last executing test programs: 1m36.47491578s ago: executing program 0 (id=164): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r1, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) tkill(r0, 0x7) 1m36.13193452s ago: executing program 0 (id=165): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x58}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1m35.50261426s ago: executing program 0 (id=169): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}], 0x1, 0x2000, 0x0) 1m35.327299992s ago: executing program 0 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m35.247607508s ago: executing program 0 (id=175): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x7, 0x8, 0x1, 0x1, 0x7ff, 0x9, 0xfff, 0x8, [{0x401, 0x7, 0xaa, 0xffffff00}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x7, 0xc}}]}}]}, 0x5c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m35.001645188s ago: executing program 0 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1m34.741583663s ago: executing program 32 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 1m31.605203296s ago: executing program 4 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000000000000b00000000140014"], 0x30}}, 0x0) 1m31.537853453s ago: executing program 4 (id=201): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) 1m30.835245409s ago: executing program 4 (id=205): r0 = syz_io_uring_setup(0x24fa, &(0x7f00000001c0)={0x0, 0x9140, 0x10100}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x104eb4, 0x0, 0x0, 0x0, 0x0) 1m30.673839403s ago: executing program 4 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) 1m30.481004776s ago: executing program 4 (id=208): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) 1m30.271878587s ago: executing program 4 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1m14.936761045s ago: executing program 33 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 21.664075337s ago: executing program 3 (id=947): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 20.507123311s ago: executing program 3 (id=946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="0f011ec4222128d3ad3e0f01f1c744240057000000c744240208000000ff1c240f0017c4215972f63f8f8978d71e26420f0666b837000f00d0", 0x39}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.13718079s ago: executing program 3 (id=951): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) 19.932026273s ago: executing program 3 (id=954): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x0, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_io_uring_setup(0x4b6, 0x0, 0x0, 0x0) 19.52713389s ago: executing program 3 (id=958): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) mmap(&(0x7f0000364000/0x4000)=nil, 0x4000, 0x1000006, 0x10010, 0xffffffffffffffff, 0x6a85a000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 10.101725036s ago: executing program 3 (id=958): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) mmap(&(0x7f0000364000/0x4000)=nil, 0x4000, 0x1000006, 0x10010, 0xffffffffffffffff, 0x6a85a000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 5.844913453s ago: executing program 6 (id=1053): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0xc2200) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000100)=[{0x6, 0x75, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.297788398s ago: executing program 2 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 5.168139475s ago: executing program 5 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x2003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4.316105593s ago: executing program 6 (id=1057): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 4.310840397s ago: executing program 5 (id=1067): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0xfffffffc}) 4.099623604s ago: executing program 5 (id=1069): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="901240c26659aa66cdbf4f8f9f57ad7070c857acb9e3d346635baf03a38eef5a40288a17a2f80cdd5f9cfc6d8d9a9baba907c01998a0ab2660b9021822e432312b0fb31bb5b4ce", 0x47}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000013c0)="f8", 0x1}], 0x1}}], 0x2, 0x200c8000) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x1000, 0x6) 3.266075116s ago: executing program 6 (id=1059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.133839732s ago: executing program 2 (id=1060): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 3.124992766s ago: executing program 6 (id=1061): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010380f40904000000010100000a24010f00030201020904010000010200001804"], 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x0, 0x26, 0xd5, 0x18, 0x8}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x57, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="40f526000000f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.014752097s ago: executing program 1 (id=1062): r0 = fanotify_init(0x200, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r5 = dup(r4) fanotify_mark(r0, 0x1, 0x48001059, r5, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.857213082s ago: executing program 1 (id=1063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2.131010975s ago: executing program 2 (id=1064): ioperm(0x0, 0x1fb, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="aba732e9970a72a4", 0x8}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.058694212s ago: executing program 2 (id=1065): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 1.979415367s ago: executing program 1 (id=1066): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00', @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000180)='%ps \x00'}, 0x20) 1.924067141s ago: executing program 2 (id=1068): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3f, 0x40, 0xb, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x7, 0x0, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc4, 0xf4, 0x7}}}}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xb, 0x5a}}}}}, 0x20}}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 1.900373197s ago: executing program 1 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000001680)=@gcm_128={{0x304}, "0000e60000010027", "568c9f21823385cf6b936989b62bac53", '\t\v\a\x00'}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)='*8@q', 0x4}], 0x1) 1.031697854s ago: executing program 5 (id=1071): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 1.031484194s ago: executing program 1 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 972.955781ms ago: executing program 5 (id=1073): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 875.050004ms ago: executing program 5 (id=1074): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) syz_clone(0xd000, 0x0, 0x0, 0x0, 0x0, 0x0) 866.250927ms ago: executing program 1 (id=1075): r0 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 865.183652ms ago: executing program 2 (id=1076): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 205.744457ms ago: executing program 6 (id=1077): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) r3 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000500), 0x12) 0s ago: executing program 6 (id=1078): socket(0x15, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 84.028449][ T77] usb 3-1: config 0 descriptor?? [ 84.065954][ T6388] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.080684][ T6388] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.087957][ T30] audit: type=1400 audit(1742595979.444:298): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 84.114247][ T6388] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.138968][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.146305][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.154920][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.162022][ T6388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.209830][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.223499][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.233789][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.256085][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.260575][ T5838] Bluetooth: hci1: command tx timeout [ 84.269964][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.277052][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.285286][ T9] Error reading MAC address [ 84.293476][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.300579][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.306781][ T6442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.320772][ T6442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 84.473511][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.520824][ T77] logitech-djreceiver 0003:046D:C513.0007: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.2-1/input0 [ 84.536533][ T9] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 84.552655][ T9] usb 2-1: USB disconnect, device number 5 [ 84.641703][ T6388] veth0_vlan: entered promiscuous mode [ 84.651874][ T6388] veth1_vlan: entered promiscuous mode [ 84.675238][ T6388] veth0_macvtap: entered promiscuous mode [ 84.688590][ T6388] veth1_macvtap: entered promiscuous mode [ 84.700252][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.713233][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.724167][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.734736][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.744626][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.765354][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.785420][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.796175][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.807113][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.818970][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.832383][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.843274][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.853889][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.863734][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.874234][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.884098][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.894631][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.905427][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.917761][ T6388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.926730][ T6388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.935630][ T6388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.945143][ T6388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.991589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.999461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.027220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.035535][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.257803][ T6483] loop9: detected capacity change from 0 to 8 [ 85.269069][ T6483] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 85.280920][ T6483] loop9: partition table partially beyond EOD, truncated [ 85.288219][ T6483] loop9: p1 size 81768186 extends beyond EOD, truncated [ 85.343506][ T6483] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 85.349029][ T6483] loop9: partition table partially beyond EOD, truncated [ 85.357639][ T6483] loop9: p1 size 81768186 extends beyond EOD, truncated [ 85.480733][ T5906] IPVS: starting estimator thread 0... [ 85.491241][ T6489] tipc: Started in network mode [ 85.496480][ T6489] tipc: Node identity ac1414aa, cluster identity 4711 [ 85.506104][ T6489] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 85.520479][ T6489] tipc: Enabled bearer , priority 10 [ 85.626023][ T6490] IPVS: using max 53 ests per chain, 127200 per kthread [ 85.651614][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 85.660029][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880305b0400: rx timeout, send abort [ 85.670537][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880305b0400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 85.800466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 85.904746][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 85.904757][ T30] audit: type=1400 audit(1742595981.274:302): avc: denied { mount } for pid=6501 comm="syz.5.223" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 85.934488][ T30] audit: type=1400 audit(1742595981.284:303): avc: denied { mounton } for pid=6501 comm="syz.5.223" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 85.960483][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 85.968633][ T30] audit: type=1400 audit(1742595981.334:304): avc: denied { unmount } for pid=6388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.013125][ T6504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.065912][ T30] audit: type=1400 audit(1742595981.434:305): avc: denied { ioctl } for pid=6505 comm="syz.5.225" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 86.110488][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.142013][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 86.248288][ T6512] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4287019079 (68592305264 ns) > initial count (11586353856 ns). Using initial count to start timer. [ 86.270417][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.277032][ T6512] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.342320][ T5838] Bluetooth: hci1: command tx timeout [ 86.376765][ T77] usb 3-1: USB disconnect, device number 6 [ 86.420435][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.568187][ T5906] tipc: Node number set to 2886997162 [ 86.648809][ T30] audit: type=1400 audit(1742595982.014:306): avc: denied { name_bind } for pid=6529 comm="syz.5.234" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.700856][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 86.705496][ T30] audit: type=1400 audit(1742595982.014:307): avc: denied { node_bind } for pid=6529 comm="syz.5.234" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 86.786745][ T30] audit: type=1400 audit(1742595982.154:308): avc: denied { map } for pid=6536 comm="syz.5.237" path="socket:[12047]" dev="sockfs" ino=12047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 86.847956][ T30] audit: type=1400 audit(1742595982.154:309): avc: denied { getopt } for pid=6536 comm="syz.5.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.877417][ T30] audit: type=1400 audit(1742595982.154:310): avc: denied { write } for pid=6536 comm="syz.5.