last executing test programs: 15.447045987s ago: executing program 2 (id=1245): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/206, 0xce}], 0x4, 0x0, 0x0) 12.932464361s ago: executing program 4 (id=1252): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) 12.610920723s ago: executing program 4 (id=1255): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f00000000c0)='G', 0xfffffffffffffca0, 0x8001, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000180)=""/172, 0x10401, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x30) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() getrlimit(0xc, &(0x7f0000000000)) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.690761046s ago: executing program 2 (id=1259): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xf0}) 9.189983395s ago: executing program 2 (id=1261): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 8.062804495s ago: executing program 0 (id=1265): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) 7.201771617s ago: executing program 2 (id=1266): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x57, 0x6a, 0xb3, 0x10, 0x67b, 0x27a1, 0x906b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0xde}}]}}]}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x16) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 6.733943711s ago: executing program 0 (id=1268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 6.067853663s ago: executing program 0 (id=1269): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/206, 0xce}], 0x4, 0x0, 0x0) 5.921472584s ago: executing program 4 (id=1271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) syz_emit_ethernet(0x69, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2.506062628s ago: executing program 3 (id=1274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x5, &(0x7f0000000700)="c1", 0x1) 2.452344376s ago: executing program 2 (id=1275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r0, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 2.399571462s ago: executing program 0 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}]}, 0x24}}, 0x0) 2.194303736s ago: executing program 4 (id=1277): rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.193062024s ago: executing program 1 (id=1278): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) 2.159428562s ago: executing program 3 (id=1279): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random='\a\x00\x00 \x00'}) 2.102509374s ago: executing program 2 (id=1280): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0) 2.101387648s ago: executing program 0 (id=1281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.885823587s ago: executing program 3 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x18, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x5c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10a}]}]}, 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002800000000000278000100"/41], 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, &(0x7f00000001c0), 0x4) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@msize={'msize', 0x3d, 0x775e1e8}}]}}) 1.885018895s ago: executing program 1 (id=1283): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x5ed4f0a0f7416125, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000002", @ANYRESDEC=0x0], &(0x7f0000000000)='syzkaller\x00', 0x92}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) keyctl$clear(0x5, 0xfffffffffffffffe) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30044041) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff63, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.852770734s ago: executing program 4 (id=1284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x66, &(0x7f0000000340)={0x0, 0x0, 0xa5, 0x85, ""/133}, &(0x7f0000000400)=0xa5, 0x0) 1.737604567s ago: executing program 0 (id=1285): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x57, 0x6a, 0xb3, 0x10, 0x67b, 0x27a1, 0x906b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0xde}}]}}]}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x16) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.413579428s ago: executing program 4 (id=1286): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/206, 0xce}], 0x4, 0x0, 0x0) 1.34679295s ago: executing program 1 (id=1287): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x0, 0x3, {0x0, 0x0, 0x1000}}) 418.829967ms ago: executing program 3 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014003500766c616e300000000000000000000000140016"], 0x50}}, 0x0) 384.927811ms ago: executing program 1 (id=1289): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000035c0)={'broute\x00'}, &(0x7f0000003640)=0x78) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 220.46642ms ago: executing program 3 (id=1290): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003b0007010000000000000000010000000400000004000880080001"], 0x24}}, 0x0) 219.187464ms ago: executing program 1 (id=1291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r0, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) 76.287915ms ago: executing program 3 (id=1292): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000180)={0x20, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x14}}, 0x0) r5 = socket(0x11, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000440)="00f2aa75", 0x4, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000008c0)="ecf0ede4344a999e15e3a8d7f7bf1e1f0c2a3c9a452e71374423feb053a62d3ed88b8243f7142a0e76dde55f942403ae43718619e3664124e399055b3dea5eef014ca32f687a0a2bf649ae630000000000000000000000000000f712f8f66b75f9f5c96a8f2e48fedb37ee42838ca46ed22d17fd8b6456a3f3c60210ddc07d63d5c44d137d9c0880f039fabcfae3415d0e905c0e530576a1f7b8b935fb9cb0105fa826747baa1b77d23552fedec45610a3f2e52fd07814a52f52d47c22a10465f2fdb5be", 0xc4, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r6, r7, r8}, &(0x7f0000000480)=""/208, 0xd0, &(0x7f0000000600)={&(0x7f0000000400)={'xxhash64\x00'}}) 0s ago: executing program 1 (id=1293): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): option arp_interval: allowed values 0 - 2147483647 [ 257.367119][ T5097] Bluetooth: hci3: command tx timeout [ 257.384109][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.710007][ T29] audit: type=1400 audit(1720750697.278:407): avc: denied { view } for pid=6768 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 257.744378][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.886995][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.078160][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.112652][ T29] audit: type=1400 audit(1720750697.728:408): avc: denied { watch watch_reads } for pid=6781 comm="syz.2.491" path="/proc/283" dev="proc" ino=13774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 258.135651][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.220485][ T6784] netlink: 'syz.3.490': attribute type 7 has an invalid length. [ 258.382895][ T6432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.042977][ T29] audit: type=1400 audit(1720750698.658:409): avc: denied { connect } for pid=6790 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.094812][ T6795] sp0: Synchronizing with TNC [ 259.103201][ T6432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.440273][ T5097] Bluetooth: hci3: command tx timeout [ 261.524287][ T5097] Bluetooth: hci3: command tx timeout [ 261.528622][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.568412][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.381016][ T6432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.521166][ T6738] chnl_net:caif_netlink_parms(): no params data found [ 262.585203][ T6432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.750486][ T29] audit: type=1400 audit(1720750702.358:410): avc: denied { watch watch_reads } for pid=6808 comm="syz.3.497" path="/51" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.992086][ T6813] netlink: 132 bytes leftover after parsing attributes in process `syz.4.498'. [ 263.024949][ T12] bridge_slave_1: left allmulticast mode [ 263.066282][ T12] bridge_slave_1: left promiscuous mode [ 263.094248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.187946][ T12] bridge_slave_0: left allmulticast mode [ 263.216183][ T12] bridge_slave_0: left promiscuous mode [ 263.248024][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.602274][ T5097] Bluetooth: hci3: command tx timeout [ 266.614485][ T6853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.546573][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.582262][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.604319][ T12] bond0 (unregistering): Released all slaves [ 267.704305][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 267.714092][ T6849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.504'. [ 268.102885][ T6872] mmap: syz.2.510 (6872) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 268.156987][ T6868] netlink: 'syz.3.508': attribute type 16 has an invalid length. [ 268.177410][ T6868] netlink: 'syz.3.508': attribute type 17 has an invalid length. [ 268.340612][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.368141][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.387018][ T6738] bridge_slave_0: entered allmulticast mode [ 268.418327][ T6738] bridge_slave_0: entered promiscuous mode [ 268.526063][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.569083][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.617167][ T6738] bridge_slave_1: entered allmulticast mode [ 268.646035][ T6738] bridge_slave_1: entered promiscuous mode [ 269.090933][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.223648][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.327734][ T6893] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 269.338953][ T12] hsr_slave_0: left promiscuous mode [ 269.408964][ T12] hsr_slave_1: left promiscuous mode [ 269.429232][ T5097] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 269.432366][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.452239][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.468580][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.490597][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.582323][ T12] veth1_macvtap: left promiscuous mode [ 269.595966][ T12] veth0_macvtap: left promiscuous mode [ 269.613951][ T12] veth1_vlan: left promiscuous mode [ 269.629984][ T12] veth0_vlan: left promiscuous mode [ 270.635613][ T6908] fuse: Bad value for 'fd' [ 270.654042][ T29] audit: type=1400 audit(1720750710.008:411): avc: denied { listen } for pid=6902 comm="syz.4.515" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.242035][ T29] audit: type=1400 audit(1720750710.038:412): avc: denied { connect } for pid=6902 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 271.340016][ T29] audit: type=1400 audit(1720750710.038:413): avc: denied { name_connect } for pid=6902 comm="syz.4.515" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 271.390049][ T29] audit: type=1400 audit(1720750710.168:414): avc: denied { write } for pid=6902 comm="syz.4.515" laddr=172.20.20.10 lport=51798 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 273.455501][ T12] team0 (unregistering): Port device team_slave_1 removed [ 273.557072][ T12] team0 (unregistering): Port device team_slave_0 removed [ 274.362647][ T6738] team0: Port device team_slave_0 added [ 274.482848][ T6738] team0: Port device team_slave_1 added [ 274.682264][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.706866][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.747165][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.838808][ T6952] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.520'. [ 274.901689][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.908708][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.957852][ T6952] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 274.978532][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.774759][ T6738] hsr_slave_0: entered promiscuous mode [ 275.838253][ T6738] hsr_slave_1: entered promiscuous mode [ 276.064831][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.261504][ T29] audit: type=1400 audit(1720750715.868:415): avc: denied { write } for pid=6966 comm="syz.2.524" name="card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 276.473474][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.534448][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.541771][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.668087][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.675519][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.745289][ T29] audit: type=1400 audit(1720750716.298:416): avc: denied { write } for pid=4517 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.809908][ T29] audit: type=1400 audit(1720750716.298:417): avc: denied { remove_name } for pid=4517 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.835029][ T29] audit: type=1400 audit(1720750716.298:418): avc: denied { rename } for pid=4517 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.864884][ T29] audit: type=1400 audit(1720750716.298:419): avc: denied { add_name } for pid=4517 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.946804][ T29] audit: type=1400 audit(1720750716.298:420): avc: denied { unlink } for pid=4517 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.902524][ T29] audit: type=1400 audit(1720750716.318:421): avc: denied { create } for pid=4517 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.189958][ T5097] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 