for pid=6778 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.125149][ T6794] netlink: 68 bytes leftover after parsing attributes in process `syz.3.365'. [ 76.470690][ T6824] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 773 [ 76.553610][ T42] audit: type=1400 audit(1786845970.188:422): avc: denied { connect } for pid=6825 comm="syz.3.380" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.709548][ T42] audit: type=1400 audit(1786845970.338:423): avc: denied { create } for pid=6842 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.715844][ T42] audit: type=1400 audit(1786845970.348:424): avc: denied { setopt } for pid=6842 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.723977][ T42] audit: type=1400 audit(1786845970.348:425): avc: denied { write } for pid=6842 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.909798][ T6093] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.915194][ T6093] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.929635][ T6093] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.932411][ T6093] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.009731][ T1039] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 77.013467][ T6872] loop6: detected capacity change from 0 to 2640 [ 77.020900][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.023731][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.026472][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.029295][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.032215][ T5744] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.074079][ T6870] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.076763][ T6870] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.167886][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.175038][ T1039] usb 7-1: unable to get BOS descriptor or descriptor too short [ 77.177712][ T6870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.179073][ T1039] usb 7-1: not running at top speed; connect to a high speed hub [ 77.184211][ T1039] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 77.189217][ T1039] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 77.192887][ T1039] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 77.196396][ T1039] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 77.200733][ T1039] usb 7-1: config 14 has no interface number 0 [ 77.203188][ T1039] usb 7-1: config 14 has no interface number 1 [ 77.205717][ T1039] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 77.210703][ T1039] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 77.215577][ T1039] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.220600][ T1039] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 8329, setting to 64 [ 77.224995][ T1039] usb 7-1: config 14 interface 57 has no altsetting 0 [ 77.233140][ T1039] usb 7-1: config 14 interface 228 has no altsetting 0 [ 77.238240][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.241399][ T1039] usb 7-1: Product: syz [ 77.242977][ T1039] usb 7-1: Manufacturer: syz [ 77.244499][ T1039] usb 7-1: SerialNumber: syz [ 77.337629][ T6886] __nla_validate_parse: 16 callbacks suppressed [ 77.337703][ T6886] netlink: 68 bytes leftover after parsing attributes in process `syz.0.405'. [ 77.401781][ T6093] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.406994][ T6093] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.419166][ T6093] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.425525][ T6093] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.430294][ T6093] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.433137][ T6093] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.435977][ T6093] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.438833][ T6093] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.443678][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 77.479584][ T6896] loop6: detected capacity change from 0 to 2640 [ 77.485301][ T5726] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.490361][ T5726] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.493851][ T5726] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.497231][ T5726] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.500811][ T5726] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.539888][ T6902] syzkaller0: entered promiscuous mode [ 77.543232][ T6902] syzkaller0: entered allmulticast mode [ 77.659898][ T1039] legousbtower 7-1:14.57: interrupt endpoints not found [ 78.064421][ T1039] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.16 build 0 [ 78.068499][ T1039] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 78.768738][ T6948] kvm_pr_unimpl_wrmsr: 71 callbacks suppressed [ 78.768753][ T6948] kvm: kvm [6947]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 78.797368][ T6948] kvm: kvm [6947]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 79.732891][ T5835] usb 7-1: USB disconnect, device number 4 [ 79.752008][ T5835] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 