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.901432][ T30] audit: type=1400 audit(1742595982.214:311): avc: denied { mounton } for pid=6540 comm="syz.3.239" path="/52/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 86.980527][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 87.280493][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.430778][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 87.441606][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.460637][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.489104][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 87.498293][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.508818][ T9] usb 2-1: config 0 descriptor?? [ 87.610189][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'. [ 87.616408][ T6582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.091084][ T9] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 88.161942][ T9] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 88.362395][ T9] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 88.420700][ T5838] Bluetooth: hci1: command tx timeout [ 88.463293][ T6597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6597 comm=syz.2.264 [ 88.593732][ T9] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 88.829919][ T9] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71 [ 88.859682][ T9] usb 2-1: USB disconnect, device number 6 [ 89.220949][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.390418][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 89.399150][ T5903] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 89.420547][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.428670][ T5903] usb 4-1: Product: syz [ 89.443181][ T5903] usb 4-1: Manufacturer: syz [ 89.452479][ T5903] usb 4-1: SerialNumber: syz [ 89.460849][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 89.512046][ T5903] usb 4-1: config 0 descriptor?? [ 89.791553][ T5903] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 89.798175][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 89.809898][ T5906] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 89.831831][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.850398][ T5906] usb 6-1: config 0 has no interface number 0 [ 89.863152][ T5906] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.897089][ T5906] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 89.918979][ T5906] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.976527][ T5906] usb 6-1: config 0 interface 52 has no altsetting 0 [ 90.000666][ T5906] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 90.155990][ T5906] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 90.173824][ T5906] usb 6-1: Manufacturer: syz [ 90.185720][ T5906] usb 6-1: config 0 descriptor?? [ 90.331416][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 90.371397][ T6633] ip6gre1: entered allmulticast mode [ 90.433475][ T5906] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 90.453824][ T5906] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -5 [ 90.660410][ C1] net_ratelimit: 3 callbacks suppressed [ 90.660426][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 90.709115][ T5876] usb 6-1: USB disconnect, device number 2 [ 90.779130][ T6648] hsr0: entered promiscuous mode [ 90.786664][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 90.985674][ T5903] input: sonixj as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 90.991170][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 90.991182][ T30] audit: type=1400 audit(1742595986.354:323): avc: denied { bind } for pid=6653 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.019879][ T30] audit: type=1400 audit(1742595986.374:324): avc: denied { listen } for pid=6653 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.039689][ T30] audit: type=1400 audit(1742595986.374:325): avc: denied { accept } for pid=6653 comm="syz.1.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.062197][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 91.072626][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: kworker/u9:9 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 91.072655][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.072667][ T5838] Workqueue: hci4 hci_rx_work [ 91.072690][ T5838] Call Trace: [ 91.072696][ T5838] [ 91.072704][ T5838] dump_stack_lvl+0x16c/0x1f0 [ 91.072733][ T5838] sysfs_warn_dup+0x7f/0xa0 [ 91.072760][ T5838] sysfs_create_dir_ns+0x24d/0x2b0 [ 91.072786][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 91.072814][ T5838] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.072834][ T5838] ? kobject_add_internal+0x12d/0x990 [ 91.072863][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 91.072884][ T5838] kobject_add_internal+0x2c8/0x990 [ 91.072917][ T5838] kobject_add+0x16f/0x240 [ 91.072952][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 91.072979][ T5838] ? class_to_subsys+0x3e/0x160 [ 91.073008][ T5838] ? do_raw_spin_unlock+0x172/0x230 [ 91.073026][ T5838] ? kobject_put+0xab/0x5a0 [ 91.073063][ T5838] device_add+0x289/0x1a70 [ 91.073089][ T5838] ? __pfx_dev_set_name+0x10/0x10 [ 91.073116][ T5838] ? __pfx_device_add+0x10/0x10 [ 91.073141][ T5838] ? mgmt_send_event_skb+0x2f2/0x460 [ 91.073175][ T5838] hci_conn_add_sysfs+0x17e/0x230 [ 91.073196][ T5838] le_conn_complete_evt+0x1077/0x1d60 [ 91.073229][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 91.073255][ T5838] ? __mutex_lock+0x1cc/0xb10 [ 91.073288][ T5838] hci_le_conn_complete_evt+0x23c/0x370 [ 91.073318][ T5838] hci_le_meta_evt+0x2e2/0x5d0 [ 91.073335][ T5838] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 91.073362][ T5838] hci_event_packet+0x666/0x1180 [ 91.073388][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 91.073406][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 91.073431][ T5838] ? mark_held_locks+0x9f/0xe0 [ 91.073458][ T5838] ? kcov_remote_start+0x3cf/0x6e0 [ 91.073485][ T5838] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.073515][ T5838] hci_rx_work+0x2c5/0x16b0 [ 91.073534][ T5838] ? process_one_work+0x921/0x1ba0 [ 91.073562][ T5838] process_one_work+0x9c5/0x1ba0 [ 91.073595][ T5838] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 91.073620][ T5838] ? __pfx_process_one_work+0x10/0x10 [ 91.073652][ T5838] ? assign_work+0x1a0/0x250 [ 91.073676][ T5838] worker_thread+0x6c8/0xf00 [ 91.073710][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 91.073734][ T5838] kthread+0x3af/0x750 [ 91.073757][ T5838] ? __pfx_kthread+0x10/0x10 [ 91.073778][ T5838] ? lock_acquire+0x2f/0xb0 [ 91.073805][ T5838] ? __pfx_kthread+0x10/0x10 [ 91.073828][ T5838] ret_from_fork+0x45/0x80 [ 91.073851][ T5838] ? __pfx_kthread+0x10/0x10 [ 91.073873][ T5838] ret_from_fork_asm+0x1a/0x30 [ 91.073906][ T5838] [ 91.073924][ T5838] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.212240][ T5903] usb 4-1: USB disconnect, device number 4 [ 91.217773][ T5838] Bluetooth: hci4: failed to register connection device [ 91.469414][ T6646] hsr0: left promiscuous mode [ 91.700417][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 91.984028][ T30] audit: type=1400 audit(1742595987.354:326): avc: denied { write } for pid=6666 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.066386][ T30] audit: type=1400 audit(1742595987.434:327): avc: denied { name_bind } for pid=6671 comm="syz.2.292" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 92.164636][ T6678] warning: `syz.2.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.363810][ T30] audit: type=1400 audit(1742595987.734:328): avc: denied { name_connect } for pid=6692 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 92.557020][ T6701] netlink: 76 bytes leftover after parsing attributes in process `syz.1.303'. [ 92.566118][ T6701] netlink: 76 bytes leftover after parsing attributes in process `syz.1.303'. [ 92.740444][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 93.677475][ T6724] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 93.688646][ T30] audit: type=1400 audit(1742595989.064:329): avc: denied { getopt } for pid=6727 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.730026][ T30] audit: type=1400 audit(1742595989.094:330): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.790420][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 93.982326][ T6742] syz.3.318 uses obsolete (PF_INET,SOCK_PACKET) [ 94.597611][ T30] audit: type=1400 audit(1742595989.964:331): avc: denied { ioctl } for pid=6754 comm="syz.3.321" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 94.820421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 95.080635][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 95.161393][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.230856][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 95.237461][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 95.249113][ T10] usb 4-1: config 0 has no interface number 0 [ 95.260140][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.282486][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 95.296203][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.309692][ T10] usb 4-1: Product: syz [ 95.314065][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 95.324671][ T5876] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 95.340455][ T10] usb 4-1: Manufacturer: syz [ 95.345145][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.353592][ T10] usb 4-1: SerialNumber: syz [ 95.363027][ T10] usb 4-1: config 0 descriptor?? [ 95.368103][ T5876] usb 2-1: Product: syz [ 95.375833][ T5876] usb 2-1: Manufacturer: syz [ 95.382616][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 95.392524][ T5876] usb 2-1: SerialNumber: syz [ 95.399048][ T5876] usb 2-1: config 0 descriptor?? [ 95.404356][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 95.615803][ T5876] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 95.730052][ T6784] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.777727][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 95.871552][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 96.400814][ T10] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 96.407640][ T10] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 96.640437][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 96.648295][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 96.665958][ T5903] em28xx 4-1:0.132: Registering V4L2 extension [ 96.676433][ T10] usb 4-1: USB disconnect, device number 5 [ 96.684195][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 96.754300][ T5903] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 96.776536][ T5903] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 96.785770][ T5903] em28xx 4-1:0.132: No AC97 audio processor [ 96.799470][ T5903] usb 4-1: Decoder not found [ 96.810437][ T5903] em28xx 4-1:0.132: failed to create media graph [ 96.816845][ T5903] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 96.829053][ T5903] em28xx 4-1:0.132: Remote control support is not available for this card. [ 96.838293][ T10] em28xx 4-1:0.132: Closing input extension [ 96.838305][ T30] audit: type=1400 audit(1742595992.214:332): avc: denied { read } for pid=6800 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 96.891654][ T10] em28xx 4-1:0.132: Freeing device [ 96.900449][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 97.121385][ T5876] usb write operation failed. (-71) [ 97.249906][ T5876] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.273790][ T5876] dvbdev: DVB: registering new adapter (Terratec H7) [ 97.281318][ T5876] usb 2-1: media controller created [ 97.290421][ T5876] usb read operation failed. (-71) [ 97.297324][ T5876] usb write operation failed. (-71) [ 97.323397][ T5876] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 97.346343][ T5876] usb 2-1: USB disconnect, device number 7 [ 97.425575][ T6811] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 97.438122][ T30] audit: type=1400 audit(1742595992.804:333): avc: denied { relabelto } for pid=6810 comm="syz.5.343" name="47" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 97.495968][ T30] audit: type=1400 audit(1742595992.834:334): avc: denied { associate } for pid=6810 comm="syz.5.343" name="47" dev="tmpfs" ino=253 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 97.541223][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 97.574408][ T30] audit: type=1400 audit(1742595992.844:335): avc: denied { write } for pid=6388 comm="syz-executor" name="47" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 97.634086][ T30] audit: type=1400 audit(1742595992.844:336): avc: denied { remove_name } for pid=6388 comm="syz-executor" name="binderfs" dev="tmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 97.733651][ T6821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 97.783640][ T30] audit: type=1400 audit(1742595992.844:337): avc: denied { rmdir } for pid=6388 comm="syz-executor" name="47" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 97.831660][ T30] audit: type=1400 audit(1742595993.104:338): avc: denied { connect } for pid=6820 comm="syz.1.