279.528875][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.548802][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.558050][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.579962][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.594910][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 279.606011][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.586866][ T29] audit: type=1400 audit(1720750720.198:422): avc: denied { write } for pid=7023 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 280.697875][ T6738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.738469][ T6738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.797388][ T29] audit: type=1400 audit(1720750720.408:423): avc: denied { listen } for pid=7027 comm="syz.4.537" lport=57956 faddr=::ffff:172.30.0.5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.843746][ T6738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.933597][ T6738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.761738][ T5097] Bluetooth: hci0: command tx timeout [ 282.029271][ T11] bridge_slave_1: left allmulticast mode [ 282.036964][ T11] bridge_slave_1: left promiscuous mode [ 282.050113][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.076033][ T11] bridge_slave_0: left allmulticast mode [ 282.103287][ T11] bridge_slave_0: left promiscuous mode [ 282.109222][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.119486][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.146994][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.178597][ T11] bond0 (unregistering): Released all slaves [ 283.437089][ T11] hsr_slave_0: left promiscuous mode [ 283.495588][ T11] hsr_slave_1: left promiscuous mode [ 283.538137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.551254][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.839772][ T5097] Bluetooth: hci0: command tx timeout [ 285.920848][ T5097] Bluetooth: hci0: command tx timeout [ 290.934876][ T5099] Bluetooth: hci0: command tx timeout [ 292.399417][ T11] team0 (unregistering): Port device team_slave_1 removed [ 292.422248][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.442025][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.471459][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.511661][ T5143] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 292.520466][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.555314][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 292.565908][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 292.747708][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.770577][ T11] team0 (unregistering): Port device team_slave_0 removed [ 292.817006][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.849649][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 292.878720][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.925235][ T5143] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 292.968009][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 292.981222][ T5143] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 292.990778][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.011972][ T5143] usb 3-1: config 0 descriptor?? [ 293.590396][ T5143] ntrig 0003:1B96:000A.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 294.333229][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 294.640078][ T53] Bluetooth: hci1: command tx timeout [ 294.665824][ T5143] usb 3-1: USB disconnect, device number 5 [ 295.113198][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.138242][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.162778][ T7012] bridge_slave_0: entered allmulticast mode [ 295.186037][ T7012] bridge_slave_0: entered promiscuous mode [ 296.489982][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.497337][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.569431][ T7012] bridge_slave_1: entered allmulticast mode [ 296.592283][ T7012] bridge_slave_1: entered promiscuous mode [ 296.721160][ T53] Bluetooth: hci1: command tx timeout [ 297.291376][ T7125] fuse: Bad value for 'fd' [ 297.446869][ T7120] sp0: Synchronizing with TNC [ 298.799933][ T53] Bluetooth: hci1: command tx timeout [ 300.880536][ T53] Bluetooth: hci1: command tx timeout [ 301.739155][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.920372][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.016386][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.373569][ T7012] team0: Port device team_slave_0 added [ 302.422071][ T7012] team0: Port device team_slave_1 added [ 302.642161][ T7141] netlink: 256 bytes leftover after parsing attributes in process `syz.2.561'. [ 302.651623][ T7141] netlink: 52 bytes leftover after parsing attributes in process `syz.2.561'. [ 302.834240][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.921242][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.944846][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.994180][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.104306][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.112977][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.141463][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.420831][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.428498][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.540768][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.548144][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.768961][ T7012] hsr_slave_0: entered promiscuous mode [ 303.796934][ T7012] hsr_slave_1: entered promiscuous mode [ 303.812964][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.859645][ T7012] Cannot create hsr debugfs directory [ 304.084766][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 304.484066][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.894414][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.123717][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.686366][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.061737][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.103282][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.126702][ T7085] bridge_slave_0: entered allmulticast mode [ 306.152064][ T7085] bridge_slave_0: entered promiscuous mode [ 306.470590][ T29] audit: type=1400 audit(1720750746.078:424): avc: denied { mount } for pid=7170 comm="syz.4.566" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 306.606979][ T7176] netlink: 256 bytes leftover after parsing attributes in process `syz.4.566'. [ 307.121734][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.173182][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.454463][ T29] audit: type=1400 audit(1720750747.058:425): avc: denied { unmount } for pid=5087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 307.475051][ T7085] bridge_slave_1: entered allmulticast mode [ 307.486686][ T7085] bridge_slave_1: entered promiscuous mode [ 307.560117][ T29] audit: type=1400 audit(1720750747.168:426): avc: denied { read } for pid=7173 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.865178][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.917444][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.232419][ T29] audit: type=1400 audit(1720750747.848:427): avc: denied { read } for pid=7187 comm="syz.4.570" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 308.255579][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.286900][ T7085] team0: Port device team_slave_0 added [ 308.347557][ T29] audit: type=1400 audit(1720750747.898:428): avc: denied { open } for pid=7187 comm="syz.4.570" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 308.532370][ T7085] team0: Port device team_slave_1 added [ 308.906871][ T29] audit: type=1400 audit(1720750748.478:429): avc: denied { bind } for pid=7193 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.043347][ T29] audit: type=1400 audit(1720750748.478:430): avc: denied { write } for pid=7193 comm="syz.4.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.983264][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.017202][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.336826][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.338080][ T81] bridge_slave_1: left allmulticast mode [ 310.338113][ T81] bridge_slave_1: left promiscuous mode [ 310.338423][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.358284][ T81] bridge_slave_0: left allmulticast mode [ 310.358311][ T81] bridge_slave_0: left promiscuous mode [ 310.358549][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.200568][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.220398][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.261991][ T81] bond0 (unregistering): Released all slaves [ 312.427314][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.435845][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.468487][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.402319][ T7085] hsr_slave_0: entered promiscuous mode [ 313.430355][ T7085] hsr_slave_1: entered promiscuous mode [ 313.479705][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.487366][ T7085] Cannot create hsr debugfs directory [ 313.676288][ T7243] netlink: 'syz.2.584': attribute type 8 has an invalid length. [ 314.152934][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.163066][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.173578][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.184889][ T81] hsr_slave_0: left promiscuous mode [ 314.200844][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.211945][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 314.223188][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.285562][ T81] hsr_slave_1: left promiscuous mode [ 314.311749][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.370054][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.402691][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.429795][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.547007][ T81] veth1_macvtap: left promiscuous mode [ 314.564912][ T81] veth0_macvtap: left promiscuous mode [ 314.570845][ T81] veth1_vlan: left promiscuous mode [ 314.576306][ T81] veth0_vlan: left promiscuous mode [ 316.409834][ T53] Bluetooth: hci5: command tx timeout [ 317.573230][ T81] team0 (unregistering): Port device team_slave_1 removed [ 317.674611][ T81] team0 (unregistering): Port device team_slave_0 removed [ 317.789115][ T29] audit: type=1400 audit(1720750757.398:431): avc: denied { getopt } for pid=7294 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 318.480557][ T53] Bluetooth: hci5: command tx timeout [ 319.055256][ T7292] netlink: 'syz.4.595': attribute type 8 has an invalid length. [ 319.486232][ T29] audit: type=1400 audit(1720750759.088:432): avc: denied { getopt } for pid=7304 comm="syz.4.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 319.742536][ T7305] mkiss: ax0: crc mode is auto. [ 319.747802][ T7012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 319.856466][ T7012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 319.987621][ T7012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.047805][ T7012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.573969][ T53] Bluetooth: hci5: command tx timeout [ 322.409144][ T29] audit: type=1400 audit(1720750762.008:433): avc: denied { listen } for pid=7333 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.442841][ T29] audit: type=1400 audit(1720750762.008:434): avc: denied { accept } for pid=7333 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.640541][ T53] Bluetooth: hci5: command tx timeout [ 322.965992][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.973445][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 322.981234][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.293674][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.331774][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.339230][ T7255] bridge_slave_0: entered allmulticast mode [ 323.358692][ T7255] bridge_slave_0: entered promiscuous mode [ 323.376928][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.388584][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.417527][ T7255] bridge_slave_1: entered allmulticast mode [ 323.435404][ T7255] bridge_slave_1: entered promiscuous mode [ 323.505298][ T29] audit: type=1400 audit(1720750763.118:435): avc: denied { setopt } for pid=7353 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.618603][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.250254][ T35] bridge_slave_1: left allmulticast mode [ 324.970069][ T35] bridge_slave_1: left promiscuous mode [ 325.000483][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.059835][ T35] bridge_slave_0: left allmulticast mode [ 325.065733][ T35] bridge_slave_0: left promiscuous mode [ 325.088706][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.968278][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.989165][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.015625][ T29] audit: type=1400 audit(1720750765.628:436): avc: denied { ioctl } for pid=7390 comm="syz.2.619" path="socket:[16676]" dev="sockfs" ino=16676 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 326.024017][ T35] bond0 (unregistering): Released all slaves [ 326.088357][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.375902][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.692183][ T7255] team0: Port device team_slave_0 added [ 326.759902][ T35] hsr_slave_0: left promiscuous mode [ 326.788789][ T35] hsr_slave_1: left promiscuous mode [ 