last executing test programs: 1m51.553915538s ago: executing program 4 (id=732): unshare(0x64000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0xe951, 0x80a0000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x4}) 1m50.756639332s ago: executing program 4 (id=737): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x800, 0x2}) 1m50.470544222s ago: executing program 4 (id=738): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000000}) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 1m47.538750444s ago: executing program 4 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) socket$vsock_stream(0x28, 0x1, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) 1m47.401174676s ago: executing program 4 (id=752): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m47.051277475s ago: executing program 4 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m46.756258792s ago: executing program 32 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) 1m16.879071242s ago: executing program 5 (id=967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x9) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0x2, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x2, 0x2, r2}) 1m16.428179123s ago: executing program 5 (id=970): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1m16.223464208s ago: executing program 5 (id=973): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000109"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m13.899302384s ago: executing program 5 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 1m13.755465899s ago: executing program 5 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0xc008aec1, &(0x7f00000000c0)=0xffff) 1m13.223609545s ago: executing program 5 (id=988): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f000092d000/0x1000)=nil, 0x1000}) 1m12.961439374s ago: executing program 33 (id=988): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000200)={&(0x7f000092d000/0x1000)=nil, 0x1000}) 56.961543204s ago: executing program 2 (id=395): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 56.152142905s ago: executing program 1 (id=1028): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e02, 0x0, @mcast2, 0x1fc}, 0x1c) 45.98613738s ago: executing program 2 (id=395): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 45.660771088s ago: executing program 1 (id=1028): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e02, 0x0, @mcast2, 0x1fc}, 0x1c) 37.584231446s ago: executing program 3 (id=1200): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) 37.557271246s ago: executing program 3 (id=1201): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 37.239416029s ago: executing program 3 (id=1202): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x6, 0x10001, 0xcdb2, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0xffffffff, 0x1}) 36.621260658s ago: executing program 2 (id=395): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 35.62322614s ago: executing program 1 (id=1028): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e02, 0x0, @mcast2, 0x1fc}, 0x1c) 26.921932658s ago: executing program 3 (id=1202): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x6, 0x10001, 0xcdb2, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0xffffffff, 0x1}) 24.77195999s ago: executing program 2 (id=395): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 23.877929659s ago: executing program 1 (id=1028): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e02, 0x0, @mcast2, 0x1fc}, 0x1c) 16.942325768s ago: executing program 3 (id=1202): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x6, 0x10001, 0xcdb2, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0xffffffff, 0x1}) 14.915165071s ago: executing program 1 (id=1028): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e02, 0x0, @mcast2, 0x1fc}, 0x1c) 14.267709376s ago: executing program 2 (id=395): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 7.000958628s ago: executing program 3 (id=1202): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x6, 0x10001, 0xcdb2, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0xffffffff, 0x1}) 5.585570486s ago: executing program 1 (id=1028): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e02, 0x0, @mcast2, 0x1fc}, 0x1c) 3.96210667s ago: executing program 0 (id=1337): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.871496048s ago: executing program 0 (id=1338): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.795988853s ago: executing program 2 (id=395): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 2.184953017s ago: executing program 0 (id=1339): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x64) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 2.183654567s ago: executing program 6 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.039688169s ago: executing program 0 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) 1.926273924s ago: executing program 6 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[0x7], &(0x7f0000000280), 0x3, 0x1, 0x1}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.87550191s ago: executing program 0 (id=1343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.327753137s ago: executing program 0 (id=1344): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 1.223958201s ago: executing program 6 (id=1345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) prlimit64(0x0, 0x6, &(0x7f00000001c0)={0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.089961478s ago: executing program 6 (id=1346): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/60, 0x3c}, 0x1f42}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 964.533867ms ago: executing program 6 (id=1347): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 0s ago: executing program 6 (id=1348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='}', 0x1}], 0x1}}], 0x1, 0x20008000) accept4$vsock_stream(r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ridge_slave_1) entered forwarding state [ 199.050599][ T30] audit: type=1400 audit(1748364404.491:917): avc: denied { read write } for pid=9776 comm="syz.6.1111" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.086772][ T5886] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 199.095676][ T9648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.121590][ T5886] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.145141][ T30] audit: type=1400 audit(1748364404.491:918): avc: denied { open } for pid=9776 comm="syz.6.1111" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 199.205483][ T9641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.241062][ T30] audit: type=1400 audit(1748364404.691:919): avc: denied { read } for pid=9780 comm="syz.0.1112" path="socket:[33272]" dev="sockfs" ino=33272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.396753][ T9641] veth0_vlan: entered promiscuous mode [ 199.432041][ T9641] veth1_vlan: entered promiscuous mode [ 199.441777][ T30] audit: type=1400 audit(1748364404.891:920): avc: denied { bind } for pid=9786 comm="syz.0.