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.950668][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 97.950926][ T30] audit: type=1400 audit(1742595993.324:339): avc: denied { create } for pid=6828 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.999889][ T30] audit: type=1400 audit(1742595993.354:340): avc: denied { connect } for pid=6828 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.040595][ T30] audit: type=1400 audit(1742595993.354:341): avc: denied { write } for pid=6828 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.476440][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 98.486971][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.494995][ T6846] batadv_slave_0: entered promiscuous mode [ 98.870112][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.361'. [ 98.990416][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 99.733142][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.744937][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.753503][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.762288][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.769772][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.777217][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.834711][ T3697] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.947028][ T3697] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.007141][ T6866] netlink: 5 bytes leftover after parsing attributes in process `syz.2.365'. [ 100.020422][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 100.064363][ T6866] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 100.084497][ T6866] netlink: 5 bytes leftover after parsing attributes in process `syz.2.365'. [ 100.103364][ T3697] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.125899][ T6866] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 100.183640][ T3697] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.223353][ T6858] chnl_net:caif_netlink_parms(): no params data found [ 100.294071][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.325065][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.344260][ T6858] bridge_slave_0: entered allmulticast mode [ 100.351918][ T6858] bridge_slave_0: entered promiscuous mode [ 100.376971][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.386418][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.396551][ T6858] bridge_slave_1: entered allmulticast mode [ 100.414616][ T6858] bridge_slave_1: entered promiscuous mode [ 100.478847][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.498428][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.509623][ T3697] bridge_slave_1: left allmulticast mode [ 100.523624][ T3697] bridge_slave_1: left promiscuous mode [ 100.529341][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.552424][ T3697] bridge_slave_0: left allmulticast mode [ 100.558097][ T3697] bridge_slave_0: left promiscuous mode [ 100.581577][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.891619][ T5841] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.972285][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.991289][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.012372][ T3697] bond0 (unregistering): Released all slaves [ 101.056336][ T6858] team0: Port device team_slave_0 added [ 101.062121][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 101.074108][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 101.095491][ T6858] team0: Port device team_slave_1 added [ 101.104601][ T5841] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 101.117537][ T5841] usb 3-1: config 0 has no interface number 0 [ 101.135846][ T5841] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 101.147667][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.156231][ T5841] usb 3-1: Product: syz [ 101.160593][ T5841] usb 3-1: Manufacturer: syz [ 101.165206][ T5841] usb 3-1: SerialNumber: syz [ 101.173277][ T5841] usb 3-1: config 0 descriptor?? [ 101.205337][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.216272][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.242394][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.307347][ T5841] msi2500 3-1:0.246: Registered as swradio24 [ 101.322792][ T5841] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 101.345472][ T6908] bridge0: port 3(vlan2) entered blocking state [ 101.351402][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.382'. [ 101.356134][ T6908] bridge0: port 3(vlan2) entered disabled state [ 101.368054][ T6908] vlan2: entered allmulticast mode [ 101.375900][ T6908] bridge0: entered allmulticast mode [ 101.382949][ T6908] vlan2: left allmulticast mode [ 101.388106][ T6908] bridge0: left allmulticast mode [ 101.405720][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.414922][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.443578][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.453845][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.460457][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.465624][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.485141][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.497768][ T971] usb 3-1: USB disconnect, device number 7 [ 101.562988][ T6858] hsr_slave_0: entered promiscuous mode [ 101.580964][ T6858] hsr_slave_1: entered promiscuous mode [ 101.586993][ T6858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.606307][ T6858] Cannot create hsr debugfs directory [ 101.749074][ T3697] hsr_slave_0: left promiscuous mode [ 101.765703][ T3697] hsr_slave_1: left promiscuous mode [ 101.790785][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.794405][ T6930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.808673][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.821317][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.828901][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.847736][ T3697] veth1_macvtap: left promiscuous mode [ 101.857791][ T3697] veth0_macvtap: left promiscuous mode [ 101.863755][ T5827] Bluetooth: hci2: command tx timeout [ 101.871120][ T3697] veth1_vlan: left promiscuous mode [ 101.876545][ T3697] veth0_vlan: left promiscuous mode [ 102.100474][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 102.514497][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 102.514515][ T30] audit: type=1400 audit(1742595997.884:350): avc: denied { mount } for pid=6956 comm="syz.2.398" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.679195][ T30] audit: type=1400 audit(1742595998.044:351): avc: denied { create } for pid=6964 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.714512][ T30] audit: type=1400 audit(1742595998.084:352): avc: denied { ioctl } for pid=6964 comm="syz.1.400" path="socket:[15623]" dev="sockfs" ino=15623 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.952294][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 103.027027][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 103.135248][ T30] audit: type=1400 audit(1742595998.504:353): avc: denied { setopt } for pid=6987 comm="syz.5.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.143670][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 103.700499][ T30] audit: type=1400 audit(1742595999.054:354): avc: denied { write } for pid=7009 comm="syz.3.417" path="socket:[16540]" dev="sockfs" ino=16540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.706755][ T6858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.752733][ T6858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.776230][ T6858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.790517][ T7010] Bluetooth: MGMT ver 1.23 [ 103.802038][ T7010] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 103.819498][ T6858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.976944][ T5827] Bluetooth: hci2: command tx timeout [ 104.054031][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.095706][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.151373][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.158493][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.180461][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 104.194486][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.201655][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.230748][ T5876] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 104.375350][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.392032][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.407908][ T5876] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.427567][ T5876] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 104.436817][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.451631][ T5876] usb 4-1: config 0 descriptor?? [ 104.459009][ T5876] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 104.472862][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 104.482924][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 104.494195][ T5876] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 104.503132][ T5876] usb 4-1: media controller created [ 104.509723][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.526941][ T5876] dvb-usb: bulk message failed: -22 (6/0) [ 104.536170][ T5876] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 104.547744][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 104.560437][ T5876] dvb-usb: schedule remote query interval to 150 msecs. [ 104.567389][ T5876] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 104.579923][ T6858] veth0_vlan: entered promiscuous mode [ 104.589849][ T6858] veth1_vlan: entered promiscuous mode [ 104.608087][ T6858] veth0_macvtap: entered promiscuous mode [ 104.616283][ T6858] veth1_macvtap: entered promiscuous mode [ 104.627169][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.637908][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.648873][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.659458][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.674863][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.686123][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.696999][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.709800][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.720620][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.722065][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 104.731144][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.750091][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.750465][ T5876] dvb-usb: error while querying for an remote control event. [ 104.759991][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.780990][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.790988][ T6858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.801559][ T6858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.812083][ T5876] usb 4-1: USB disconnect, device number 6 [ 104.812293][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.827819][ T6858] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.831251][ T30] audit: type=1400 audit(1742596000.204:355): avc: denied { search } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.836653][ T6858] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.866989][ T6858] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.875941][ T6858] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.896836][ T5876] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 104.936390][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.944518][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.965907][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.973933][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.220409][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 105.449596][ T7039] netlink: 'syz.2.433': attribute type 5 has an invalid length. [ 106.020697][ T5827] Bluetooth: hci2: command tx timeout [ 106.123654][ T30] audit: type=1400 audit(1742596001.484:356): avc: denied { write } for pid=7055 comm="syz.6.425" name="mcfilter" dev="proc" ino=4026533035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 106.261814][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 106.644863][ T7085] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.155335][ T30] audit: type=1400 audit(1742596002.524:357): avc: denied { cmd } for pid=7088 comm="syz.2.443" path="socket:[16694]" dev="sockfs" ino=16694 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.228771][ T30] audit: type=1400 audit(1742596002.594:358): avc: denied { write } for pid=7087 comm="syz.5.442" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 107.300440][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 107.682597][ T971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=971 comm=kworker/1:2 [ 107.697368][ T7106] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 107.910530][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 107.990505][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.065585][ T10] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 108.075153][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.083453][ T10] usb 6-1: Product: syz [ 108.087772][ T10] usb 6-1: Manufacturer: syz [ 108.092479][ T10] usb 6-1: SerialNumber: syz [ 108.099809][ T10] usb 6-1: config 0 descriptor?? [ 108.101478][ T5827] Bluetooth: hci2: command tx timeout [ 108.111056][ T5841] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.125576][ T30] audit: type=1400 audit(1742596003.484:359): avc: denied { append } for pid=7115 comm="syz.2.455" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.150410][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 108.157709][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.168900][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.178715][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.192865][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.201970][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.211261][ T5876] usb 2-1: config 0 descriptor?? [ 108.290515][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 108.297013][ T5841] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 108.305190][ T5841] usb 4-1: config 0 has no interface number 0 [ 108.311421][ T5841] usb 4-1: config 0 interface 12 has no altsetting 0 [ 108.322022][ T5841] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 108.334857][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.342927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.343627][ T9] usb 6-1: USB disconnect, device number 3 [ 108.350065][ T5841] usb 4-1: Product: syz [ 108.362046][ T5841] usb 4-1: Manufacturer: syz [ 108.366652][ T5841] usb 4-1: SerialNumber: syz [ 108.372624][ T5841] usb 4-1: config 0 descriptor?? [ 108.380661][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.552952][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.566535][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.577457][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.587009][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.595226][ T10] usb 3-1: SerialNumber: syz [ 108.623784][ T5876] HID 045e:07da: Invalid code 65791 type 1 [ 108.632962][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input16 [ 108.648966][ T5876] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 108.810007][ T10] usb 3-1: 0:2 : does not exist [ 108.815210][ T10] usb 3-1: unit 5: unexpected type 0x09 [ 108.832556][ T10] usb 3-1: USB disconnect, device number 8 [ 108.840940][ T971] usb 2-1: USB disconnect, device number 8 [ 108.919339][ T30] audit: type=1400 audit(1742596004.284:360): avc: denied { create } for pid=7119 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.380740][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.004710][ T5841] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 110.017646][ T5841] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 110.036603][ T5841] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 110.052029][ T5841] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 110.060423][ T30] audit: type=1400 audit(1742596005.424:361): avc: denied { append } for pid=7135 comm="syz.5.463" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.114503][ T5841] usb 4-1: USB disconnect, device number 7 [ 110.420413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.799824][ T30] audit: type=1400 audit(1742596006.164:362): avc: denied { read } for pid=7155 comm="syz.2.471" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.863516][ T30] audit: type=1400 audit(1742596006.164:363): avc: denied { open } for pid=7155 comm="syz.2.471" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 110.910446][ T5841] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.060495][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 111.070201][ T5841] usb 2-1: config 0 has no interfaces? [ 111.080461][ T5841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 111.089519][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.099528][ T7158] fuse: root generation should be zero [ 111.102229][ T5841] usb 2-1: Product: syz [ 111.109548][ T5841] usb 2-1: Manufacturer: syz [ 111.115931][ T5841] usb 2-1: SerialNumber: syz [ 111.133990][ T5841] usb 2-1: config 0 descriptor?? [ 111.351144][ T5841] usb 2-1: USB disconnect, device number 9 [ 111.387319][ T30] audit: type=1400 audit(1742596006.754:364): avc: denied { ioctl } for pid=7168 comm="syz.2.476" path="/dev/sg0" dev="devtmpfs" ino=728 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.418964][ T30] audit: type=1400 audit(1742596006.784:365): avc: denied { execute } for pid=7168 comm="syz.2.476" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.460413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 112.091128][ T7185] block nbd1: shutting down sockets [ 112.355546][ T30] audit: type=1400 audit(1742596007.724:366): avc: denied { write } for pid=7189 comm="syz.6.484" path="socket:[17838]" dev="sockfs" ino=17838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.500477][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.080150][ T30] audit: type=1400 audit(1742596008.444:367): avc: denied { getopt } for pid=7208 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 113.103879][ T5827] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 113.370582][ T5906] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 113.377408][ T7221] sp0: Synchronizing with TNC [ 113.462089][ T7223] capability: warning: `syz.2.497' uses 32-bit capabilities (legacy support in use) [ 113.463883][ T7221] [U] è [ 113.523082][ T5906] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.538194][ T5906] usb 7-1: config 0 interface 0 has no altsetting 0 [ 113.544891][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 113.562851][ T5906] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 113.572276][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.581311][ T5906] usb 7-1: Product: syz [ 113.595675][ T5906] usb 7-1: Manufacturer: syz [ 113.600315][ T5906] usb 7-1: SerialNumber: syz [ 113.624622][ T5906] usb 7-1: config 0 descriptor?? [ 113.640823][ T5906] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 113.652375][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.662924][ T5906] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 113.671661][ T5906] usb 7-1: media controller created [ 113.696285][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.750400][ T30] audit: type=1400 audit(1742596009.114:368): avc: denied { create } for pid=7231 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.790153][ T5906] DVB: Unable to find symbol tda10046_attach() [ 113.796520][ T5906] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 113.805261][ T30] audit: type=1400 audit(1742596009.154:369): avc: denied { write } for pid=7231 comm="syz.5.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 113.825421][ T5906] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 114.203795][ T30] audit: type=1400 audit(1742596009.574:370): avc: denied { create } for pid=7245 comm="syz.5.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 114.591044][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 114.736233][ T30] audit: type=1400 audit(1742596010.104:371): avc: denied { bind } for pid=7252 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.827377][ T30] audit: type=1400 audit(1742596010.194:372): avc: denied { listen } for pid=7254 comm="syz.5.509" lport=56200 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.910684][ T30] audit: type=1400 audit(1742596010.244:373): avc: denied { accept } for pid=7254 comm="syz.5.509" lport=56200 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.933645][ T5906] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 114.963031][ T5906] usb 7-1: USB disconnect, device number 2 [ 114.977285][ T30] audit: type=1400 audit(1742596010.294:374): avc: denied { getopt } for pid=7254 comm="syz.5.509" lport=56200 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 115.046393][ T30] audit: type=1400 audit(1742596010.374:375): avc: denied { bind } for pid=7264 comm="syz.1.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.620413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.660415][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 116.934308][ T30] audit: type=1400 audit(1742596012.304:376): avc: denied { block_suspend } for pid=7303 comm="syz.1.528" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.110695][ T5841] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 117.279691][ T5841] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 117.293331][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.306044][ T5841] usb 6-1: Product: syz [ 117.311357][ T5841] usb 6-1: Manufacturer: syz [ 117.318246][ T5841] usb 6-1: SerialNumber: syz [ 117.332000][ T5841] usb 6-1: config 0 descriptor?? [ 117.559106][ T5906] usb 6-1: USB disconnect, device number 4 [ 117.700448][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 117.792345][ T5876] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 117.970440][ T5876] usb 7-1: Using ep0 maxpacket: 16 [ 117.995851][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.008289][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.023857][ T5876] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.038504][ T5876] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 118.053588][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.072869][ T5876] usb 7-1: config 0 descriptor?? [ 118.497932][ T5876] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 118.507699][ T5876] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 118.521637][ T5876] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 118.529088][ T5876] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 118.540598][ T5876] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 118.550179][ T5876] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 118.590094][ T5876] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 118.606205][ T5876] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 118.743145][ T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 118.743349][ T5841] usb 7-1: USB disconnect, device number 3 [ 118.754756][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 118.763803][ T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.785159][ T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.796614][ T10] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 118.904101][ T30] audit: type=1400 audit(1742596014.274:377): avc: denied { create } for pid=7364 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 118.950305][ T30] audit: type=1400 audit(1742596014.274:378): avc: denied { bind } for pid=7364 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.178970][ T30] audit: type=1400 audit(1742596014.544:379): avc: denied { mounton } for pid=7372 comm="syz.2.555" path="/136/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 119.230821][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 119.250496][ T30] audit: type=1400 audit(1742596014.614:380): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 119.278564][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 119.298902][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.557'. [ 119.399002][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 119.440427][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.469721][ T10] usb 4-1: config 0 descriptor?? [ 119.478882][ T10] cp210x 4-1:0.0: cp210x converter detected [ 119.514944][ T7384] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2590233156 (165774921984 ns) > initial count (19809803072 ns). Using initial count to start timer. [ 119.542831][ T7384] kvm: Disabled LAPIC found during irq injection [ 119.575227][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.562'. [ 119.790456][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 119.877884][ T30] audit: type=1400 audit(1742596015.244:381): avc: denied { write } for pid=7401 comm="syz.2.567" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.899194][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.920470][ T10] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 119.928383][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 119.936182][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 119.952436][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 119.966885][ T10] usb 4-1: USB disconnect, device number 8 [ 119.975159][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.983300][ T10] cp210x 4-1:0.0: device disconnected [ 119.984798][ T5841] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 120.020219][ T7404] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 120.033260][ T30] audit: type=1400 audit(1742596015.394:382): avc: denied { append } for pid=7405 comm="syz.2.568" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.057001][ T30] audit: type=1400 audit(1742596015.404:383): avc: denied { append } for pid=7405 comm="syz.2.568" name="media9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.079723][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.093934][ T7407] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 120.181984][ T5841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.195828][ T5841] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.205669][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.214812][ T5841] usb 6-1: Product: syz [ 120.223945][ T5841] usb 6-1: Manufacturer: syz [ 120.228553][ T5841] usb 6-1: SerialNumber: syz [ 120.650508][ T971] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 120.830413][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 120.839293][ T971] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 120.847615][ T971] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.865847][ T971] usb 2-1: config 0 has no interface number 0 [ 120.962456][ T971] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 120.973732][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.984203][ T971] usb 2-1: Product: syz [ 120.988478][ T971] usb 2-1: Manufacturer: syz [ 120.993608][ T971] usb 2-1: SerialNumber: syz [ 121.000655][ T971] usb 2-1: config 0 descriptor?? [ 121.100507][ T77] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 121.296661][ T971] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 121.307617][ T5841] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 121.315275][ T971] usb 2-1: No valid video chain found. [ 121.324160][ T77] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.335311][ T5841] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 121.346069][ T77] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.358489][ T5841] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 121.365339][ T77] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.374895][ T77] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.385405][ T7437] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 121.395524][ T77] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.577325][ T10] usb 2-1: USB disconnect, device number 10 [ 121.677731][ T5841] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 121.682355][ T7117] usb 7-1: USB disconnect, device number 4 [ 121.692291][ T5841] cdc_ncm 6-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 121.712780][ T5841] usb 6-1: USB disconnect, device number 5 [ 121.721765][ T5841] cdc_ncm 6-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 121.870426][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.154951][ T30] audit: type=1400 audit(1742596017.524:384): avc: denied { name_bind } for pid=7447 comm="syz.1.586" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 122.221481][ T30] audit: type=1400 audit(1742596017.594:385): avc: denied { read } for pid=7449 comm="syz.3.587" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.245565][ T7452] block device autoloading is deprecated and will be removed. [ 122.246129][ T30] audit: type=1400 audit(1742596017.594:386): avc: denied { open } for pid=7449 comm="syz.3.587" path="/117/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 122.901345][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 122.981995][ T7483] md: md2 stopped. [ 123.126299][ T7493] process 'syz.5.603' launched './file0' with NULL argv: empty string added [ 123.340510][ T5841] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.377578][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.514134][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 123.525982][ T5841] usb 4-1: config 0 has no interfaces? [ 123.533998][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 123.581104][ T5841] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 123.595134][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.603278][ T5841] usb 4-1: Product: syz [ 123.610684][ T5841] usb 4-1: Manufacturer: syz [ 123.624960][ T5841] usb 4-1: SerialNumber: syz [ 123.636891][ T5841] usb 4-1: config 0 descriptor?? [ 123.871512][ T5841] usb 4-1: USB disconnect, device number 9 [ 123.940427][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 124.305137][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.470671][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 124.483206][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.520508][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.550779][ T5906] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 124.577421][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.605509][ T5906] usb 2-1: config 0 descriptor?? [ 124.619846][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 124.619864][ T30] audit: type=1400 audit(1742596019.984:396): avc: denied { setopt } for pid=7548 comm="syz.3.