79.765689][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 79.929080][ T6985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.447'. [ 79.973648][ T6996] netpci0: tun_chr_ioctl cmd 1074025681 [ 80.110658][ T7007] netlink: 'syz.1.452': attribute type 13 has an invalid length. [ 80.119854][ T5835] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.259537][ T5835] usb 7-1: device descriptor read/64, error -71 [ 80.359543][ T1039] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 80.513119][ T1039] usb 8-1: unable to get BOS descriptor or descriptor too short [ 80.517282][ T1039] usb 8-1: not running at top speed; connect to a high speed hub [ 80.520671][ T1039] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 80.525668][ T1039] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 80.528991][ T1039] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 80.529496][ T5835] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 80.532153][ T1039] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 80.539361][ T1039] usb 8-1: config 14 has no interface number 0 [ 80.542064][ T1039] usb 8-1: config 14 has no interface number 1 [ 80.544715][ T1039] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 80.549147][ T1039] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 80.554081][ T1039] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.558742][ T1039] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 8329, setting to 64 [ 80.563378][ T1039] usb 8-1: config 14 interface 57 has no altsetting 0 [ 80.566201][ T1039] usb 8-1: config 14 interface 228 has no altsetting 0 [ 80.571784][ T1039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.575192][ T1039] usb 8-1: Product: syz [ 80.576974][ T1039] usb 8-1: Manufacturer: syz [ 80.578939][ T1039] usb 8-1: SerialNumber: syz [ 80.659626][ T5835] usb 7-1: device descriptor read/64, error -71 [ 80.770623][ T5835] usb usb7-port1: attempt power cycle [ 80.996347][ T1039] legousbtower 8-1:14.57: interrupt endpoints not found [ 81.119575][ T5835] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 81.140189][ T5835] usb 7-1: device descriptor read/8, error -71 [ 81.379613][ T5835] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 81.396714][ T1039] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 0.16 build 0 [ 81.403351][ T1039] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 81.411952][ T5835] usb 7-1: device descriptor read/8, error -71 [ 81.519966][ T5835] usb usb7-port1: unable to enumerate USB device [ 81.579486][ T58] cfg80211: failed to load regulatory.db [ 81.916551][ T7035] syzkaller0: entered promiscuous mode [ 81.916561][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 81.916576][ T42] audit: type=1400 audit(1786845975.548:428): avc: denied { ioctl } for pid=7034 comm="syz.0.463" path="socket:[16086]" dev="sockfs" ino=16086 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.918437][ T7035] syzkaller0: entered allmulticast mode [ 82.137067][ T7042] netlink: 'syz.0.465': attribute type 13 has an invalid length. [ 82.146404][ T7043] netlink: 'syz.1.466': attribute type 20 has an invalid length. [ 82.149895][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 82.414462][ T7051] syzkaller0: entered promiscuous mode [ 82.416374][ T7051] syzkaller0: entered allmulticast mode [ 83.081996][ T2321] usb 8-1: USB disconnect, device number 3 [ 83.099060][ T2321] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 83.158956][ T42] audit: type=1400 audit(1786845976.788:429): avc: denied { create } for pid=7082 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.167380][ T42] audit: type=1400 audit(1786845976.798:430): avc: denied { getopt } for pid=7082 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.492231][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 83.544039][ T7095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.484'. [ 83.549812][ T2321] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.680071][ T2321] usb 8-1: device descriptor read/64, error -71 [ 83.921011][ T2321] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 84.049668][ T2321] usb 8-1: device descriptor read/64, error -71 [ 84.077883][ T42] audit: type=1400 audit(1786845977.708:431): avc: denied { bind } for pid=7098 comm="syz.0.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.160396][ T2321] usb usb8-port1: attempt power cycle [ 84.209939][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 84.221708][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 84.500546][ T2321] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.521235][ T2321] usb 8-1: device descriptor read/8, error -71 [ 84.546818][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 84.599208][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.602685][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.702404][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.715976][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.759527][ T2321] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.780662][ T2321] usb 8-1: device descriptor read/8, error -71 [ 84.888461][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 84.899757][ T2321] usb usb8-port1: unable to enumerate USB device [ 84.909810][ T6097] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.914292][ T6097] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.917929][ T6097] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.922421][ T6097] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.323191][ T42] audit: type=1400 audit(1786845978.958:432): avc: denied { search } for pid=5438 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.331782][ T42] audit: type=1400 audit(1786845978.968:433): avc: denied { search } for pid=5438 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.340450][ T42] audit: type=1400 audit(1786845978.968:434): avc: denied { search } for pid=5438 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.407475][ T42] audit: type=1400 audit(1786845979.038:435): avc: denied { read } for pid=7176 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.428081][ T42] audit: type=1400 audit(1786845979.048:436): avc: denied { read open } for pid=7176 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.439755][ T42] audit: type=1400 audit(1786845979.048:437): avc: denied { getattr } for pid=7176 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.484670][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.633905][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.649128][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.800530][ T7192] netlink: 'syz.1.516': attribute type 13 has an invalid length. [ 85.900360][ T6097] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.905114][ T6097] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.019558][ T6093] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.024572][ T6093] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.427180][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 86.431942][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.3.523'. [ 86.456973][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.461534][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.464755][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.468367][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.471817][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.899984][ T7241] kvm: kvm [7239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 86.924581][ T7241] kvm: kvm [7239]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 86.932341][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.934730][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.937195][ T7218] bridge_slave_0: entered allmulticast mode [ 86.940008][ T7218] bridge_slave_0: entered promiscuous mode [ 86.943352][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.945723][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.948944][ T7218] bridge_slave_1: entered allmulticast mode [ 86.953305][ T7218] bridge_slave_1: entered promiscuous mode [ 86.970535][ T7218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.976485][ T7218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.005799][ T7218] team0: Port device team_slave_0 added [ 87.009189][ T7218] team0: Port device team_slave_1 added [ 87.023381][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.025532][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.033396][ T7218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.037778][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.039999][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.047854][ T7218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.074015][ T7218] hsr_slave_0: entered promiscuous mode [ 87.076770][ T7218] hsr_slave_1: entered promiscuous mode [ 87.080724][ T7218] debugfs: 'hsr0' already exists in 'hsr' [ 87.082523][ T7218] Cannot create hsr debugfs directory [ 87.193375][ T7218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.197956][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.201286][ T7218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.205520][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.208484][ T7218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.213707][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.216917][ T7218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.222167][ T7218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.270083][ T7218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.282879][ T7218] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.288225][ T229] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.290646][ T229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.296838][ T229] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.299213][ T229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.597719][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.788032][ T7218] veth0_vlan: entered promiscuous mode [ 87.798689][ T7218] veth1_vlan: entered promiscuous mode [ 