326.826538][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.874957][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.226447][ T35] team0 (unregistering): Port device team_slave_1 removed [ 328.352001][ T35] team0 (unregistering): Port device team_slave_0 removed [ 328.992796][ T7085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.010434][ T7085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.032771][ T7255] team0: Port device team_slave_1 added [ 329.152902][ T7085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.180846][ T7085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.226516][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.425138][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.439149][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.500146][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.533697][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.566567][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.608003][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.680956][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.688181][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.509990][ T7440] fuse: Bad value for 'fd' [ 331.111720][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.118935][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.236813][ T7255] hsr_slave_0: entered promiscuous mode [ 331.283572][ T7255] hsr_slave_1: entered promiscuous mode [ 331.925048][ T7447] kvm: kvm [7445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x24df00000080 [ 331.969702][ T7447] kvm: kvm [7445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4d0000000000 [ 331.984200][ T7447] kvm: kvm [7445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4d4500000080 [ 332.034833][ T7447] kvm: kvm [7445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x640000000000 [ 332.072758][ T7447] kvm: kvm [7445]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x7d4500000080 [ 332.881177][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.989369][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.069148][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.076497][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.306039][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.313395][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.685236][ T7012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.838280][ T7255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.986258][ T29] audit: type=1400 audit(1720750773.568:437): avc: denied { map } for pid=7482 comm="syz.2.640" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 334.321648][ T29] audit: type=1400 audit(1720750773.578:438): avc: denied { ioctl } for pid=7482 comm="syz.2.640" path="/dev/usbmon0" dev="devtmpfs" ino=706 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 334.409686][ T7255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.458088][ T7255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.486833][ T29] audit: type=1400 audit(1720750774.098:439): avc: denied { read } for pid=7493 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 334.589456][ T7255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 335.051453][ T7012] veth0_vlan: entered promiscuous mode [ 335.155238][ T7012] veth1_vlan: entered promiscuous mode [ 335.476977][ T7012] veth0_macvtap: entered promiscuous mode [ 335.541061][ T7012] veth1_macvtap: entered promiscuous mode [ 335.735344][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.787252][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.839034][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.853375][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.876728][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.932517][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.982526][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.000184][ T7012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.021639][ T7012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.055727][ T7012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.114730][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.168963][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.248358][ T7012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.264274][ T7012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.276207][ T7012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.297233][ T7012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.553537][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.646481][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.653808][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.774312][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.781805][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.160572][ T7085] veth0_vlan: entered promiscuous mode [ 337.309220][ T2794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.338265][ T2794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.342564][ T7085] veth1_vlan: entered promiscuous mode [ 337.661071][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.662968][ T29] audit: type=1400 audit(1720750777.268:440): avc: denied { mount } for pid=7549 comm="syz.2.658" name="/" dev="ramfs" ino=18510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 337.679423][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.696287][ T7085] veth0_macvtap: entered promiscuous mode [ 337.719549][ T7085] veth1_macvtap: entered promiscuous mode [ 337.794933][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.831260][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.875089][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.890266][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.905710][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.917470][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.966000][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.047611][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.120978][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.159912][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.188977][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.223707][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.249828][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.298466][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.343655][ T29] audit: type=1400 audit(1720750777.938:441): avc: denied { write } for pid=7566 comm="syz.4.662" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 338.395697][ T7085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.453424][ T7085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.511532][ T7085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.539697][ T7085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.883261][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.438144][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.453016][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.465582][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.487020][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.500143][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.508035][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.957856][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.136546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.205450][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.562824][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.787510][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.975350][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.054583][ T7255] veth0_vlan: entered promiscuous mode [ 341.114468][ T2456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.132938][ T2456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.351611][ T7255] veth1_vlan: entered promiscuous mode [ 341.605746][ T53] Bluetooth: hci0: command tx timeout [ 341.932273][ T46] bridge_slave_1: left allmulticast mode [ 341.938073][ T46] bridge_slave_1: left promiscuous mode [ 341.961495][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.021116][ T46] bridge_slave_0: left allmulticast mode [ 342.037858][ T46] bridge_slave_0: left promiscuous mode [ 342.052066][ T29] audit: type=1400 audit(1720750781.668:442): avc: denied { ioctl } for pid=7614 comm="syz.4.672" path="socket:[17967]" dev="sockfs" ino=17967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.054226][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.773315][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.787827][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.801999][ T46] bond0 (unregistering): Released all slaves [ 342.853641][ T7255] veth0_macvtap: entered promiscuous mode [ 343.879092][ T7626] fuse: Bad value for 'fd' [ 343.951265][ T53] Bluetooth: hci0: command tx timeout [ 344.564534][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'. [ 344.792779][ T7255] veth1_macvtap: entered promiscuous mode [ 345.137020][ T7587] chnl_net:caif_netlink_parms(): no params data found [ 345.304367][ T46] hsr_slave_0: left promiscuous mode [ 345.318948][ T46] hsr_slave_1: left promiscuous mode [ 345.338375][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.360356][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.384718][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.407234][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.600339][ T46] veth1_macvtap: left promiscuous mode [ 345.619369][ T46] veth0_macvtap: left promiscuous mode [ 345.648644][ T46] veth1_vlan: left promiscuous mode [ 345.655053][ T46] veth0_vlan: left promiscuous mode [ 346.001965][ T53] Bluetooth: hci0: command tx timeout [ 347.477509][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 347.489496][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 347.499434][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 347.530363][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 347.538943][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 347.547638][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.086294][ T53] Bluetooth: hci0: command tx timeout [ 348.108175][ T46] team0 (unregistering): Port device team_slave_1 removed [ 348.197395][ T46] team0 (unregistering): Port device team_slave_0 removed [ 348.244170][ T29] audit: type=1400 audit(1720750787.848:443): avc: denied { read write } for pid=7661 comm="syz.2.690" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 348.268084][ T29] audit: type=1400 audit(1720750787.848:444): avc: denied { open } for pid=7661 comm="syz.2.690" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 348.337867][ T29] audit: type=1400 audit(1720750787.948:445): avc: denied { getopt } for pid=7661 comm="syz.2.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 349.289004][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.693'. [ 349.297611][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.309629][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.328771][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.339517][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.349414][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.362813][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.375527][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.586809][ T7678] capability: warning: `syz.2.694' uses deprecated v2 capabilities in a way that may be insecure [ 349.605446][ T53] Bluetooth: hci2: command tx timeout [ 349.632530][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.654851][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.693851][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.728036][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.766468][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.810271][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.837229][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.877673][ T7587] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.909725][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.917062][ T7587] bridge_slave_0: entered allmulticast mode [ 349.955487][ T7587] bridge_slave_0: entered promiscuous mode [ 350.004977][ T7255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.054030][ T7255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.082470][ T7255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.101539][ T7255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.143000][ T7587] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.176178][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.196658][ T7587] bridge_slave_1: entered allmulticast mode [ 350.230129][ T7587] bridge_slave_1: entered promiscuous mode [ 351.492430][ T7587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.583630][ T7587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.663986][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.680046][ T53] Bluetooth: hci2: command tx timeout [ 351.712992][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.876263][ T7587] team0: Port device team_slave_0 added [ 351.969094][ T7587] team0: Port device team_slave_1 added [ 352.202988][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.217418][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.251508][ T7587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.355346][ T29] audit: type=1326 audit(1720750791.968:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.385436][ T7587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.416148][ T7587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.456321][ T29] audit: type=1326 audit(1720750791.968:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.499266][ T29] audit: type=1326 audit(1720750791.968:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.519666][ T7587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.534146][ T29] audit: type=1326 audit(1720750791.968:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.588882][ T29] audit: type=1326 audit(1720750791.968:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.646514][ T29] audit: type=1326 audit(1720750791.968:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.678344][ T29] audit: type=1326 audit(1720750791.968:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7701 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf75bd9 code=0x7fc00000 [ 352.787114][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.804657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.349104][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.422211][ T7587] hsr_slave_0: entered promiscuous mode [ 353.460728][ T7587] hsr_slave_1: entered promiscuous mode [ 353.521554][ T7587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.555951][ T7587] Cannot create hsr debugfs directory [ 353.760049][ T53] Bluetooth: hci2: command tx timeout [ 353.884763][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.086182][ T7653] chnl_net:caif_netlink_parms(): no params data found [ 354.203796][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.396402][ T7739] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.707'. [ 354.408058][ T7739] openvswitch: netlink: Tunnel attr 10752 out of range max 16 [ 354.585643][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.457965][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'. [ 355.869771][ T53] Bluetooth: hci2: command tx timeout [ 356.500780][ T7765] ======================================================= [ 356.500780][ T7765] WARNING: The mand mount option has been deprecated and [ 356.500780][ T7765] and is ignored by this kernel. Remove the mand [ 356.500780][ T7765] option from the mount to silence this warning. [ 356.500780][ T7765] ======================================================= [ 356.648616][ T7771] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.716'. [ 356.683480][ T7771] openvswitch: netlink: Tunnel attr 10752 out of range max 16 [ 356.966273][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.015419][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.052265][ T7653] bridge_slave_0: entered allmulticast mode [ 357.067626][ T7653] bridge_slave_0: entered promiscuous mode [ 357.221267][ T7653] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.254995][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.293868][ T7653] bridge_slave_1: entered allmulticast mode [ 357.331376][ T7653] bridge_slave_1: entered promiscuous mode [ 357.882366][ T7653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.242543][ T7653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.374676][ T46] bridge_slave_1: left allmulticast mode [ 358.391621][ T46] bridge_slave_1: left promiscuous mode [ 358.443908][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.977265][ T46] bridge_slave_0: left allmulticast mode [ 359.019740][ T46] bridge_slave_0: left promiscuous mode [ 359.050896][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.064104][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.155261][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.190990][ T46] bond0 (unregistering): Released all slaves [ 361.413289][ T7653] team0: Port device team_slave_0 added [ 361.514083][ T7653] team0: Port device team_slave_1 added [ 361.951634][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'. [ 362.775266][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.819918][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.889796][ T7653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.996641][ T7653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.026195][ T7653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.128455][ T7653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.519764][ T7887] ip6t_srh: unknown srh match flags 4000 [ 363.593352][ T7587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.712396][ T46] hsr_slave_0: left promiscuous mode [ 363.756989][ T46] hsr_slave_1: left promiscuous mode [ 363.826250][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.852875][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.882861][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.935592][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.031908][ T46] veth1_macvtap: left promiscuous mode [ 364.038168][ T46] veth0_macvtap: left promiscuous mode [ 364.047697][ T46] veth1_vlan: left promiscuous mode [ 364.055591][ T46] veth0_vlan: left promiscuous mode [ 366.368048][ T46] team0 (unregistering): Port device team_slave_1 removed [ 366.534267][ T46] team0 (unregistering): Port device team_slave_0 removed [ 367.001570][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 367.001596][ T29] audit: type=1400 audit(1720750806.588:488): avc: denied { bind } for pid=7910 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 367.605984][ T7587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 367.640450][ T7587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 367.679900][ T7587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 367.963486][ T7653] hsr_slave_0: entered promiscuous mode [ 368.001958][ T7653] hsr_slave_1: entered promiscuous mode [ 368.029139][ T7653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.061996][ T7653] Cannot create hsr debugfs directory [ 371.247948][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 372.107632][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.328981][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.373433][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.380684][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.444167][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.451511][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.540858][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 373.867610][ T7587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.133873][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 375.010338][ T7653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.088492][ T7653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.146664][ T7653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.232051][ T7653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 376.170023][ T29] audit: type=1400 audit(1720750815.598:489): avc: denied { ioctl } for pid=8013 comm="syz.2.789" path="mnt:[4026532904]" dev="nsfs" ino=4026532904 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 376.583940][ T7587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.655506][ T7653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.813200][ T7653] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.902825][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.910489][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.037584][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.044949][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.022903][ T7587] veth0_vlan: entered promiscuous mode [ 379.078400][ T7653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.156988][ T7587] veth1_vlan: entered promiscuous mode [ 379.433218][ T7587] veth0_macvtap: entered promiscuous mode [ 379.504202][ T7587] veth1_macvtap: entered promiscuous mode [ 379.602354][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.629637][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.649659][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.685012][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.712380][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.747045][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.797470][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.878998][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.902513][ T29] audit: type=1400 audit(1720750819.518:490): avc: denied { create } for pid=8061 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 379.926784][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.926816][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.926842][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.926866][ T7587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.926889][ T7587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.951480][ T7587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.992781][ T29] audit: type=1400 audit(1720750819.518:491): avc: denied { write } for pid=8061 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 380.085829][ T7587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.109651][ T5136] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 380.117809][ T7587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.117914][ T7587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.117964][ T7587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.182026][ T7653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.414292][ T5136] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.446462][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.503891][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.565560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.578457][ T5136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.599340][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.617659][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.661319][ T5136] usb 4-1: Product: syz [ 380.677058][ T5136] usb 4-1: Manufacturer: syz [ 380.787216][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 381.612398][ T5136] usb 4-1: SerialNumber: syz [ 381.620633][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.620665][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.680280][ T5136] usb 4-1: selecting invalid altsetting 1 [ 381.932978][ T29] audit: type=1400 audit(1720750821.548:492): avc: denied { bind } for pid=8083 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.967260][ T8085] netlink: 'syz.2.801': attribute type 11 has an invalid length. [ 382.028262][ T29] audit: type=1400 audit(1720750821.618:493): avc: denied { connect } for pid=8083 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 382.053023][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 383.640614][ T5136] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 383.731596][ T7653] veth0_vlan: entered promiscuous mode [ 383.748832][ T5136] cdc_ncm 4-1:1.0: bind() failure [ 383.829823][ T5136] usb 4-1: USB disconnect, device number 3 [ 383.946724][ T7653] veth1_vlan: entered promiscuous mode [ 384.590741][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.597221][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.976624][ T7653] veth0_macvtap: entered promiscuous mode [ 385.013282][ T8096] serio: Serial port pts0 [ 385.024388][ T7653] veth1_macvtap: entered promiscuous mode [ 385.239390][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.269892][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.292547][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.333268][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.353868][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.365310][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.375836][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.390494][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.417773][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.470490][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.481713][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.493790][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.506571][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.518814][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.530426][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.540696][ T7653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.553858][ T7653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.575812][ T7653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.630073][ T7653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.639151][ T7653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.652728][ T7653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.663099][ T7653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.498438][ T8128] binder: 8127:8128 ioctl 541b 0 returned -22 [ 387.890824][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.950909][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.069405][ T8150] netlink: 248 bytes leftover after parsing attributes in process `syz.0.814'. [ 389.088446][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.117266][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.261287][ T8156] netlink: 'syz.3.815': attribute type 4 has an invalid length. [ 392.032544][ T8175] team0: Port device virt_wifi0 added [ 394.490645][ T8202] mkiss: ax0: crc mode is auto. [ 394.506199][ T25] kernel write not supported for file /amidi2 (pid: 25 comm: kworker/1:0) [ 394.852811][ T8210] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 394.901700][ T8210] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.833'. [ 394.955620][ T8210] openvswitch: netlink: Flow key attribute not present in set flow. [ 397.463986][ T29] audit: type=1326 audit(1720750837.058:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8254 comm="syz.4.850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d75bd9 code=0x0 [ 397.953686][ T8272] random: crng reseeded on system resumption [ 399.096205][ T29] audit: type=1400 audit(1720750837.558:495): avc: denied { append } for pid=8254 comm="syz.4.850" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 399.250909][ T29] audit: type=1400 audit(1720750837.568:496): avc: denied { open } for pid=8254 comm="syz.4.850" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 399.603197][ T5136] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 399.832645][ T5136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.887379][ T5136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.953956][ T5136] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.039468][ T5136] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 400.059446][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.088243][ T5136] usb 2-1: Product: syz [ 400.105912][ T5136] usb 2-1: Manufacturer: syz [ 400.129665][ T5136] usb 2-1: SerialNumber: syz [ 401.335837][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 401.387175][ T8275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8275 comm=syz.1.855 [ 401.459889][ T5136] cdc_ncm 2-1:1.0: bind() failure [ 401.564552][ T5136] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 401.606377][ T5136] cdc_ncm 2-1:1.1: bind() failure [ 402.180021][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.866'. [ 402.891683][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 403.899950][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'. [ 403.927636][ T8322] netem: invalid attributes len -24 [ 403.946544][ T8322] netem: change failed [ 404.275430][ T8327] team0: Port device virt_wifi0 added [ 404.285828][ T8332] tmpfs: Bad value for 'mpol' [ 404.465559][ T5141] usb 2-1: USB disconnect, device number 2 [ 404.755273][ T29] audit: type=1400 audit(1720750844.368:497): avc: denied { connect } for pid=8336 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.806125][ T53] Bluetooth: hci2: link tx timeout [ 404.812666][ T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 404.825859][ T53] Bluetooth: hci2: link tx timeout [ 404.831174][ T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 405.372949][ T29] audit: type=1400 audit(1720750844.988:498): avc: denied { map } for pid=8343 comm="syz.3.879" path="socket:[22141]" dev="sockfs" ino=22141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 406.699956][ T29] audit: type=1326 audit(1720750846.298:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 406.832241][ T29] audit: type=1326 audit(1720750846.348:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 406.896879][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 406.999480][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.883'. [ 407.079573][ T29] audit: type=1326 audit(1720750846.348:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 407.411413][ T29] audit: type=1326 audit(1720750846.358:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 407.727080][ T29] audit: type=1326 audit(1720750846.358:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 407.899812][ T29] audit: type=1326 audit(1720750846.358:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 408.003876][ T29] audit: type=1326 audit(1720750846.358:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 408.108815][ T29] audit: type=1326 audit(1720750846.358:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 410.847621][ T8368] netlink: 48 bytes leftover after parsing attributes in process `syz.1.886'. [ 411.819274][ T8259] syz.2.849 (8259): drop_caches: 1 [ 412.753654][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.772179][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.801365][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.819998][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.828841][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.840535][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.458408][ T29] audit: type=1326 audit(1720750853.068:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 413.471054][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'. [ 413.605293][ T29] audit: type=1326 audit(1720750853.138:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 413.779908][ T29] audit: type=1326 audit(1720750853.168:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 413.879776][ T29] audit: type=1326 audit(1720750853.168:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.014022][ T29] audit: type=1326 audit(1720750853.168:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.038129][ T29] audit: type=1326 audit(1720750853.218:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.074403][ T29] audit: type=1326 audit(1720750853.218:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.116775][ T29] audit: type=1326 audit(1720750853.218:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.259384][ T29] audit: type=1326 audit(1720750853.248:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.332993][ T29] audit: type=1326 audit(1720750853.248:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x7ffc0000 [ 414.897819][ T53] Bluetooth: hci3: command tx timeout [ 414.929476][ T8420] 9pnet_fd: p9_fd_create_tcp (8420): problem binding to privport [ 416.431311][ T2794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.534365][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 416.756818][ T2794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.964556][ T5097] Bluetooth: hci3: command tx timeout [ 417.032378][ T2794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.200479][ T5097] Bluetooth: hci1: command 0x0406 tx timeout [ 417.533795][ T2794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.058315][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.076508][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.146289][ T8460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.914'. [ 418.369903][ T8388] bridge_slave_0: entered allmulticast mode [ 418.384829][ T8388] bridge_slave_0: entered promiscuous mode [ 418.443596][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.455550][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.464074][ T8388] bridge_slave_1: entered allmulticast mode [ 418.532464][ T8388] bridge_slave_1: entered promiscuous mode [ 418.883681][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.955848][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.039670][ T53] Bluetooth: hci3: command tx timeout [ 419.179080][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 419.314270][ T8388] team0: Port device team_slave_0 added [ 419.391244][ T8388] team0: Port device team_slave_1 added [ 419.498039][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 419.498067][ T29] audit: type=1400 audit(1720750859.108:525): avc: denied { unmount } for pid=7085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 419.754971][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.781673][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.866509][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.130119][ T53] Bluetooth: hci3: command tx timeout [ 421.145489][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.172969][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.269659][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.364663][ T2794] bridge_slave_1: left allmulticast mode [ 421.405286][ T2794] bridge_slave_1: left promiscuous mode [ 421.470680][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.547040][ T2794] bridge_slave_0: left allmulticast mode [ 421.597701][ T2794] bridge_slave_0: left promiscuous mode [ 421.651696][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.866294][ T8502] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 423.191196][ T5141] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 423.424583][ T5141] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.459615][ T5141] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.483412][ T5141] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.512841][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.557795][ T8502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.423700][ T2794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.523181][ T2794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.547841][ T2794] bond0 (unregistering): Released all slaves [ 424.820009][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.847599][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.958061][ T8388] hsr_slave_0: entered promiscuous mode [ 425.040795][ T8388] hsr_slave_1: entered promiscuous mode [ 425.089091][ T8388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.144172][ T8388] Cannot create hsr debugfs directory [ 425.490451][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 426.322761][ T8526] syz.3.933 (8526): drop_caches: 1 [ 426.360306][ T5139] usb 5-1: USB disconnect, device number 4 [ 426.863404][ T8526] syz.3.933 (8526): drop_caches: 1 [ 426.941515][ T2794] hsr_slave_0: left promiscuous mode [ 427.082135][ T2794] hsr_slave_1: left promiscuous mode [ 427.140815][ T2794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.190185][ T2794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.236167][ T2794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.289723][ T2794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.398535][ T2794] veth1_macvtap: left promiscuous mode [ 427.404674][ T2794] veth0_macvtap: left promiscuous mode [ 427.411735][ T2794] veth1_vlan: left promiscuous mode [ 427.417511][ T2794] veth0_vlan: left promiscuous mode [ 427.479918][ T29] audit: type=1400 audit(1720750867.078:526): avc: denied { read } for pid=8553 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.714773][ T2794] team0 (unregistering): Port device team_slave_1 removed [ 430.865961][ T2794] team0 (unregistering): Port device team_slave_0 removed [ 432.040341][ T8585] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 432.979529][ C0] sched: RT throttling activated [ 434.766281][ T8593] netlink: 'syz.4.953': attribute type 49 has an invalid length. [ 434.805867][ T8593] netlink: 'syz.4.953': attribute type 49 has an invalid length. [ 435.056408][ T29] audit: type=1326 audit(1720750874.668:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.0.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfde975bd9 code=0x0 [ 435.178914][ T29] audit: type=1400 audit(1720750874.708:528): avc: denied { read } for pid=8602 comm="syz.3.956" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 435.256260][ T29] audit: type=1400 audit(1720750874.718:529): avc: denied { open } for pid=8602 comm="syz.3.956" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 435.614943][ T8610] random: crng reseeded on system resumption [ 436.455748][ T2794] IPVS: stop unused estimator thread 0... [ 436.788921][ T29] audit: type=1400 audit(1720750876.388:530): avc: denied { write } for pid=8618 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 438.100971][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 438.656282][ T8388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.765013][ T8388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.829038][ T8388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.933607][ T8388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.495509][ T8655] MTD: Couldn't look up 'mountinfo': -2 [ 440.373133][ T29] audit: type=1326 audit(1720750879.988:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8653 comm="syz.3.969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2173b75bd9 code=0x0 [ 440.405478][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.515931][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.866417][ T8664] random: crng reseeded on system resumption [ 442.200540][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.207878][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.312928][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.320155][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.622570][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 442.653090][ T8673] netlink: 20 bytes leftover after parsing attributes in process `syz.4.976'. [ 443.094334][ T29] audit: type=1400 audit(1720750882.698:532): avc: denied { override_creds } for pid=8678 comm="syz.3.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 443.362442][ T29] audit: type=1400 audit(1720750882.978:533): avc: denied { getopt } for pid=8695 comm="syz.4.