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.990446][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 125.072476][ T5906] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 125.280535][ T5906] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 125.299034][ T30] audit: type=1400 audit(1742596020.664:397): avc: denied { connect } for pid=7577 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.325467][ T30] audit: type=1400 audit(1742596020.674:398): avc: denied { read } for pid=7577 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 125.424345][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.638'. [ 125.481599][ T5906] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 125.686740][ T5906] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 125.705363][ T5906] ft260 0003:0403:6030.000B: failed to retrieve status: -5 [ 125.740375][ T30] audit: type=1400 audit(1742596021.104:399): avc: denied { setattr } for pid=7590 comm="syz.2.641" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 125.906091][ T5906] ft260 0003:0403:6030.000B: failed to reset I2C controller: -71 [ 125.935061][ T5906] usb 2-1: USB disconnect, device number 11 [ 126.000958][ T30] audit: type=1400 audit(1742596021.364:400): avc: denied { map } for pid=7595 comm="syz.3.643" path="socket:[19150]" dev="sockfs" ino=19150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 126.023942][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 126.143162][ T7604] vxcan1: tx address claim with different name [ 126.297539][ T7612] bridge0: port 3(team0) entered blocking state [ 126.304495][ T7612] bridge0: port 3(team0) entered disabled state [ 126.311017][ T7612] team0: entered allmulticast mode [ 126.316143][ T7612] team_slave_0: entered allmulticast mode [ 126.324134][ T7612] team_slave_1: entered allmulticast mode [ 126.332028][ T7612] team0: entered promiscuous mode [ 126.337195][ T7612] team_slave_0: entered promiscuous mode [ 126.343322][ T7612] team_slave_1: entered promiscuous mode [ 126.349610][ T7612] bridge0: port 3(team0) entered blocking state [ 126.355940][ T7612] bridge0: port 3(team0) entered forwarding state [ 126.404241][ T7618] SELinux: failed to load policy [ 126.779705][ T7627] cgroup: fork rejected by pids controller in /syz3 [ 126.793356][ T30] audit: type=1326 audit(1742596022.164:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.1.658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f237ad8d169 code=0x0 [ 126.926277][ T7672] capability: warning: `syz.5.659' uses deprecated v2 capabilities in a way that may be insecure [ 127.060640][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 127.091132][ T30] audit: type=1400 audit(1742596022.444:402): avc: denied { execute } for pid=7681 comm="syz.2.665" dev="9p" ino=367324844607799298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.125765][ T30] audit: type=1400 audit(1742596022.444:403): avc: denied { read open } for pid=7681 comm="syz.2.665" path="/161/file0" dev="9p" ino=367324844607799298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.541373][ T5841] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 127.580870][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 127.665371][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.676'. [ 127.683475][ T30] audit: type=1400 audit(1742596023.044:404): avc: denied { create } for pid=7709 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.707056][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 127.716163][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.727483][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.741133][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.742329][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 127.754237][ T5841] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 127.778035][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.812850][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.836778][ T10] usb 6-1: config 0 descriptor?? [ 127.838234][ T5841] usb 3-1: config 0 descriptor?? [ 127.843792][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 127.873969][ T30] audit: type=1326 audit(1742596023.244:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7717 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279bf8d169 code=0x7ffc0000 [ 128.055380][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.685'. [ 128.100488][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.279782][ T5841] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 128.291985][ T5841] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 128.299927][ T5841] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 128.709575][ T77] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 128.721350][ T5906] usb 3-1: USB disconnect, device number 9 [ 128.736920][ T77] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 128.755604][ T77] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 129.142291][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.512686][ T10] gspca_sonixj: i2c_w8 err -71 [ 129.534282][ T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 129.547640][ T10] usb 6-1: USB disconnect, device number 6 [ 129.855545][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 129.855562][ T30] audit: type=1800 audit(1742596025.224:424): pid=7769 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.697" name="/" dev="fuse" ino=1 res=0 errno=0 [ 129.899738][ T30] audit: type=1800 audit(1742596025.244:425): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.699" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 130.011403][ T7775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.700'. [ 130.065804][ T30] audit: type=1400 audit(1742596025.434:426): avc: denied { write } for pid=7776 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.180471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.476264][ T30] audit: type=1400 audit(1742596025.824:427): avc: denied { setopt } for pid=7796 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.642142][ T30] audit: type=1400 audit(1742596026.014:428): avc: denied { read } for pid=7803 comm="syz.2.713" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.671002][ T7806] overlayfs: invalid redirect (./file0) [ 130.712954][ T30] audit: type=1400 audit(1742596026.014:429): avc: denied { open } for pid=7803 comm="syz.2.713" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.736567][ T30] audit: type=1400 audit(1742596026.034:430): avc: denied { ioctl } for pid=7803 comm="syz.2.713" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 130.770232][ T7808] sd 0:0:1:0: PR command failed: 1026 [ 130.798317][ T7808] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 130.808420][ T7808] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 130.949543][ T7817] kvm: user requested TSC rate below hardware speed [ 131.220560][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 131.570434][ T5876] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 131.722600][ T5876] usb 7-1: config 227 has an invalid interface number: 218 but max is 0 [ 131.733737][ T5876] usb 7-1: config 227 has an invalid descriptor of length 161, skipping remainder of the config [ 131.748621][ T5876] usb 7-1: config 227 has no interface number 0 [ 131.769331][ T5876] usb 7-1: New USB device found, idVendor=0421, idProduct=0088, bcdDevice=2c.74 [ 131.778816][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.787260][ T5876] usb 7-1: Product: syz [ 131.791675][ T5876] usb 7-1: Manufacturer: syz [ 131.796427][ T5876] usb 7-1: SerialNumber: syz [ 131.809352][ T5876] rndis_host 7-1:227.218: skipping garbage [ 131.815325][ T5876] usb 7-1: bad CDC descriptors [ 131.823829][ T5876] cdc_acm 7-1:227.218: skipping garbage [ 132.014617][ T5876] usb 7-1: USB disconnect, device number 5 [ 132.260412][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 132.501853][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.508262][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.515726][ T7868] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.738'. [ 132.578207][ T7868] netlink: 24 bytes leftover after parsing attributes in process `syz.5.738'. [ 132.885677][ T30] audit: type=1400 audit(1742596028.254:431): avc: denied { audit_write } for pid=7876 comm="syz.3.744" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.187871][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.205753][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.217078][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.225447][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.233489][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.249220][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.257212][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.265691][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.286782][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.310405][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 133.317780][ T5841] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 133.321364][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.353468][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.369108][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.378039][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.385961][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.394246][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.402196][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.418728][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.448042][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.500475][ T5841] usb 7-1: Using ep0 maxpacket: 16 [ 133.508037][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.509166][ T5841] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.528858][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.551585][ T5841] usb 7-1: config 0 has no interface number 0 [ 133.557857][ T30] audit: type=1800 audit(1742596028.924:432): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.752" name="bus" dev="tmpfs" ino=731 res=0 errno=0 [ 133.589453][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.599302][ T5841] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 133.609839][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.629516][ T5841] usb 7-1: Product: syz [ 133.640509][ T5841] usb 7-1: Manufacturer: syz [ 133.651915][ T5841] usb 7-1: SerialNumber: syz [ 133.659298][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.661671][ T5841] usb 7-1: config 0 descriptor?? [ 133.695130][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.699208][ T5841] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 133.740474][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.782190][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.794124][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.812963][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.831950][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.833956][ T30] audit: type=1400 audit(1742596029.204:433): avc: denied { bind } for pid=7903 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 133.849932][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.867449][ T7904] ax25_connect(): syz.2.754 uses autobind, please contact jreuter@yaina.de [ 133.869874][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.955403][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 133.986090][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.014968][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.035597][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.053901][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.075891][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.090471][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.098409][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.112373][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.126641][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.135080][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.170472][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.191137][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: unknown main item tag 0x0 [ 134.212267][ T7117] hid-generic 0000:007F:FFFFFFFE.