87.815219][ T7218] veth0_macvtap: entered promiscuous mode [ 87.819056][ T7218] veth1_macvtap: entered promiscuous mode [ 87.836813][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.846396][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.897500][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.902981][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.916549][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.919318][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.929683][ T6097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.932944][ T6097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.936353][ T6097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.941157][ T6097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.229514][ T7142] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 88.359684][ T7142] usb 9-1: device descriptor read/64, error -71 [ 88.442800][ T42] kauditd_printk_skb: 218 callbacks suppressed [ 88.442814][ T42] audit: type=1400 audit(1786845982.078:656): avc: denied { bind } for pid=7307 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.452670][ T42] audit: type=1400 audit(1786845982.088:657): avc: denied { name_bind } for pid=7307 comm="syz.0.543" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 88.459509][ T42] audit: type=1400 audit(1786845982.088:658): avc: denied { node_bind } for pid=7307 comm="syz.0.543" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 88.507360][ T42] audit: type=1400 audit(1786845982.138:659): avc: denied { setopt } for pid=7307 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.523362][ T34] IPVS: starting estimator thread 0... [ 88.531194][ T5086] Bluetooth: hci1: command tx timeout [ 88.619724][ T7310] IPVS: using max 28 ests per chain, 67200 per kthread [ 88.621849][ T7142] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 88.730607][ T7319] random: crng reseeded on system resumption [ 88.760799][ T7142] usb 9-1: device descriptor read/64, error -71 [ 88.871412][ T7142] usb usb9-port1: attempt power cycle [ 88.989549][ T5832] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 89.153548][ T5832] usb 8-1: unable to get BOS descriptor or descriptor too short [ 89.156023][ T5832] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 89.160066][ T5832] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 89.165173][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.168069][ T5832] usb 8-1: Product: syz [ 89.170317][ T5832] usb 8-1: Manufacturer: syz [ 89.172144][ T5832] usb 8-1: SerialNumber: syz [ 89.239500][ T7142] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 89.260298][ T7142] usb 9-1: device descriptor read/8, error -71 [ 89.383107][ T7319] binder_alloc: 7318: binder_alloc_buf, no vma [ 89.392190][ T5832] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.421411][ T5832] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 89.425859][ T5832] usb 8-1: USB disconnect, device number 8 [ 89.444113][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.510615][ T7142] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 89.536948][ T7328] netlink: 'syz.2.551': attribute type 5 has an invalid length. [ 89.542977][ T7142] usb 9-1: device descriptor read/8, error -71 [ 89.660561][ T7142] usb usb9-port1: unable to enumerate USB device [ 90.043109][ T42] audit: type=1400 audit(1786845983.678:660): avc: denied { read } for pid=7339 comm="syz.3.555" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.137022][ T42] audit: type=1400 audit(1786845983.768:661): avc: denied { read write } for pid=5724 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.144856][ T42] audit: type=1400 audit(1786845983.768:662): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.153720][ T42] audit: type=1400 audit(1786845983.768:663): avc: denied { ioctl } for pid=5724 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.164074][ T7342] syzkaller0: entered promiscuous mode [ 90.166264][ T7342] syzkaller0: entered allmulticast mode [ 90.171677][ T42] audit: type=1400 audit(1786845983.808:664): avc: denied { setopt } for pid=7341 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.489799][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.609640][ T5086] Bluetooth: hci1: command tx timeout [ 90.639653][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 90.642743][ T34] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.647014][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.650659][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.653716][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.658671][ T34] usb 5-1: config 0 descriptor?? [ 90.664678][ T34] hub 5-1:0.0: USB hub found [ 90.710353][ T7355] random: crng reseeded on system resumption [ 90.867022][ T34] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 90.969724][ T5725] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.124438][ T5725] usb 7-1: unable to get BOS descriptor or descriptor too short [ 91.130005][ T5725] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 