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.609255][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.008771][ T8388] veth0_vlan: entered promiscuous mode [ 444.064388][ T8388] veth1_vlan: entered promiscuous mode [ 444.099621][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 444.126846][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 444.666800][ T29] audit: type=1400 audit(1720750884.238:534): avc: denied { sqpoll } for pid=8718 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 445.357200][ T8388] veth0_macvtap: entered promiscuous mode [ 445.468526][ T8388] veth1_macvtap: entered promiscuous mode [ 445.667928][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.705954][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.734635][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.770299][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.797347][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.828922][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.830845][ T8738] GUP no longer grows the stack in syz.3.994 (8738): 20004000-2000a000 (20001000) [ 445.855493][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.865202][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.882699][ T8738] CPU: 0 PID: 8738 Comm: syz.3.994 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 445.889351][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 445.892761][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 445.892800][ T8738] Call Trace: [ 445.892815][ T8738] [ 445.892828][ T8738] dump_stack_lvl+0x16c/0x1f0 [ 445.892886][ T8738] gup_vma_lookup+0x1d2/0x220 [ 445.892933][ T8738] __get_user_pages+0x261/0x15c0 [ 445.892992][ T8738] ? __pfx___get_user_pages+0x10/0x10 [ 445.893043][ T8738] ? down_read_killable+0xcc/0x380 [ 445.893094][ T8738] ? __pfx_down_read_killable+0x10/0x10 [ 445.893149][ T8738] __gup_longterm_locked+0x243/0x2790 [ 445.919967][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.924596][ T8738] ? __pfx_mark_lock+0x10/0x10 [ 445.952107][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.955838][ T8738] ? __pfx_lock_release+0x10/0x10 [ 445.982939][ T8738] ? lock_acquire+0x1b1/0x560 [ 445.987668][ T8738] ? find_held_lock+0x2d/0x110 [ 445.992465][ T8738] ? __pfx___gup_longterm_locked+0x10/0x10 [ 445.998310][ T8738] ? gup_fast_fallback+0x846/0x25f0 [ 446.003550][ T8738] ? __pfx_lock_release+0x10/0x10 [ 446.008616][ T8738] ? const_folio_flags.constprop.0+0x56/0x150 [ 446.014740][ T8738] ? sanity_check_pinned_pages+0x372/0x11f0 [ 446.020676][ T8738] gup_fast_fallback+0x155b/0x25f0 [ 446.025834][ T8738] ? __pfx_gup_fast_fallback+0x10/0x10 [ 446.031334][ T8738] ? hlock_class+0x4e/0x130 [ 446.035914][ T8738] ? mark_lock+0xb5/0xc60 [ 446.040300][ T8738] ? mark_lock+0xb5/0xc60 [ 446.044674][ T8738] pin_user_pages_fast+0xa8/0x100 [ 446.049755][ T8738] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 446.055546][ T8738] ? mark_lock+0xb5/0xc60 [ 446.059949][ T8738] ? __pfx_register_lock_class+0x10/0x10 [ 446.065678][ T8738] iov_iter_extract_pages+0x388/0x18a0 [ 446.071182][ T8738] ? hlock_class+0x4e/0x130 [ 446.075731][ T8738] ? __lock_acquire+0x14f4/0x3b30 [ 446.080851][ T8738] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 446.086797][ T8738] extract_iter_to_sg+0xbd7/0x1950 [ 446.091957][ T8738] ? lock_acquire+0x1b1/0x560 [ 446.096683][ T8738] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 446.102281][ T8738] ? hash_sendmsg+0xb7/0xf30 [ 446.106894][ T8738] ? __pfx_lock_release+0x10/0x10 [ 446.111966][ T8738] ? mark_held_locks+0x9f/0xe0 [ 446.116769][ T8738] ? hash_sendmsg+0xb7/0xf30 [ 446.121388][ T8738] hash_sendmsg+0x431/0xf30 [ 446.125930][ T8738] ? security_socket_sendmsg+0x8c/0xc0 [ 446.131434][ T8738] ____sys_sendmsg+0xab5/0xc90 [ 446.136230][ T8738] ? copy_msghdr_from_user+0x10b/0x160 [ 446.141725][ T8738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.147048][ T8738] ? __pfx___lock_acquire+0x10/0x10 [ 446.152289][ T8738] ? try_to_wake_up+0xc08/0x13e0 [ 446.157259][ T8738] ___sys_sendmsg+0x135/0x1e0 [ 446.161975][ T8738] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.167245][ T8738] ? __pfx_futex_wake+0x10/0x10 [ 446.172144][ T8738] ? __fget_light+0x173/0x210 [ 446.176865][ T8738] __sys_sendmsg+0x117/0x1f0 [ 446.181499][ T8738] ? __pfx___sys_sendmsg+0x10/0x10 [ 446.186648][ T8738] ? __x64_sys_futex+0x1e1/0x4c0 [ 446.191628][ T8738] do_syscall_64+0xcd/0x250 [ 446.196172][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.202112][ T8738] RIP: 0033:0x7f2173b75bd9 [ 446.206561][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.226196][ T8738] RSP: 002b:00007f2174946048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.234651][ T8738] RAX: ffffffffffffffda RBX: 00007f2173d03f60 RCX: 00007f2173b75bd9 [ 446.242648][ T8738] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 446.250644][ T8738] RBP: 00007f2173be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 446.258646][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.266666][ T8738] R13: 000000000000000b R14: 00007f2173d03f60 R15: 00007ffe01675b28 [ 446.274700][ T8738] [ 446.348002][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.390192][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.479594][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.537555][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.581322][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.592891][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.609080][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.628528][ T29] audit: type=1400 audit(1720750886.238:535): avc: denied { write } for pid=8748 comm="syz.4.995" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 446.639576][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.651531][ C1] vkms_vblank_simulate: vblank timer overrun [ 446.704104][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.856615][ T8388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.938643][ T8388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.980322][ T29] audit: type=1400 audit(1720750886.598:536): avc: denied { listen } for pid=8753 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.019647][ T8388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.053975][ T8388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.090638][ T29] audit: type=1400 audit(1720750886.618:537): avc: denied { accept } for pid=8753 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 447.198521][ T29] audit: type=1400 audit(1720750886.658:538): avc: denied { ioctl } for pid=8748 comm="syz.4.995" path="socket:[23905]" dev="sockfs" ino=23905 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 447.740128][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.805320][ T8749] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 447.842729][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.041768][ T29] audit: type=1400 audit(1720750887.658:539): avc: denied { append } for pid=8777 comm="syz.1.1003" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 448.215994][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.224610][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.536162][ T8789] xt_policy: too many policy elements [ 448.552381][ T8779] hub 9-0:1.0: USB hub found [ 448.591118][ T8779] hub 9-0:1.0: 8 ports detected [ 449.269131][ T5097] Bluetooth: hci1: ISO packet for unknown connection handle 200 [ 449.366344][ T29] audit: type=1400 audit(1720750888.978:540): avc: denied { read } for pid=8807 comm="syz.2.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.654956][ T8803] futex_wake_op: syz.3.1010 tries to shift op by -1; fix this program [ 450.004937][ T8817] warning: `syz.1.1014' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 450.608199][ T5097] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 450.619806][ T5097] CPU: 0 PID: 5097 Comm: kworker/u9:4 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 450.630395][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 450.640505][ T5097] Workqueue: hci1 hci_rx_work [ 450.645271][ T5097] Call Trace: [ 450.648595][ T5097] [ 450.651575][ T5097] dump_stack_lvl+0x16c/0x1f0 [ 450.656325][ T5097] sysfs_warn_dup+0x7f/0xa0 [ 450.660917][ T5097] sysfs_create_dir_ns+0x24d/0x2b0 [ 450.666115][ T5097] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 450.671833][ T5097] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 450.677271][ T5097] ? do_raw_spin_unlock+0x172/0x230 [ 450.682544][ T5097] kobject_add_internal+0x2c8/0x990 [ 450.687829][ T5097] kobject_add+0x16f/0x240 [ 450.692325][ T5097] ? __pfx_kobject_add+0x10/0x10 [ 450.697342][ T5097] ? do_raw_spin_unlock+0x172/0x230 [ 450.702617][ T5097] ? kobject_put+0xbe/0x5b0 [ 450.707286][ T5097] device_add+0x289/0x1a70 [ 450.711871][ T5097] ? __pfx_dev_set_name+0x10/0x10 [ 450.716964][ T5097] ? __pfx_device_add+0x10/0x10 [ 450.721877][ T5097] ? mgmt_send_event_skb+0x2f0/0x460 [ 450.727337][ T5097] hci_conn_add_sysfs+0x17e/0x230 [ 450.732474][ T5097] le_conn_complete_evt+0x1078/0x1d80 [ 450.738182][ T5097] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 450.743987][ T5097] ? trace_contention_end+0xea/0x140 [ 450.749338][ T5097] ? __mutex_lock+0x1a6/0x9c0 [ 450.754183][ T5097] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 450.760237][ T5097] ? skb_pull_data+0x166/0x210 [ 450.765155][ T5097] hci_le_meta_evt+0x2e2/0x5d0 [ 450.770174][ T5097] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 450.776667][ T5097] hci_event_packet+0x664/0x1170 [ 450.781780][ T5097] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 450.787230][ T5097] ? __pfx_hci_event_packet+0x10/0x10 [ 450.792674][ T5097] ? mark_held_locks+0x9f/0xe0 [ 450.797524][ T5097] ? kcov_remote_start+0x3d1/0x6e0 [ 450.802710][ T5097] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.807977][ T5097] hci_rx_work+0x2c4/0x1610 [ 450.812539][ T5097] process_one_work+0x9c5/0x1b40 [ 450.817524][ T5097] ? __pfx_lock_acquire+0x10/0x10 [ 450.822617][ T5097] ? __pfx_process_one_work+0x10/0x10 [ 450.828201][ T5097] ? assign_work+0x1a0/0x250 [ 450.832848][ T5097] worker_thread+0x6c8/0xf30 [ 450.837477][ T5097] ? __pfx_worker_thread+0x10/0x10 [ 450.842618][ T5097] kthread+0x2c1/0x3a0 [ 450.846724][ T5097] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.851953][ T5097] ? __pfx_kthread+0x10/0x10 [ 450.856606][ T5097] ret_from_fork+0x45/0x80 [ 450.861166][ T5097] ? __pfx_kthread+0x10/0x10 [ 450.865807][ T5097] ret_from_fork_asm+0x1a/0x30 [ 450.870620][ T5097] [ 450.923435][ T5097] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 450.937898][ T5097] Bluetooth: hci1: failed to register connection device [ 451.137664][ T5097] Bluetooth: hci3: unexpected event 0x30 length: 56 > 3 [ 453.084712][ T8877] IPv4: Oversized IP packet from 127.0.0.1 [ 453.104161][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 453.120581][ T5097] Bluetooth: hci3: command tx timeout [ 453.304562][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 454.745480][ T29] audit: type=1400 audit(1720750894.358:541): avc: denied { ioctl } for pid=8902 comm="syz.3.1046" path="socket:[24472]" dev="sockfs" ino=24472 ioctlcmd=0x8b2a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 455.517310][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.540135][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.554112][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.564926][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.575645][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 455.583986][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 455.793310][ T2794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.078688][ T2794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.306023][ T2794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.588085][ T2794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.680129][ T5097] Bluetooth: hci4: command tx timeout [ 457.903306][ T2794] bridge_slave_1: left allmulticast mode [ 457.909054][ T2794] bridge_slave_1: left promiscuous mode [ 457.954119][ T2794] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.999443][ T2794] bridge_slave_0: left allmulticast mode [ 458.041586][ T2794] bridge_slave_0: left promiscuous mode [ 458.068041][ T2794] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.175089][ T29] audit: type=1400 audit(1720750897.788:542): avc: denied { map } for pid=8952 comm="syz.2.1064" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.216893][ T29] audit: type=1400 audit(1720750897.788:543): avc: denied { execute } for pid=8952 comm="syz.2.1064" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 458.233608][ T8954] nullb0: AHDI p1 p2 [ 458.240219][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.622115][ T29] audit: type=1400 audit(1720750898.228:544): avc: denied { bind } for pid=8949 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.711992][ T29] audit: type=1400 audit(1720750898.228:545): avc: denied { node_bind } for pid=8949 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 459.760423][ T5097] Bluetooth: hci4: command tx timeout [ 460.071674][ T29] audit: type=1400 audit(1720750899.688:546): avc: denied { getopt } for pid=8985 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 460.457647][ T29] audit: type=1400 audit(1720750900.068:547): avc: denied { read } for pid=8994 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 460.548767][ T29] audit: type=1400 audit(1720750900.118:548): avc: denied { setattr } for pid=8993 comm="syz.3.1076" name="bus" dev="tmpfs" ino=585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 460.611971][ T8999] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 460.660766][ T2794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.732915][ T2794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.738366][ T29] audit: type=1400 audit(1720750900.348:549): avc: denied { map } for pid=8994 comm="syz.2.1077" path="socket:[25247]" dev="sockfs" ino=25247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 460.790862][ T9002] ebt_among: src integrity fail: 100 [ 460.801827][ T2794] bond0 (unregistering): Released all slaves [ 460.822587][ T29] audit: type=1400 audit(1720750900.388:550): avc: denied { read } for pid=8994 comm="syz.2.1077" path="socket:[25247]" dev="sockfs" ino=25247 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 460.964806][ T2794] bond1 (unregistering): Released all slaves [ 461.101192][ T9006] loop0: detected capacity change from 0 to 7 [ 461.143947][ T29] audit: type=1400 audit(1720750900.758:551): avc: denied { read } for pid=8994 comm="syz.2.