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.350403][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.978699][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 134.978719][ T30] audit: type=1800 audit(1742596030.334:435): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.758" name="/" dev="fuse" ino=1 res=0 errno=0 [ 135.324544][ T5841] gspca_spca1528: reg_r err -71 [ 135.329523][ T5841] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 135.347426][ T5841] usb 7-1: USB disconnect, device number 6 [ 135.390401][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 135.739239][ T7960] syz.1.776 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 135.821143][ T5841] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.024708][ T5841] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.033206][ T5841] usb 3-1: config 0 has no interface number 0 [ 136.043770][ T5841] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.052978][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.061102][ T5841] usb 3-1: Product: syz [ 136.065324][ T5841] usb 3-1: Manufacturer: syz [ 136.069980][ T5841] usb 3-1: SerialNumber: syz [ 136.076496][ T5841] usb 3-1: config 0 descriptor?? [ 136.299105][ T5841] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 136.331930][ T5841] usb 3-1: USB disconnect, device number 10 [ 136.430412][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.084458][ T7983] TCP: out of memory -- consider tuning tcp_mem [ 137.200495][ T7117] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.350429][ T7117] usb 2-1: Using ep0 maxpacket: 32 [ 137.368918][ T7117] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.377947][ T7117] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 137.385804][ T7117] usb 2-1: can't read configurations, error -71 [ 137.460469][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.503779][ T7998] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.530478][ T5841] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 137.694674][ T5841] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 137.716147][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.744150][ T5841] usb 7-1: config 0 descriptor?? [ 137.771576][ T5841] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 138.095409][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 138.113723][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 138.161273][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 138.180409][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 138.221502][ T8014] ceph: No mds server is up or the cluster is laggy [ 138.396106][ T30] audit: type=1400 audit(1742596033.764:436): avc: denied { create } for pid=8027 comm="syz.1.801" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 138.510419][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.690539][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 138.840552][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 138.848557][ T10] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 138.856806][ T10] usb 2-1: config 0 has no interface number 0 [ 138.864548][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 138.873905][ T5903] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.881498][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.889483][ T10] usb 2-1: Product: syz [ 138.894022][ T10] usb 2-1: Manufacturer: syz [ 138.898703][ T10] usb 2-1: SerialNumber: syz [ 138.908206][ T10] usb 2-1: config 0 descriptor?? [ 138.942125][ T10] msi2500 2-1:0.246: Registered as swradio24 [ 138.948203][ T10] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 139.000667][ T5841] usb 7-1: USB disconnect, device number 7 [ 139.054395][ T5903] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.080884][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.087537][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 139.096794][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.106584][ T5903] usb 4-1: config 0 descriptor?? [ 139.119128][ T10] usb 2-1: USB disconnect, device number 14 [ 139.367810][ T30] audit: type=1804 audit(1742596034.734:437): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.809" name="file0" dev="tmpfs" ino=865 res=1 errno=0 [ 139.390083][ T30] audit: type=1804 audit(1742596034.734:438): pid=8048 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.809" name="file0" dev="tmpfs" ino=865 res=1 errno=0 [ 139.439027][ T30] audit: type=1400 audit(1742596034.804:439): avc: denied { write } for pid=8049 comm="syz.5.810" lport=38168 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 139.462727][ T30] audit: type=1400 audit(1742596034.804:440): avc: denied { setopt } for pid=8049 comm="syz.5.810" lport=38168 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 139.495524][ T8052] overlayfs: failed to clone upperpath [ 139.519698][ T5903] magicmouse 0003:05AC:0269.000E: item fetching failed at offset 5/7 [ 139.528509][ T5903] magicmouse 0003:05AC:0269.000E: magicmouse hid parse failed [ 139.536177][ T5903] magicmouse 0003:05AC:0269.000E: probe with driver magicmouse failed with error -22 [ 139.550431][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.731638][ T5841] usb 4-1: USB disconnect, device number 10 [ 139.860715][ T5903] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 140.012143][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.023179][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.033534][ T5903] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 140.042759][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.051665][ T5903] usb 7-1: config 0 descriptor?? [ 140.160515][ T5876] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 140.321964][ T5876] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.340543][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.362074][ T5876] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.380468][ T5876] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.390466][ T5876] usb 2-1: Manufacturer: syz [ 140.409649][ T5876] usb 2-1: config 0 descriptor?? [ 140.523731][ T5876] rc_core: IR keymap rc-hauppauge not found [ 140.529694][ T5876] Registered IR keymap rc-empty [ 140.580471][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.588863][ T5876] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 140.641354][ T5876] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 140.691446][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 140.908008][ T30] audit: type=1400 audit(1742596036.274:441): avc: denied { setattr } for pid=8085 comm="iou-wrk-8086" name="" dev="pipefs" ino=4609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 140.966845][ T30] audit: type=1400 audit(1742596036.334:442): avc: denied { execute } for pid=8088 comm="syz.3.824" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.076500][ T5876] usb 2-1: USB disconnect, device number 15 [ 141.291053][ T5903] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input20 [ 141.376741][ T5903] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000F/input/input21 [ 141.422731][ T5903] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 141.519364][ T5903] usb 7-1: USB disconnect, device number 8 [ 141.630394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.717449][ T30] audit: type=1400 audit(1742596037.084:443): avc: denied { setattr } for pid=8101 comm="syz.1.828" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.815072][ T8104] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 141.821824][ T8104] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 141.886723][ T8104] vhci_hcd vhci_hcd.0: Device attached [ 142.120824][ T5876] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 142.150605][ T5903] usb 38-1: SetAddress Request (2) to port 0 [ 142.157011][ T5903] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 142.221464][ T8124] block device autoloading is deprecated and will be removed. [ 142.281885][ T5876] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 142.291901][ T5876] usb 3-1: config 0 has no interface number 0 [ 142.372010][ T5876] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 142.405435][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.421273][ T5876] usb 3-1: Product: syz [ 142.446648][ T5876] usb 3-1: Manufacturer: syz [ 142.451404][ T5876] usb 3-1: SerialNumber: syz [ 142.490310][ T5876] usb 3-1: config 0 descriptor?? [ 142.621776][ T8132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.670408][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.715503][ T8105] vhci_hcd: connection reset by peer [ 142.725843][ T5876] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 142.726085][ T3643] vhci_hcd: stop threads [ 142.764327][ T3643] vhci_hcd: release socket [ 142.788857][ T5876] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 142.798320][ T3643] vhci_hcd: disconnect device [ 142.806173][ T5876] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 142.823742][ T5876] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 142.839078][ T5876] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 142.858491][ T5876] usb 3-1: USB disconnect, device number 11 [ 142.882283][ T5876] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 142.937260][ T5876] keyspan 3-1:0.133: device disconnected [ 142.992856][ T30] audit: type=1400 audit(1742596038.364:444): avc: denied { read } for pid=8140 comm="syz.6.843" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=51308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 143.126115][ T8140] dccp_close: ABORT with 32 bytes unread [ 143.201121][ T8147] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.321189][ T8152] block nbd6: shutting down sockets [ 143.710400][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.110406][ T7117] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 144.230531][ T5876] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.260487][ T7117] usb 4-1: Using ep0 maxpacket: 8 [ 144.267009][ T7117] usb 4-1: config 0 has no interfaces? [ 144.274511][ T7117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 144.283852][ T7117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.293960][ T7117] usb 4-1: Product: syz [ 144.298118][ T7117] usb 4-1: Manufacturer: syz [ 144.304341][ T7117] usb 4-1: SerialNumber: syz [ 144.313588][ T7117] usb 4-1: config 0 descriptor?? [ 144.390496][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 144.399633][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.411027][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 144.422815][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 10 [ 144.434083][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 24624, setting to 1024 [ 144.445289][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.460260][ T5876] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 144.475021][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.483100][ T5876] usb 3-1: Product: syz [ 144.487296][ T5876] usb 3-1: Manufacturer: syz [ 144.494606][ T5876] usb 3-1: SerialNumber: syz [ 144.502866][ T5876] usb 3-1: config 0 descriptor?? [ 144.515661][ T5876] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 144.521065][ T8184] overlayfs: failed to clone upperpath [ 144.545835][ C0] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 144.549483][ T5841] usb 4-1: USB disconnect, device number 11 [ 144.575800][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 144.638621][ T8186] overlayfs: failed to clone upperpath [ 144.722395][ T5876] usb 3-1: USB disconnect, device number 12 [ 144.750395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.891335][ T8194] overlayfs: failed to clone lowerpath [ 144.908196][ T8194] overlayfs: failed to clone upperpath [ 145.713065][ T8216] input: syz1 as /devices/virtual/input/input23 [ 145.766038][ T8220] overlayfs: failed to clone upperpath [ 145.784861][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.800502][ T30] audit: type=1800 audit(1742596041.164:445): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.875" name="/" dev="fuse" ino=1 res=0 errno=0 [ 146.820404][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.221247][ T5903] usb 38-1: device descriptor read/8, error -110 [ 147.623173][ T5903] usb usb38-port1: attempt power cycle [ 147.862074][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.192750][ T5903] usb usb38-port1: unable to enumerate USB device [ 148.520946][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 148.533492][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 148.674587][ T8235] ceph: No mds server is up or the cluster is laggy [ 148.742149][ T5903] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 148.900393][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.026475][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.892'. [ 149.141404][ T5903] usb 7-1: device descriptor read/all, error -71 [ 149.215246][ T30] audit: type=1326 audit(1742596044.584:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.238535][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.251577][ T30] audit: type=1326 audit(1742596044.594:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.280444][ T30] audit: type=1326 audit(1742596044.594:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.303646][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.312410][ T30] audit: type=1326 audit(1742596044.594:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.335612][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.388410][ T30] audit: type=1326 audit(1742596044.594:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.421309][ T30] audit: type=1326 audit(1742596044.594:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.446430][ T30] audit: type=1326 audit(1742596044.594:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.469625][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.476274][ T30] audit: type=1326 audit(1742596044.594:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.500003][ T30] audit: type=1326 audit(1742596044.594:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.523197][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.530465][ T30] audit: type=1326 audit(1742596044.594:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8268 comm="syz.5.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b218d169 code=0x7fc00000 [ 149.553645][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.708650][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.912'. [ 149.940436][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.323710][ T8305] sp0: Synchronizing with TNC [ 150.391532][ T8305] [U] è [ 150.990395][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.338114][ T8340] netlink: 'syz.5.920': attribute type 1 has an invalid length. [ 152.020400][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.550596][ T8374] overlayfs: failed to clone upperpath [ 152.758618][ T8383] overlayfs: failed to clone upperpath [ 152.813371][ T8385] block device autoloading is deprecated and will be removed. [ 153.060397][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.110387][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.150390][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.502011][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.511331][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.527637][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.536600][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.557723][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.576951][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.148015][ T8455] chnl_net:caif_netlink_parms(): no params data found [ 156.180530][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.652274][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.705714][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.713194][ T8455] bridge_slave_0: entered allmulticast mode [ 156.723732][ T8455] bridge_slave_0: entered promiscuous mode [ 156.748597][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.760424][ T5903] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 156.762315][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.778492][ T8455] bridge_slave_1: entered allmulticast mode [ 156.788096][ T8455] bridge_slave_1: entered promiscuous mode [ 156.862626][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.881308][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.930145][ T8455] team0: Port device team_slave_0 added [ 156.930448][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 156.940053][ T8455] team0: Port device team_slave_1 added [ 156.971681][ T5903] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 156.979861][ T5903] usb 3-1: config 0 has no interface number 0 [ 156.988192][ T8492] ref_ctr_offset mismatch. inode: 0x233 offset: 0x0 ref_ctr_offset(old): 0x14 ref_ctr_offset(new): 0x0 [ 157.019235][ T5903] usb 3-1: config 0 interface 184 has no altsetting 0 [ 157.027586][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.031983][ T5903] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.035013][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.047843][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.069525][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.073269][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.096742][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.105328][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.220482][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.259664][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.351120][ T8455] hsr_slave_0: entered promiscuous mode [ 157.377111][ T8455] hsr_slave_1: entered promiscuous mode [ 157.489230][ T3494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.586299][ T5903] usb 3-1: Product: syz [ 157.600140][ T5903] usb 3-1: Manufacturer: syz [ 157.604813][ T5903] usb 3-1: SerialNumber: syz [ 157.611045][ T5903] usb 3-1: config 0 descriptor?? [ 157.620615][ T5838] Bluetooth: hci0: command tx timeout [ 157.626912][ T5903] smsc75xx v1.0.0 [ 157.717642][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.976'. [ 157.735594][ T3494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.852904][ T3494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.989783][ T3494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.261048][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 158.270386][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.271904][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.676468][ T3494] team0: left allmulticast mode [ 158.686150][ T3494] team_slave_0: left allmulticast mode [ 158.696313][ T3494] team_slave_1: left allmulticast mode [ 158.702360][ T3494] team0: left promiscuous mode [ 158.716404][ T3494] team_slave_0: left promiscuous mode [ 158.728004][ T3494] team_slave_1: left promiscuous mode [ 158.746587][ T3494] bridge0: port 3(team0) entered disabled state [ 158.770059][ T3494] bridge_slave_1: left allmulticast mode [ 158.777372][ T3494] bridge_slave_1: left promiscuous mode [ 158.787562][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.807336][ T3494] bridge_slave_0: left allmulticast mode [ 158.814928][ T3494] bridge_slave_0: left promiscuous mode [ 158.825168][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.917820][ T5841] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 159.096933][ T5841] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 159.115021][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.127486][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 159.139297][ T5841] usb 2-1: config 0 descriptor?? [ 159.139518][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 159.170432][ T5903] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 159.190267][ T5903] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 159.226014][ T5903] usb 3-1: USB disconnect, device number 13 [ 159.304545][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 159.355256][ T5841] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 159.364589][ T5841] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 159.394186][ T3494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.409163][ T3494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.418819][ T3494] bond0 (unregistering): Released all slaves [ 159.583207][ T5841] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 159.601539][ T5841] [drm] Initialized udl on minor 2 [ 159.710393][ T5838] Bluetooth: hci0: command tx timeout [ 159.796035][ T5841] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 159.827635][ T5841] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 159.839464][ T77] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 159.848382][ T5841] usb 2-1: USB disconnect, device number 16 [ 159.857149][ T77] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 160.340401][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.370832][ T3494] hsr_slave_0: left promiscuous mode [ 160.422939][ T3494] hsr_slave_1: left promiscuous mode [ 160.428786][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.445070][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.455844][ T3494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.463502][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.488505][ T3494] veth1_macvtap: left promiscuous mode [ 160.500456][ T3494] veth0_macvtap: left promiscuous mode [ 160.530628][ T3494] veth1_vlan: left promiscuous mode [ 160.535883][ T3494] veth0_vlan: left promiscuous mode [ 160.917315][ T3494] team0 (unregistering): Port device team_slave_1 removed [ 160.952755][ T3494] team0 (unregistering): Port device team_slave_0 removed [ 161.206389][ T8529] Falling back ldisc for ttyprintk. [ 161.319004][ T8455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 161.336786][ T8455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 161.365694][ T8455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 161.380394][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 161.416239][ T8455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.606268][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.633260][ T8455] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.657183][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.664310][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.740287][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.747449][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.780773][ T5838] Bluetooth: hci0: command tx timeout [ 161.938409][ T8576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1004'. [ 162.045420][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.108062][ T8455] veth0_vlan: entered promiscuous mode [ 162.132559][ T8455] veth1_vlan: entered promiscuous mode [ 162.179131][ T8455] veth0_macvtap: entered promiscuous mode [ 162.193981][ T8455] veth1_macvtap: entered promiscuous mode [ 162.214145][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.229867][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.240912][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.257243][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.270899][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.281463][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.292262][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.304722][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.319540][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.333967][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.420430][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 162.459068][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 162.459086][ T30] audit: type=1400 audit(1742596057.824:515): avc: denied { write } for pid=8588 comm="syz.5.1008" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 162.803270][ T8601] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1010'. [ 162.803471][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.822150][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.832624][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.843495][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.873698][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.896672][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.013681][ T8455] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.067386][ T8455] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.077713][ T8455] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.100568][ T8455] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.460406][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 163.493602][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1012'. [ 163.568994][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.601175][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.609782][ T8625] program syz.6.1015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.716736][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.736889][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.861729][ T5838] Bluetooth: hci0: command tx timeout [ 164.148666][ T30] audit: type=1400 audit(1742596059.514:516): avc: denied { ioctl } for pid=8645 comm="syz.1.1023" path="socket:[25405]" dev="sockfs" ino=25405 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.176315][ T8646] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 164.513420][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 164.885711][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.902874][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.913514][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.961395][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.968938][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.976256][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.540410][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.954090][ T8665] Falling back ldisc for ttyprintk. [ 166.580434][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 166.698966][ T8690] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.071402][ T5827] Bluetooth: hci0: command tx timeout [ 167.212736][ T3445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.359167][ T3445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.630410][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 167.706778][ T3445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.736650][ T8653] chnl_net:caif_netlink_parms(): no params data found [ 167.825198][ T3445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.015619][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.049116][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.076286][ T8716] kvm: user requested TSC rate below hardware speed [ 168.085252][ T8653] bridge_slave_0: entered allmulticast mode [ 168.104342][ T8653] bridge_slave_0: entered promiscuous mode [ 168.135636][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.144083][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.175225][ T8653] bridge_slave_1: entered allmulticast mode [ 168.202092][ T8653] bridge_slave_1: entered promiscuous mode [ 168.265001][ T30] audit: type=1400 audit(1742596063.634:517): avc: denied { wake_alarm } for pid=8724 comm="syz.2.1050" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.271565][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.296263][ T8726] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.1051'. [ 168.306353][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1051'. [ 168.338308][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.374454][ T3445] bridge_slave_1: left allmulticast mode [ 168.380149][ T3445] bridge_slave_1: left promiscuous mode [ 168.387357][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.395641][ T30] audit: type=1400 audit(1742596063.764:518): avc: denied { create } for pid=8727 comm="syz.6.1052" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.430433][ T30] audit: type=1400 audit(1742596063.784:519): avc: denied { link } for pid=8727 comm="syz.6.1052" name="file1" dev="overlay" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.458527][ T3445] bridge_slave_0: left allmulticast mode [ 168.464616][ T3445] bridge_slave_0: left promiscuous mode [ 168.471020][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.480616][ T30] audit: type=1400 audit(1742596063.794:520): avc: denied { setattr } for pid=8727 comm="syz.6.1052" name="#35" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.536041][ T30] audit: type=1400 audit(1742596063.794:521): avc: denied { rename } for pid=8727 comm="syz.6.1052" name="#35" dev="tmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.660419][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 168.752543][ T5903] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 168.777658][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.787837][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.797644][ T3445] bond0 (unregistering): Released all slaves [ 168.818839][ T8653] team0: Port device team_slave_0 added [ 168.826304][ T8653] team0: Port device team_slave_1 added [ 168.884101][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.893832][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.920080][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.948766][ T5903] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 168.968141][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.976910][ T5903] usb 7-1: Product: syz [ 168.981250][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.981264][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.981285][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.025969][ T5903] usb 7-1: Manufacturer: syz [ 169.030854][ T5903] usb 7-1: SerialNumber: syz [ 169.037161][ T5903] usb 7-1: config 0 descriptor?? [ 169.044630][ T8653] hsr_slave_0: entered promiscuous mode [ 169.059530][ T8653] hsr_slave_1: entered promiscuous mode [ 169.065494][ T8653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.080014][ T8653] Cannot create hsr debugfs directory [ 169.151546][ T5827] Bluetooth: hci0: command tx timeout [ 169.272516][ T5906] usb 7-1: USB disconnect, device number 11 [ 169.703783][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 170.154090][ T8742] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.750382][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.167429][ T3445] hsr_slave_0: left promiscuous mode [ 171.178364][ T3445] hsr_slave_1: left promiscuous mode [ 171.191562][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.226542][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.234566][ T5827] Bluetooth: hci0: command tx timeout [ 171.260814][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.268205][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.354401][ T3445] veth1_macvtap: left promiscuous mode [ 171.364290][ T3445] veth0_macvtap: left promiscuous mode [ 171.369823][ T3445] veth1_vlan: left promiscuous