91.136038][ T7368] syzkaller0: entered promiscuous mode [ 91.138375][ T5725] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 91.140902][ T7368] syzkaller0: entered allmulticast mode [ 91.147952][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.154271][ T5725] usb 7-1: Product: syz [ 91.156021][ T5725] usb 7-1: Manufacturer: syz [ 91.166153][ T5725] usb 7-1: SerialNumber: syz [ 91.274510][ T34] hid-generic 0003:046D:C31C.0005: unknown main item tag 0x0 [ 91.287812][ T34] hid-generic 0003:046D:C31C.0005: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 91.382125][ T5725] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 91.404685][ T5725] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 91.409617][ T5725] usb 7-1: USB disconnect, device number 9 [ 91.424154][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.640241][ T5832] usb 5-1: USB disconnect, device number 6 [ 92.338376][ T7400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.360437][ T7404] syzkaller0: entered promiscuous mode [ 92.362812][ T7404] syzkaller0: entered allmulticast mode [ 92.409712][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 92.539620][ T34] usb 9-1: device descriptor read/64, error -71 [ 92.552249][ T7408] random: crng reseeded on system resumption [ 92.690077][ T5086] Bluetooth: hci1: command tx timeout [ 92.711455][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 92.714711][ T7417] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 92.717984][ T7417] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 92.791269][ T34] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 92.810147][ T50] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.939791][ T34] usb 9-1: device descriptor read/64, error -71 [ 92.971868][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.975054][ T50] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 92.979595][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 92.987309][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.990763][ T50] usb 5-1: Product: syz [ 92.992436][ T50] usb 5-1: Manufacturer: syz [ 92.994328][ T50] usb 5-1: SerialNumber: syz [ 93.060122][ T34] usb usb9-port1: attempt power cycle [ 93.212892][ T50] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.243940][ T50] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 93.253660][ T50] usb 5-1: USB disconnect, device number 7 [ 93.270415][ T5744] udevd[5744]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.409954][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 93.430007][ T34] usb 9-1: device descriptor read/8, error -71 [ 93.670772][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 93.690318][ T34] usb 9-1: device descriptor read/8, error -71 [ 93.811107][ T34] usb usb9-port1: unable to enumerate USB device [ 93.814098][ T5086] Bluetooth: hci3: link tx timeout [ 93.822597][ T5086] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.282562][ T7466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.443420][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.599'. [ 94.568974][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 94.779681][ T5734] Bluetooth: hci1: command tx timeout [ 95.222807][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 95.275365][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.4.604'. [ 95.398196][ T5734] Bluetooth: hci3: link tx timeout [ 95.401792][ T5734] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.899683][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 96.098259][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 96.322049][ T42] audit: type=1400 audit(1786845989.948:665): avc: denied { ioctl } for pid=7521 comm="syz.0.616" path="socket:[17934]" dev="sockfs" ino=17934 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.332106][ T7522] warning: `syz.0.616' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.418642][ T7524] netlink: 'syz.0.617': attribute type 13 has an invalid length. [ 96.557040][ T42] audit: type=1400 audit(1786845990.188:666): avc: denied { write } for pid=5736 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.567799][ T42] audit: type=1400 audit(1786845990.188:667): avc: denied { write } for pid=5736 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.579165][ T42] audit: type=1400 audit(1786845990.188:668): avc: denied { write } for pid=5736 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.579969][ T5736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.590631][ T5736] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 96.592416][ T42] audit: type=1400 audit(1786845990.188:669): avc: denied { write } for pid=5736 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 96.593043][ T5736] audit: backlog limit exceeded [ 96.604865][ T5736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.607327][ T5736] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 96.721766][ T7527] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 96.726202][ T7527] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 