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 461.188112][ T9006] Dev loop0: unable to read RDB block 7 [ 461.209066][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 461.235841][ T9006] loop0: unable to read partition table [ 461.260821][ T9006] loop0: partition table beyond EOD, truncated [ 461.339671][ T9006] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 461.339671][ T9006] ) failed (rc=-5) [ 461.840436][ T53] Bluetooth: hci4: command tx timeout [ 462.733658][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.759832][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.767184][ T8919] bridge_slave_0: entered allmulticast mode [ 462.854456][ T8919] bridge_slave_0: entered promiscuous mode [ 462.924476][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.982756][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.041160][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 463.061578][ T8919] bridge_slave_1: entered allmulticast mode [ 463.097007][ T8919] bridge_slave_1: entered promiscuous mode [ 463.298726][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 463.582894][ T9043] Unknown options in mask 4 [ 463.661410][ T9049] loop0: detected capacity change from 0 to 7 [ 463.716151][ T9049] Dev loop0: unable to read RDB block 7 [ 463.735472][ T9049] loop0: unable to read partition table [ 463.768188][ T9049] loop0: partition table beyond EOD, truncated [ 463.797843][ T9049] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 463.797843][ T9049] ) failed (rc=-5) [ 463.901227][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.921838][ T5097] Bluetooth: hci4: command tx timeout [ 463.948545][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.339856][ T2794] hsr_slave_0: left promiscuous mode [ 464.420961][ T2794] hsr_slave_1: left promiscuous mode [ 464.470709][ T2794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.487246][ T2794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.536702][ T2794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.555343][ T29] audit: type=1400 audit(1720750904.168:552): avc: denied { setopt } for pid=9060 comm="syz.4.1098" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 464.578984][ T2794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.765859][ T2794] veth1_macvtap: left promiscuous mode [ 464.819671][ T2794] veth0_macvtap: left promiscuous mode [ 464.867049][ T2794] veth1_vlan: left promiscuous mode [ 464.880228][ T2794] veth0_vlan: left promiscuous mode [ 465.078531][ T29] audit: type=1400 audit(1720750904.678:553): avc: denied { connect } for pid=9066 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 467.497793][ T2794] team0 (unregistering): Port device virt_wifi0 removed [ 467.533120][ T9081] loop0: detected capacity change from 0 to 7 [ 467.589822][ T9081] Dev loop0: unable to read RDB block 7 [ 467.595544][ T9081] loop0: unable to read partition table [ 467.650068][ T9081] loop0: partition table beyond EOD, truncated [ 467.658567][ T9081] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 467.658567][ T9081] ) failed (rc=-5) [ 468.056848][ T2794] team0 (unregistering): Port device team_slave_1 removed [ 468.187859][ T2794] team0 (unregistering): Port device team_slave_0 removed [ 470.421717][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 470.487761][ T8919] team0: Port device team_slave_0 added [ 470.561726][ T8919] team0: Port device team_slave_1 added [ 470.856693][ T29] audit: type=1400 audit(1720750910.468:554): avc: denied { setattr } for pid=9095 comm="syz.1.1110" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 471.085860][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.130728][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.152549][ T9107] netlink: 'syz.4.1114': attribute type 1 has an invalid length. [ 471.156897][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.200976][ T9107] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1114'. [ 471.246864][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 471.258067][ T8919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.332049][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.346020][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.485372][ T8919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.800935][ T8919] hsr_slave_0: entered promiscuous mode [ 471.833897][ T8919] hsr_slave_1: entered promiscuous mode [ 471.839926][ T5141] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 472.041691][ T9115] input: syz0 as /devices/virtual/input/input11 [ 472.081175][ T5141] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 472.279975][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.291770][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.302237][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 472.318018][ T5141] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 472.341070][ T5141] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 472.349409][ T5141] usb 2-1: Manufacturer: syz [ 472.404488][ T5141] usb 2-1: config 0 descriptor?? [ 472.877706][ T5141] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 472.928052][ T5141] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 472.960858][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 472.996638][ T5141] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 473.159043][ T5141] usb 2-1: USB disconnect, device number 3 [ 474.628889][ T9155] loop0: detected capacity change from 0 to 7 [ 474.653945][ T9155] Dev loop0: unable to read RDB block 7 [ 474.784611][ T9155] loop0: unable to read partition table [ 474.798098][ T9153] netlink: 'syz.2.1125': attribute type 1 has an invalid length. [ 474.808981][ T9155] loop0: partition table beyond EOD, truncated [ 474.825277][ T9155] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 474.825277][ T9155] ) failed (rc=-5) [ 474.881864][ T9153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1125'. [ 475.117171][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1125'. [ 476.263569][ T8919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.405437][ T8919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.526303][ T8919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.769716][ T8919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.040979][ T9181] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1134'. [ 477.071516][ T9181] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 477.119904][ T5136] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 477.332676][ T5136] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 477.363687][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.399397][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.440209][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 477.538041][ T5136] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 477.564196][ T8919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.569569][ T5136] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 477.603025][ T5136] usb 4-1: Manufacturer: syz [ 477.650129][ T5136] usb 4-1: config 0 descriptor?? [ 477.763916][ T8919] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.843491][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.850870][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.877684][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.885028][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.136446][ T5136] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 478.168178][ T5136] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 478.220536][ T5136] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 478.576737][ T5079] usb 4-1: USB disconnect, device number 4 [ 480.824104][ T8919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.979460][ T8919] veth0_vlan: entered promiscuous mode [ 482.058326][ T29] audit: type=1400 audit(1720750921.668:555): avc: denied { bind } for pid=9240 comm="syz.3.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 482.103485][ T8919] veth1_vlan: entered promiscuous mode [ 482.286249][ T9196] syz.4.1136 (9196): drop_caches: 1 [ 482.318081][ T8919] veth0_macvtap: entered promiscuous mode [ 482.395365][ T8919] veth1_macvtap: entered promiscuous mode [ 482.953574][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.317430][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.409673][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.429687][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.472119][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.492219][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.507454][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.557369][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.594287][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.661950][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.696488][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.718147][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.739281][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.778794][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.804835][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.845231][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.859684][ T5141] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 483.874378][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.905590][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.956603][ T8919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.970230][ T8919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.979374][ T8919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.998939][ T8919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.032627][ T5141] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 485.061265][ T5141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.089609][ T5141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.110076][ T5141] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 485.171917][ T5141] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 485.207221][ T5141] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 485.229266][ T5141] usb 4-1: Manufacturer: syz [ 485.271670][ T5141] usb 4-1: config 0 descriptor?? [ 485.681217][ T9287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1157'. [ 485.730054][ T2794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.738120][ T2794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.049342][ T5141] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 486.281113][ T5141] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 486.561879][ T5097] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 486.572557][ T5097] Bluetooth: hci3: Injecting HCI hardware error event [ 486.582740][ T53] Bluetooth: hci3: hardware error 0x00 [ 486.590612][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.705386][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.798288][ T5141] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 486.901275][ T5141] usb 4-1: USB disconnect, device number 5 [ 488.331681][ T29] audit: type=1326 audit(1720750927.948:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9322 comm="syz.0.1167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f933c575bd9 code=0x0 [ 488.720085][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 489.213750][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 489.590671][ T9350] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 489.598582][ T9350] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1171'. [ 490.034976][ T29] audit: type=1400 audit(1720750929.068:557): avc: denied { block_suspend } for pid=9338 comm="syz.2.1171" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 490.437798][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 490.478981][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.529136][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.567472][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 490.647727][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 490.687791][ T45] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 490.709993][ T45] usb 4-1: Manufacturer: syz [ 490.735729][ T45] usb 4-1: config 0 descriptor?? [ 491.244201][ T45] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 491.275326][ T45] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 491.340454][ T45] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 491.778954][ T45] usb 4-1: USB disconnect, device number 6 [ 492.324870][ T5141] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 492.504524][ T9402] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 492.512500][ T9402] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1191'. [ 493.180539][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.219588][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.362875][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.378206][ T5141] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 493.402305][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.463080][ T5141] usb 3-1: config 0 descriptor?? [ 494.181008][ T5141] acrux 0003:1A34:0802.0009: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 494.228499][ T5141] acrux 0003:1A34:0802.0009: no inputs found [ 494.234790][ T5141] acrux 0003:1A34:0802.0009: Failed to enable force feedback support, error: -19 [ 494.250323][ T53] Bluetooth: hci4: command tx timeout [ 494.335582][ T5141] usb 3-1: USB disconnect, device number 6 [ 495.173659][ T53] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 495.710540][ T9436] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 495.718345][ T9436] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1206'. [ 497.109996][ T5079] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 497.115718][ T29] audit: type=1400 audit(1720750936.718:558): avc: denied { connect } for pid=9442 comm="syz.4.