mode [ 171.376703][ T30] audit: type=1400 audit(1742596066.754:522): avc: denied { watch watch_reads } for pid=8755 comm="syz.1.1062" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.407032][ T3445] veth0_vlan: left promiscuous mode [ 171.540992][ T30] audit: type=1400 audit(1742596066.914:523): avc: denied { read } for pid=8758 comm="syz.1.1063" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.564176][ T77] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 171.575432][ T30] audit: type=1400 audit(1742596066.914:524): avc: denied { open } for pid=8758 comm="syz.1.1063" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.616003][ T30] audit: type=1400 audit(1742596066.944:525): avc: denied { ioctl } for pid=8758 comm="syz.1.1063" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.747183][ T77] usb 7-1: config 0 has no interfaces? [ 171.759111][ T77] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 171.773792][ T77] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.781860][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.803920][ T77] usb 7-1: config 0 descriptor?? [ 171.889141][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 171.925461][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 172.014866][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.025205][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.034190][ T5903] usb 7-1: USB disconnect, device number 12 [ 172.481972][ T5903] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 172.640505][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 172.647055][ T5903] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.653286][ T8653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.659597][ T7117] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 172.679102][ T5903] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.690036][ T8653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.692788][ T5903] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 172.705856][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.707528][ T8653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.714073][ T5903] usb 7-1: Product: syz [ 172.714092][ T5903] usb 7-1: Manufacturer: syz [ 172.714106][ T5903] usb 7-1: SerialNumber: syz [ 172.737966][ T8653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.786023][ T8653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.802205][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.816810][ T2110] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.823929][ T2110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.830546][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.832046][ T7117] usb 3-1: Using ep0 maxpacket: 32 [ 172.847307][ T2110] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.849695][ T8771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.854497][ T2110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.872536][ T8771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.884857][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1068'. [ 172.899400][ T7117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.908677][ T7117] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 172.916838][ T7117] usb 3-1: can't read configurations, error -71 [ 172.995968][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.027355][ T8653] veth0_vlan: entered promiscuous mode [ 173.037143][ T8653] veth1_vlan: entered promiscuous mode [ 173.057140][ T8653] veth0_macvtap: entered promiscuous mode [ 173.065870][ T8653] veth1_macvtap: entered promiscuous mode [ 173.079095][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.089650][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.100175][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.111538][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.121402][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.131949][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.142618][ T5903] usb 7-1: 0:2 : does not exist [ 173.143267][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.162152][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.172796][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.184368][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.195529][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.205358][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.215871][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.225867][ T8653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.236431][ T8653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.247003][ T8653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.256393][ T8653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.265143][ T8653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.273951][ T8653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.283306][ T8653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.300543][ T5827] Bluetooth: hci0: command tx timeout [ 173.408584][ T30] audit: type=1800 audit(1742596068.774:526): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1072" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 173.452370][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.460230][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.492785][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.511314][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.550467][ T5903] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.564572][ T5903] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 173.582804][ T5903] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 173.615060][ T5903] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 173.669623][ T8794] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.811490][ T5903] usb 7-1: USB disconnect, device number 13 [ 173.860490][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.516815][ T30] audit: type=1400 audit(1742596069.864:527): avc: denied { create } for pid=8799 comm="syz.6.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.567168][ T8800] ------------[ cut here ]------------ [ 174.573095][ T8800] refcount_t: underflow; use-after-free. [ 174.610666][ T8800] WARNING: CPU: 1 PID: 8800 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 174.620151][ T8800] Modules linked in: [ 174.624079][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.6.1078 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 174.634787][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.644869][ T8800] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 174.651026][ T8800] Code: ff 89 de e8 e8 1b f5 fc 84 db 0f 85 66 ff ff ff e8 3b 21 f5 fc c6 05 77 2b 86 0b 01 90 48 c7 c7 20 17 d3 8b e8 87 51 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 18 21 f5 fc 0f b6 1d 52 2b 86 0b 31 [ 174.670824][ T8800] RSP: 0018:ffffc9000fa9f9c8 EFLAGS: 00010286 [ 174.676959][ T8800] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000ce2a000 [ 174.685125][ T8800] RDX: 0000000000080000 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 174.693130][ T8800] RBP: ffff888057187650 R08: 0000000000000001 R09: 0000000000000000 [ 174.701111][ T8800] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 174.709067][ T8800] R13: 0000000000000000 R14: ffff888057187650 R15: ffff888078c4e000 [ 174.717282][ T8800] FS: 00007f946dbca6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 174.726637][ T8800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.733581][ T8800] CR2: 0000200000027000 CR3: 0000000050522000 CR4: 00000000003526f0 [ 174.741811][ T8800] DR0: fffffffffffffffc DR1: 0000000000000006 DR2: 0200000000000000 [ 174.749778][ T8800] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.757762][ T8800] Call Trace: [ 174.761059][ T8800] [ 174.763968][ T8800] ? __warn+0xea/0x3c0 [ 174.768034][ T8800] ? refcount_warn_saturate+0x14a/0x210 [ 174.773586][ T8800] ? report_bug+0x3c0/0x580 [ 174.778073][ T8800] ? handle_bug+0x54/0xa0 [ 174.782404][ T8800] ? exc_invalid_op+0x17/0x50 [ 174.787070][ T8800] ? asm_exc_invalid_op+0x1a/0x20 [ 174.792110][ T8800] ? __warn_printk+0x1a6/0x350 [ 174.796858][ T8800] ? refcount_warn_saturate+0x14a/0x210 [ 174.802405][ T8800] ? refcount_warn_saturate+0x149/0x210 [ 174.807942][ T8800] io_tx_ubuf_complete+0x236/0x280 [ 174.813063][ T8800] ? __io_submit_flush_completions+0xb85/0x1df0 [ 174.819511][ T8800] io_send_zc_cleanup+0x8a/0x1c0 [ 174.824749][ T8800] ? __pfx_io_send_zc_cleanup+0x10/0x10 [ 174.830273][ T8800] __io_submit_flush_completions+0xcb3/0x1df0 [ 174.836375][ T8800] ctx_flush_and_put.constprop.0+0x9a/0x410 [ 174.842274][ T8800] io_handle_tw_list+0x3df/0x540 [ 174.847199][ T8800] ? __pfx_io_handle_tw_list+0x10/0x10 [ 174.852665][ T8800] ? lock_acquire.part.0+0x11b/0x380 [ 174.857931][ T8800] ? find_held_lock+0x2d/0x110 [ 174.862704][ T8800] tctx_task_work_run+0xac/0x390 [ 174.867625][ T8800] tctx_task_work+0x7b/0xd0 [ 174.872128][ T8800] ? __pfx_tctx_task_work+0x10/0x10 [ 174.877309][ T8800] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.882505][ T8800] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.887691][ T8800] task_work_run+0x14e/0x250 [ 174.892292][ T8800] ? __pfx_task_work_run+0x10/0x10 [ 174.897386][ T8800] get_signal+0x1d3/0x26c0 [ 174.901864][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.908934][ T8800] ? __pfx_get_signal+0x10/0x10 [ 174.913793][ T8800] ? fput+0x67/0x440 [ 174.917968][ T8800] ? __do_sys_io_uring_enter+0x60f/0x1670 [ 174.923941][ T8800] arch_do_signal_or_restart+0x90/0x7e0 [ 174.929476][ T8800] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 174.935663][ T8800] ? rcu_is_watching+0x12/0xc0 [ 174.940445][ T8800] syscall_exit_to_user_mode+0x150/0x2a0 [ 174.946060][ T8800] do_syscall_64+0xda/0x250 [ 174.950583][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.956892][ T8800] RIP: 0033:0x7f946cd8d169 [ 174.961300][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.980975][ T8800] RSP: 002b:00007f946dbca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 174.989755][ T8800] RAX: 0000000000000800 RBX: 00007f946cfa5fa0 RCX: 00007f946cd8d169 [ 174.997758][ T8800] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000005 [ 175.005755][ T8800] RBP: 00007f946ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.013726][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.021922][ T8800] R13: 0000000000000000 R14: 00007f946cfa5fa0 R15: 00007fff33b1e3f8 [ 175.030058][ T8800] [ 175.033278][ T8800] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.040538][ T8800] CPU: 1 UID: 0 PID: 8800 Comm: syz.6.1078 Not tainted 6.14.0-rc7-syzkaller-00186-gd07de43e3f05 #0 [ 175.051184][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.061211][ T8800] Call Trace: [ 175.064462][ T8800] [ 175.067367][ T8800] dump_stack_lvl+0x3d/0x1f0 [ 175.071950][ T8800] panic+0x71d/0x800 [ 175.075833][ T8800] ? __pfx_panic+0x10/0x10 [ 175.080262][ T8800] ? show_trace_log_lvl+0x29d/0x3d0 [ 175.085458][ T8800] ? refcount_warn_saturate+0x14a/0x210 [ 175.090989][ T8800] check_panic_on_warn+0xab/0xb0 [ 175.095903][ T8800] __warn+0xf6/0x3c0 [ 175.099784][ T8800] ? refcount_warn_saturate+0x14a/0x210 [ 175.105304][ T8800] report_bug+0x3c0/0x580 [ 175.109613][ T8800] handle_bug+0x54/0xa0 [ 175.113747][ T8800] exc_invalid_op+0x17/0x50 [ 175.118249][ T8800] asm_exc_invalid_op+0x1a/0x20 [ 175.123091][ T8800] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 175.129241][ T8800] Code: ff 89 de e8 e8 1b f5 fc 84 db 0f 85 66 ff ff ff e8 3b 21 f5 fc c6 05 77 2b 86 0b 01 90 48 c7 c7 20 17 d3 8b e8 87 51 b5 fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 18 21 f5 fc 0f b6 1d 52 2b 86 0b 31 [ 175.148834][ T8800] RSP: 0018:ffffc9000fa9f9c8 EFLAGS: 00010286 [ 175.154886][ T8800] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000ce2a000 [ 175.162841][ T8800] RDX: 0000000000080000 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 175.170787][ T8800] RBP: ffff888057187650 R08: 0000000000000001 R09: 0000000000000000 [ 175.178730][ T8800] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 175.186676][ T8800] R13: 0000000000000000 R14: ffff888057187650 R15: ffff888078c4e000 [ 175.194633][ T8800] ? __warn_printk+0x1a6/0x350 [ 175.199375][ T8800] ? refcount_warn_saturate+0x149/0x210 [ 175.204894][ T8800] io_tx_ubuf_complete+0x236/0x280 [ 175.209987][ T8800] ? __io_submit_flush_completions+0xb85/0x1df0 [ 175.216224][ T8800] io_send_zc_cleanup+0x8a/0x1c0 [ 175.221137][ T8800] ? __pfx_io_send_zc_cleanup+0x10/0x10 [ 175.226658][ T8800] __io_submit_flush_completions+0xcb3/0x1df0 [ 175.232711][ T8800] ctx_flush_and_put.constprop.0+0x9a/0x410 [ 175.238602][ T8800] io_handle_tw_list+0x3df/0x540 [ 175.243541][ T8800] ? __pfx_io_handle_tw_list+0x10/0x10 [ 175.248998][ T8800] ? lock_acquire.part.0+0x11b/0x380 [ 175.254277][ T8800] ? find_held_lock+0x2d/0x110 [ 175.259033][ T8800] tctx_task_work_run+0xac/0x390 [ 175.263960][ T8800] tctx_task_work+0x7b/0xd0 [ 175.268455][ T8800] ? __pfx_tctx_task_work+0x10/0x10 [ 175.273637][ T8800] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.278829][ T8800] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.284013][ T8800] task_work_run+0x14e/0x250 [ 175.288593][ T8800] ? __pfx_task_work_run+0x10/0x10 [ 175.293689][ T8800] get_signal+0x1d3/0x26c0 [ 175.298089][ T8800] ? __pfx_get_signal+0x10/0x10 [ 175.302917][ T8800] ? fput+0x67/0x440 [ 175.306879][ T8800] ? __do_sys_io_uring_enter+0x60f/0x1670 [ 175.312589][ T8800] arch_do_signal_or_restart+0x90/0x7e0 [ 175.318118][ T8800] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 175.324259][ T8800] ? rcu_is_watching+0x12/0xc0 [ 175.329003][ T8800] syscall_exit_to_user_mode+0x150/0x2a0 [ 175.334617][ T8800] do_syscall_64+0xda/0x250 [ 175.339110][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.344981][ T8800] RIP: 0033:0x7f946cd8d169 [ 175.349369][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.368950][ T8800] RSP: 002b:00007f946dbca038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 175.377336][ T8800] RAX: 0000000000000800 RBX: 00007f946cfa5fa0 RCX: 00007f946cd8d169 [ 175.385281][ T8800] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000005 [ 175.393232][ T8800] RBP: 00007f946ce0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.401179][ T8800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.409296][ T8800] R13: 0000000000000000 R14: 00007f946cfa5fa0 R15: 00007fff33b1e3f8 [ 175.417247][ T8800] [ 175.420463][ T8800] Kernel Offset: disabled [ 175.424831][ T8800] Rebooting in 86400 seconds..