96.728903][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.0.617 Not tainted syzkaller #0 PREEMPT(full) [ 96.731769][ T7527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.734903][ T7527] RIP: 0010:klist_put+0x4d/0x1d0 [ 96.736545][ T7527] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 10 0d [ 96.742483][ T7527] RSP: 0018:ffffc90005db76f0 EFLAGS: 00010202 [ 96.744440][ T7527] RAX: dffffc0000000000 RBX: ffff88804a986860 RCX: 0000000000000000 [ 96.747263][ T7527] RDX: 000000000000000b RSI: ffffffff8bb263a5 RDI: 0000000000000058 [ 96.749821][ T7527] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2247f98 [ 96.752268][ T7527] R10: ffffffff9123fcc3 R11: 0000000000000001 R12: 0000000000000000 [ 96.754769][ T7527] R13: 0000000000000001 R14: ffffffff9123fc80 R15: dffffc0000000000 [ 96.757363][ T7527] FS: 0000000000000000(0000) GS:ffff8880d5cde000(0000) knlGS:0000000000000000 [ 96.760249][ T7527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.762333][ T7527] CR2: 000000110c41487d CR3: 000000005145e000 CR4: 0000000000352ef0 [ 96.764839][ T7527] Call Trace: [ 96.765978][ T7527] [ 96.766969][ T7527] klist_remove+0x14c/0x2e0 [ 96.768529][ T7527] ? __pfx_klist_remove+0x10/0x10 [ 96.770156][ T7527] ? __pfx_kobject_move+0x10/0x10 [ 96.772135][ T7527] ? kobject_put+0xb9/0x640 [ 96.773593][ T7527] device_move+0x12d/0x1140 [ 96.775101][ T7527] hci_conn_del_sysfs+0x86/0x1a0 [ 96.776695][ T7527] hci_conn_del+0x506/0x1180 [ 96.778188][ T7527] hci_conn_hash_flush+0x186/0x280 [ 96.779809][ T7527] hci_dev_close_sync+0x5cf/0x13c0 [ 96.781411][ T7527] ? find_held_lock+0x2b/0x80 [ 96.782945][ T7527] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 96.784690][ T7527] hci_dev_do_close+0x2e/0xb0 [ 96.786231][ T7527] hci_unregister_dev+0x23f/0x690 [ 96.787811][ T7527] vhci_release+0x17d/0x230 [ 96.789256][ T7527] ? __pfx_vhci_release+0x10/0x10 [ 96.791182][ T7527] __fput+0x3ff/0xb50 [ 96.792870][ T7527] task_work_run+0x150/0x240 [ 96.794744][ T7527] ? __pfx_task_work_run+0x10/0x10 [ 96.796814][ T7527] do_exit+0x951/0x2ae0 [ 96.798527][ T7527] ? find_held_lock+0x2b/0x80 [ 96.800370][ T7527] ? __pfx_do_exit+0x10/0x10 [ 96.802222][ T7527] ? do_raw_spin_lock+0x128/0x260 [ 96.804279][ T7527] ? find_held_lock+0x2b/0x80 [ 96.806183][ T7527] ? get_signal+0x7e0/0x21e0 [ 96.808129][ T7527] do_group_exit+0xd5/0x2a0 [ 96.810064][ T7527] get_signal+0x1ec7/0x21e0 [ 96.811916][ T7527] ? __pfx_do_nanosleep+0x10/0x10 [ 96.813865][ T7527] ? __asan_memset+0x23/0x50 [ 96.815623][ T7527] ? __pfx_get_signal+0x10/0x10 [ 96.817689][ T7527] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 96.819966][ T7527] arch_do_signal_or_restart+0x91/0x7e0 [ 96.822321][ T7527] ? get_timespec64+0x147/0x240 [ 96.824304][ T7527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 96.826751][ T7527] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 96.829166][ T7527] exit_to_user_mode_loop+0x139/0x6f0 [ 96.831285][ T7527] ? rcu_is_watching+0x12/0xc0 [ 96.833317][ T7527] do_syscall_64+0x666/0x870 [ 96.835195][ T7527] ? clear_bhb_loop+0x70/0xc0 [ 96.837111][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.839487][ T7527] RIP: 0033:0x7f265815e90e [ 96.841342][ T7527] Code: Unable to access opcode bytes at 0x7f265815e8e4. [ 96.844149][ T7527] RSP: 002b:00007f2659084f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 96.847502][ T7527] RAX: fffffffffffffdfc RBX: 00007f26590856c0 RCX: 00007f265815e90e [ 96.850911][ T7527] RDX: 00007f2659084fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.853985][ T7527] RBP: 00007f2658235024 R08: 0000000000000000 R09: 0000000000000000 [ 96.857135][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.860224][ T7527] R13: 00007f2658426038 R14: 00007f2658425fa0 R15: 00007ffd93ea6068 [ 96.863410][ T7527] [ 96.864706][ T7527] Modules linked in: [ 96.867087][ T7527] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 96.883501][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 96.918036][ T7527] RIP: 0010:klist_put+0x4d/0x1d0 [ 96.920698][ T7527] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 7c 10 0d [ 96.928609][ T7527] RSP: 0018:ffffc90005db76f0 EFLAGS: 00010202 [ 96.932436][ T7527] RAX: dffffc0000000000 RBX: ffff88804a986860 RCX: 0000000000000000 [ 96.934962][ T7527] RDX: 000000000000000b RSI: ffffffff8bb263a5 RDI: 0000000000000058 [ 96.937317][ T7527] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2247f98 [ 96.940132][ T7527] R10: ffffffff9123fcc3 R11: 0000000000000001 R12: 0000000000000000 [ 96.942714][ T7527] R13: 0000000000000001 R14: ffffffff9123fc80 R15: dffffc0000000000 [ 96.945115][ T7527] FS: 0000000000000000(0000) GS:ffff8880d5cde000(0000) knlGS:0000000000000000 [ 96.947783][ T7527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.951803][ T7527] CR2: 00005563d057ea78 CR3: 0000000023bfe000 CR4: 0000000000352ef0 [ 96.954419][ T7527] Kernel panic - not syncing: Fatal exception [ 96.957523][ T7527] Kernel Offset: disabled [ 96.958911][ T7527] Rebooting in 86400 seconds..