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 497.372217][ T5079] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 497.409794][ T5079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.430213][ T5079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.440527][ T5079] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.460833][ T5079] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 497.475167][ T5079] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 497.490729][ T5079] usb 3-1: Manufacturer: syz [ 497.524043][ T5079] usb 3-1: config 0 descriptor?? [ 498.114668][ T5079] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 498.143883][ T5079] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 498.187856][ T5079] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 498.219848][ T5141] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 498.257933][ T9460] vivid-002: disconnect [ 498.305296][ T9458] vivid-002: reconnect [ 498.446872][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.481184][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.522824][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.548840][ T5136] usb 3-1: USB disconnect, device number 7 [ 498.610147][ T5141] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 498.631140][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.660227][ T5141] usb 1-1: config 0 descriptor?? [ 498.961145][ T53] Bluetooth: hci4: command tx timeout [ 500.171411][ T5141] usbhid 1-1:0.0: can't add hid device: -71 [ 500.177532][ T5141] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 500.193553][ T5141] usb 1-1: USB disconnect, device number 4 [ 500.305634][ T29] audit: type=1400 audit(1720750939.918:559): avc: denied { setattr } for pid=9473 comm="syz.3.1222" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 500.375470][ T29] audit: type=1400 audit(1720750939.988:560): avc: denied { write } for pid=9473 comm="syz.3.1222" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 500.429895][ T29] audit: type=1400 audit(1720750939.988:561): avc: denied { open } for pid=9473 comm="syz.3.1222" path="/132/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 500.712294][ T9486] ADFS-fs (nullb0): unrecognised mount option "gid=" or missing value [ 501.043708][ T29] audit: type=1400 audit(1720750940.658:562): avc: denied { unmount } for pid=7085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 501.574565][ T29] audit: type=1400 audit(1720750941.188:563): avc: denied { bind } for pid=9502 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 502.483291][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 502.534477][ T53] Bluetooth: hci4: command tx timeout [ 502.843719][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.889653][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.933897][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 502.997082][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.046290][ T9] usb 1-1: config 0 descriptor?? [ 503.112806][ T9] usbhid 1-1:0.0: can't add hid device: -22 [ 503.172212][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 504.100216][ T5143] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 504.304605][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.599590][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.279160][ T5143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.292559][ T5143] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 505.302206][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.314481][ T5143] usb 3-1: config 0 descriptor?? [ 505.513595][ T29] audit: type=1400 audit(1720750945.048:564): avc: denied { mount } for pid=9535 comm="syz.4.1247" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 505.684890][ T53] Bluetooth: hci4: command tx timeout [ 506.207931][ T9548] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1253'. [ 506.244546][ T9548] netlink: zone id is out of range [ 506.324107][ T9548] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1253'. [ 506.368998][ T45] usb 1-1: USB disconnect, device number 5 [ 506.388262][ T29] audit: type=1400 audit(1720750945.988:565): avc: denied { write } for pid=9549 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 506.491693][ T29] audit: type=1400 audit(1720750946.058:566): avc: denied { getopt } for pid=9547 comm="syz.3.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 506.632084][ T5143] acrux 0003:1A34:0802.000B: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 506.847410][ T5143] acrux 0003:1A34:0802.000B: no inputs found [ 506.953345][ T5143] acrux 0003:1A34:0802.000B: Failed to enable force feedback support, error: -19 [ 507.057837][ T5143] usb 3-1: USB disconnect, device number 8 [ 507.287457][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.302223][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.040776][ T5143] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 513.289634][ T5143] usb 3-1: Using ep0 maxpacket: 16 [ 513.301951][ T5143] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=90.6b [ 513.319532][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.660866][ T5143] usb 3-1: Product: syz [ 513.666394][ T5143] usb 3-1: Manufacturer: syz [ 513.686254][ T5143] usb 3-1: SerialNumber: syz [ 513.700276][ T5143] usb 3-1: config 0 descriptor?? [ 516.269837][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 516.574517][ T5143] usb 3-1: can't set config #0, error -71 [ 516.629148][ T5143] usb 3-1: USB disconnect, device number 9 [ 516.689124][ T29] audit: type=1400 audit(1720750956.298:567): avc: denied { getopt } for pid=9613 comm="syz.1.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 517.471610][ T9636] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1283'. [ 517.569769][ T9636] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1283'. [ 517.908833][ T9642] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 517.935074][ T5136] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 517.999737][ T8] usb 1-1: device descriptor read/64, error -71 [ 518.690081][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 518.700029][ T5136] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.731739][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 518.743527][ T5136] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 518.759684][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 518.769187][ T5136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.791077][ T5136] usb 3-1: Product: syz [ 518.800732][ T5136] usb 3-1: Manufacturer: syz [ 518.805396][ T5136] usb 3-1: SerialNumber: syz [ 518.840464][ T5136] usb 3-1: config 0 descriptor?? [ 518.872356][ T5143] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 518.973124][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 518.995964][ T8] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=90.6b [ 519.012687][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.033091][ T8] usb 1-1: Product: syz [ 519.037330][ T8] usb 1-1: Manufacturer: syz [ 519.066399][ T8] usb 1-1: SerialNumber: syz [ 519.082029][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.109542][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.145237][ T8] usb 1-1: config 0 descriptor?? [ 519.164055][ T5143] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.198284][ T5136] usb 3-1: USB disconnect, device number 10 [ 519.213849][ T46] ------------[ cut here ]------------ [ 519.220248][ T46] WARNING: CPU: 0 PID: 46 at net/wireless/sme.c:846 __cfg80211_connect_result+0x2967/0x2ac0 [ 519.230896][ T46] Modules linked in: [ 519.234873][ T46] CPU: 0 PID: 46 Comm: kworker/u8:3 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 519.245205][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 519.255691][ T46] Workqueue: cfg80211 cfg80211_event_work [ 519.261597][ T46] RIP: 0010:__cfg80211_connect_result+0x2967/0x2ac0 [ 519.268314][ T46] Code: ff ff 41 8b 1f 31 ff 4c 89 95 68 ff ff ff 89 de e8 2e 23 4c f7 85 db 4c 8b 95 68 ff ff ff 0f 85 f3 e6 ff ff e8 1a 28 4c f7 90 <0f> 0b 90 4c 89 fe 4c 89 f7 e8 bb 60 ff ff e9 06 d9 ff ff e8 21 0a [ 519.291008][ T46] RSP: 0018:ffffc90000b67b20 EFLAGS: 00010293 [ 519.297171][ T46] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a41bcf2 [ 519.306082][ T46] RDX: ffff88801a285a00 RSI: ffffffff8a41bd06 RDI: 0000000000000005 [ 519.314500][ T46] RBP: ffffc90000b67c00 R08: 0000000000000005 R09: 0000000000000000 [ 519.322643][ T46] R10: ffff8880620d3486 R11: ffff888061aab898 R12: 0000000000000000 [ 519.330790][ T46] R13: ffff888061aab818 R14: ffff8880620d3000 R15: ffff888061aab818 [ 519.338960][ T46] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 519.348009][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.354814][ T46] CR2: 000055558d997808 CR3: 000000002d7c4000 CR4: 00000000003506f0 [ 519.363586][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.371706][ T46] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 519.381372][ T46] Call Trace: [ 519.385916][ T46] [ 519.388915][ T46] ? show_regs+0x8c/0xa0 [ 519.393310][ T46] ? __warn+0xe5/0x3c0 [ 519.397508][ T46] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 519.403686][ T46] ? report_bug+0x3c0/0x580 [ 519.408288][ T46] ? handle_bug+0x3d/0x70 [ 519.412730][ T46] ? exc_invalid_op+0x17/0x50 [ 519.417570][ T46] ? asm_exc_invalid_op+0x1a/0x20 [ 519.422748][ T46] ? __cfg80211_connect_result+0x2952/0x2ac0 [ 519.428862][ T46] ? __cfg80211_connect_result+0x2966/0x2ac0 [ 519.434998][ T46] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 519.442326][ T46] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 519.448760][ T46] ? mark_held_locks+0x9f/0xe0 [ 519.453603][ T46] ? cfg80211_process_wdev_events+0x391/0x5d0 [ 519.459773][ T46] cfg80211_process_wdev_events+0x391/0x5d0 [ 519.465809][ T46] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.471930][ T46] cfg80211_process_rdev_events+0x9f/0x130 [ 519.477807][ T46] cfg80211_event_work+0x2b/0x40 [ 519.484056][ T46] process_one_work+0x9c5/0x1b40 [ 519.489065][ T46] ? __pfx_lock_acquire+0x10/0x10 [ 519.495047][ T46] ? __pfx_process_one_work+0x10/0x10 [ 519.500594][ T46] ? assign_work+0x1a0/0x250 [ 519.505247][ T46] worker_thread+0x6c8/0xf30 [ 519.509931][ T46] ? __kthread_parkme+0x148/0x220 [ 519.515015][ T46] ? __pfx_worker_thread+0x10/0x10 [ 519.520722][ T46] kthread+0x2c1/0x3a0 [ 519.524871][ T46] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.530243][ T46] ? __pfx_kthread+0x10/0x10 [ 519.534900][ T46] ret_from_fork+0x45/0x80 [ 519.539382][ T46] ? __pfx_kthread+0x10/0x10 [ 519.544104][ T46] ret_from_fork_asm+0x1a/0x30 [ 519.548933][ T46] [ 519.552108][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 519.559513][ T46] CPU: 0 PID: 46 Comm: kworker/u8:3 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 519.569709][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 519.579789][ T46] Workqueue: cfg80211 cfg80211_event_work [ 519.585637][ T46] Call Trace: [ 519.588938][ T46] [ 519.591888][ T46] dump_stack_lvl+0x3d/0x1f0 [ 519.596513][ T46] panic+0x6f5/0x7a0 [ 519.600448][ T46] ? __pfx_panic+0x10/0x10 [ 519.604899][ T46] ? show_trace_log_lvl+0x363/0x500 [ 519.610155][ T46] ? check_panic_on_warn+0x1f/0xb0 [ 519.615299][ T46] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 519.621325][ T46] check_panic_on_warn+0xab/0xb0 [ 519.626297][ T46] __warn+0xf1/0x3c0 [ 519.630226][ T46] ? __cfg80211_connect_result+0x2967/0x2ac0 [ 519.636236][ T46] report_bug+0x3c0/0x580 [ 519.640614][ T46] handle_bug+0x3d/0x70 [ 519.644804][ T46] exc_invalid_op+0x17/0x50 [ 519.649349][ T46] asm_exc_invalid_op+0x1a/0x20 [ 519.654239][ T46] RIP: 0010:__cfg80211_connect_result+0x2967/0x2ac0 [ 519.661038][ T46] Code: ff ff 41 8b 1f 31 ff 4c 89 95 68 ff ff ff 89 de e8 2e 23 4c f7 85 db 4c 8b 95 68 ff ff ff 0f 85 f3 e6 ff ff e8 1a 28 4c f7 90 <0f> 0b 90 4c 89 fe 4c 89 f7 e8 bb 60 ff ff e9 06 d9 ff ff e8 21 0a [ 519.680687][ T46] RSP: 0018:ffffc90000b67b20 EFLAGS: 00010293 [ 519.686794][ T46] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a41bcf2 [ 519.694806][ T46] RDX: ffff88801a285a00 RSI: ffffffff8a41bd06 RDI: 0000000000000005 [ 519.702802][ T46] RBP: ffffc90000b67c00 R08: 0000000000000005 R09: 0000000000000000 [ 519.710798][ T46] R10: ffff8880620d3486 R11: ffff888061aab898 R12: 0000000000000000 [ 519.718787][ T46] R13: ffff888061aab818 R14: ffff8880620d3000 R15: ffff888061aab818 [ 519.726784][ T46] ? __cfg80211_connect_result+0x2952/0x2ac0 [ 519.732904][ T46] ? __cfg80211_connect_result+0x2966/0x2ac0 [ 519.738968][ T46] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 519.745167][ T46] ? mark_held_locks+0x9f/0xe0 [ 519.749970][ T46] ? cfg80211_process_wdev_events+0x391/0x5d0 [ 519.756087][ T46] cfg80211_process_wdev_events+0x391/0x5d0 [ 519.762027][ T46] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.767874][ T46] cfg80211_process_rdev_events+0x9f/0x130 [ 519.773721][ T46] cfg80211_event_work+0x2b/0x40 [ 519.778682][ T46] process_one_work+0x9c5/0x1b40 [ 519.783645][ T46] ? __pfx_lock_acquire+0x10/0x10 [ 519.788703][ T46] ? __pfx_process_one_work+0x10/0x10 [ 519.794275][ T46] ? assign_work+0x1a0/0x250 [ 519.798899][ T46] worker_thread+0x6c8/0xf30 [ 519.803535][ T46] ? __kthread_parkme+0x148/0x220 [ 519.808591][ T46] ? __pfx_worker_thread+0x10/0x10 [ 519.813817][ T46] kthread+0x2c1/0x3a0 [ 519.817916][ T46] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.823157][ T46] ? __pfx_kthread+0x10/0x10 [ 519.827776][ T46] ret_from_fork+0x45/0x80 [ 519.832226][ T46] ? __pfx_kthread+0x10/0x10 [ 519.836844][ T46] ret_from_fork_asm+0x1a/0x30 [ 519.841645][ T46] [ 519.844956][ T46] Kernel Offset: disabled [ 519.849426][ T46] Rebooting in 86400 seconds..