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 199.549226][ T9641] veth0_macvtap: entered promiscuous mode [ 199.588293][ T9641] veth1_macvtap: entered promiscuous mode [ 199.659300][ T9648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.693534][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.827387][ T9641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.877991][ T9641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.890026][ T9641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.900368][ T9641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.909614][ T9641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.993374][ T30] audit: type=1326 audit(1748364405.441:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.6.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5518e969 code=0x7ffc0000 [ 200.053347][ T30] audit: type=1326 audit(1748364405.481:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9804 comm="syz.6.1122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad5518e969 code=0x7ffc0000 [ 200.156634][ T5814] Bluetooth: hci4: command 0x206a tx timeout [ 200.156679][ T5818] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.192180][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 200.237045][ T5818] Bluetooth: hci2: command 0x0419 tx timeout [ 200.237136][ T5814] Bluetooth: hci1: command 0x0419 tx timeout [ 200.448220][ T9819] tls_set_device_offload_rx: netdev not found [ 200.768850][ T9648] veth0_vlan: entered promiscuous mode [ 200.817011][ T9648] veth1_vlan: entered promiscuous mode [ 200.909914][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.938357][ T9648] veth0_macvtap: entered promiscuous mode [ 200.945520][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.002517][ T9648] veth1_macvtap: entered promiscuous mode [ 201.041928][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.068670][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.079593][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.108912][ T9648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.144722][ T9648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.165033][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 201.165048][ T30] audit: type=1400 audit(1748364406.611:938): avc: denied { append } for pid=9838 comm="syz.3.1136" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.201395][ T9648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.210775][ T9648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.219625][ T9648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.385703][ T8493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.393712][ T8493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.415221][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.433839][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.837478][ T9856] "syz.6.1142" (9856) uses obsolete ecb(arc4) skcipher [ 201.916370][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 202.077180][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 202.090464][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.103755][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.113799][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.126824][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.136043][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 202.143897][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.154939][ T43] usb 4-1: config 0 descriptor?? [ 202.232956][ T8493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.246062][ T5814] Bluetooth: hci4: command 0x206a tx timeout [ 202.286012][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 202.292836][ T24] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 202.305789][ T24] usb 1-1: config 0 has no interface number 0 [ 202.328345][ T24] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=df.0a [ 202.345767][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.369463][ T24] usb 1-1: Product: syz [ 202.373642][ T24] usb 1-1: Manufacturer: syz [ 202.388870][ T24] usb 1-1: SerialNumber: syz [ 202.410912][ T24] usb 1-1: config 0 descriptor?? [ 202.418981][ T8493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.439097][ T24] ums-datafab 1-1:0.88: USB Mass Storage device detected [ 202.519390][ T24] ums-sddr55 1-1:0.88: USB Mass Storage device detected [ 202.576594][ T9883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.588368][ T43] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 202.613101][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0018/input/input20 [ 202.674109][ T24] usb 1-1: USB disconnect, device number 16 [ 202.729341][ T8493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.730114][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.756283][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.764795][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.774577][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.783148][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.804051][ T43] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 202.868459][ T43] usb 4-1: USB disconnect, device number 23 [ 202.917306][ T8493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.026305][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.041392][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.050306][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.059356][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.067437][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.136923][ T9884] chnl_net:caif_netlink_parms(): no params data found [ 203.194331][ T8493] bridge_slave_1: left allmulticast mode [ 203.200787][ T8493] bridge_slave_1: left promiscuous mode [ 203.206627][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.237676][ T8493] bridge_slave_0: left allmulticast mode [ 203.243318][ T8493] bridge_slave_0: left promiscuous mode [ 203.249106][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.277400][ T30] audit: type=1400 audit(1748364408.731:939): avc: denied { setopt } for pid=9895 comm="syz.0.1151" lport=55588 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 203.875923][ T5859] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 204.035901][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 204.046086][ T5859] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.054990][ T5859] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.069217][ T5859] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.086162][ T5859] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.096290][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.104354][ T5859] usb 7-1: Product: syz [ 204.108671][ T5859] usb 7-1: Manufacturer: syz [ 204.113315][ T5859] usb 7-1: SerialNumber: syz [ 204.304067][ T8493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.317264][ T5814] Bluetooth: hci4: command 0x206a tx timeout [ 204.326968][ T8493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.340211][ T8493] bond0 (unregistering): Released all slaves [ 204.444664][ T9913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1156'. [ 204.472478][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1156'. [ 204.511499][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.519595][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.526857][ T9884] bridge_slave_0: entered allmulticast mode [ 204.533736][ T9884] bridge_slave_0: entered promiscuous mode [ 204.540331][ T5859] usb 7-1: 0:2 : does not exist [ 204.542712][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.552344][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.559777][ T9884] bridge_slave_1: entered allmulticast mode [ 204.567045][ T9884] bridge_slave_1: entered promiscuous mode [ 204.619623][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.678694][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.699464][ T9919] wireguard0: entered promiscuous mode [ 204.704968][ T9919] wireguard0: entered allmulticast mode [ 204.725406][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 204.771318][ T9884] team0: Port device team_slave_0 added [ 204.781787][ T8493] hsr_slave_0: left promiscuous mode [ 204.788015][ T8493] hsr_slave_1: left promiscuous mode [ 204.793723][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.801631][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.811742][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.819198][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.834847][ T8493] veth1_macvtap: left promiscuous mode [ 204.840538][ T8493] veth0_macvtap: left promiscuous mode [ 204.846219][ T8493] veth1_vlan: left promiscuous mode [ 204.851539][ T8493] veth0_vlan: left promiscuous mode [ 204.876547][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 204.881668][ T5814] Bluetooth: hci1: command tx timeout [ 204.898147][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 204.917514][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.937075][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.954882][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.972351][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.988755][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.004754][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.120124][ T5814] Bluetooth: hci2: command tx timeout [ 205.243030][ T24] usb 1-1: usb_control_msg returned -32 [ 205.248950][ T24] usbtmc 1-1:16.0: can't read capabilities [ 205.249930][ T8493] team0 (unregistering): Port device team_slave_1 removed [ 205.289267][ T8493] team0 (unregistering): Port device team_slave_0 removed [ 205.385598][ T5859] usb 7-1: USB disconnect, device number 3 [ 205.572509][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 205.585876][ T9884] team0: Port device team_slave_1 added [ 205.676443][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.687630][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.713657][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.730652][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.738633][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.768966][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.831450][ T974] IPVS: starting estimator thread 0... [ 205.865342][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.873088][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.880883][ T9891] bridge_slave_0: entered allmulticast mode [ 205.888651][ T9891] bridge_slave_0: entered promiscuous mode [ 205.909846][ T9884] hsr_slave_0: entered promiscuous mode [ 205.918980][ T9884] hsr_slave_1: entered promiscuous mode [ 205.938045][ T9929] IPVS: using max 40 ests per chain, 96000 per kthread [ 205.953340][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.964913][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.977382][ T9891] bridge_slave_1: entered allmulticast mode [ 205.997538][ T9891] bridge_slave_1: entered promiscuous mode [ 206.118889][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.133537][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.238564][ T8493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.264199][ T30] audit: type=1400 audit(1748364411.711:940): avc: denied { write } for pid=9942 comm="syz.3.1166" path="socket:[35127]" dev="sockfs" ino=35127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 206.353236][ T8493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.380019][ T9891] team0: Port device team_slave_0 added [ 206.390253][ T9891] team0: Port device team_slave_1 added [ 206.425169][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.432584][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.463588][ T9891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.529423][ T8493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.561098][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.572720][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.610683][ T9891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.651521][ T8493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.755111][ T9891] hsr_slave_0: entered promiscuous mode [ 206.762860][ T9891] hsr_slave_1: entered promiscuous mode [ 206.772807][ T9891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.780753][ T9891] Cannot create hsr debugfs directory [ 206.789150][ T30] audit: type=1400 audit(1748364412.241:941): avc: denied { read } for pid=9955 comm="syz.3.1171" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.823916][ T30] audit: type=1400 audit(1748364412.241:942): avc: denied { open } for pid=9955 comm="syz.3.1171" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.847143][ T30] audit: type=1400 audit(1748364412.241:943): avc: denied { ioctl } for pid=9955 comm="syz.3.1171" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 206.941450][ T8493] bridge_slave_1: left allmulticast mode [ 206.957170][ T8493] bridge_slave_1: left promiscuous mode [ 206.966469][ T5814] Bluetooth: hci1: command tx timeout [ 206.969477][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.988603][ T8493] bridge_slave_0: left allmulticast mode [ 206.994254][ T8493] bridge_slave_0: left promiscuous mode [ 207.004595][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.206352][ T5814] Bluetooth: hci2: command tx timeout [ 207.449086][ T8493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.506098][ T974] usb 1-1: USB disconnect, device number 17 [ 207.553709][ T8493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.614283][ T8493] bond0 (unregistering): Released all slaves [ 207.993299][ T30] audit: type=1400 audit(1748364413.441:944): avc: denied { shutdown } for pid=9986 comm="syz.3.1185" lport=39366 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.032235][ T9884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.039111][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 208.053783][ T9989] Invalid ELF header magic: != ELF [ 208.057656][ T30] audit: type=1400 audit(1748364413.501:945): avc: denied { module_load } for pid=9988 comm="syz.3.1186" path="/291/bus" dev="tmpfs" ino=1521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 208.098723][ T8493] hsr_slave_0: left promiscuous mode [ 208.107369][ T8493] hsr_slave_1: left promiscuous mode [ 208.114105][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.122872][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.146476][ T8493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.153985][ T8493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.183850][ T8493] veth1_macvtap: left promiscuous mode [ 208.194980][ T8493] veth0_macvtap: left promiscuous mode [ 208.200723][ T8493] veth1_vlan: left promiscuous mode [ 208.206098][ T8493] veth0_vlan: left promiscuous mode [ 208.212499][ T43] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.221459][ T43] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.234417][ T43] usb 7-1: config 220 has no interface number 2 [ 208.243352][ T43] usb 7-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x74, changing to 0x4 [ 208.257716][ T43] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x4 has an invalid bInterval 58, changing to 9 [ 208.270890][ T43] usb 7-1: config 220 interface 1 altsetting 5 endpoint 0x4 has invalid maxpacket 25705, setting to 1024 [ 208.282531][ T43] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 208.299107][ T43] usb 7-1: config 220 interface 0 has no altsetting 0 [ 208.305969][ T43] usb 7-1: config 220 interface 76 has no altsetting 0 [ 208.313018][ T43] usb 7-1: config 220 interface 1 has no altsetting 0 [ 208.331426][ T43] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.341183][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.351943][ T43] usb 7-1: Product: syz [ 208.356999][ T43] usb 7-1: Manufacturer: syz [ 208.361758][ T43] usb 7-1: SerialNumber: syz [ 208.592032][ T43] usb 7-1: selecting invalid altsetting 0 [ 208.598289][ T43] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 208.605182][ T43] usb 7-1: No valid video chain found. [ 208.618968][ T43] usb 7-1: selecting invalid altsetting 0 [ 208.624820][ T43] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 208.636242][ T43] usb 7-1: USB disconnect, device number 4 [ 208.670035][ T8493] team0 (unregistering): Port device team_slave_1 removed [ 208.719817][ T8493] team0 (unregistering): Port device team_slave_0 removed [ 209.005437][ T9884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.014829][ T9884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.024553][ T9993] bridge0: port 3(gretap0) entered blocking state [ 209.033816][ T9993] bridge0: port 3(gretap0) entered disabled state [ 209.040557][ T9993] gretap0: entered allmulticast mode [ 209.045933][ T5814] Bluetooth: hci1: command tx timeout [ 209.053027][ T9993] gretap0: entered promiscuous mode [ 209.062005][ T9993] bridge0: port 3(gretap0) entered blocking state [ 209.068692][ T9993] bridge0: port 3(gretap0) entered forwarding state [ 209.077293][ T9884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.275892][ T5814] Bluetooth: hci2: command tx timeout [ 209.322386][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.388405][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.413479][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.420663][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.439997][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.447171][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.538090][ T974] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.554488][ T9891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.579934][ T9891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.590738][ T9891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.601661][ T9891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.646280][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 209.691670][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.707199][ T974] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 209.715299][ T974] usb 1-1: config 0 has no interface number 0 [ 209.722273][ T974] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 209.732116][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.742162][ T974] usb 1-1: config 0 descriptor?? [ 209.751773][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.766607][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.773662][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.788405][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.795475][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.807428][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.821476][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.829036][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.852496][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.864269][ T9891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.865638][ T43] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.877456][ T9891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.895602][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.907397][ T43] usb 7-1: config 0 descriptor?? [ 209.959030][ T9884] veth0_vlan: entered promiscuous mode [ 209.990251][ T9884] veth1_vlan: entered promiscuous mode [ 210.023485][ T9884] veth0_macvtap: entered promiscuous mode [ 210.036413][ T9884] veth1_macvtap: entered promiscuous mode [ 210.058243][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.074794][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.090678][ T9884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.099496][ T9884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.110516][ T9884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.119445][ T9884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.172811][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.203610][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.213210][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.252365][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.262727][ T9891] veth0_vlan: entered promiscuous mode [ 210.272097][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.281458][ T9891] veth1_vlan: entered promiscuous mode [ 210.310411][ T9891] veth0_macvtap: entered promiscuous mode [ 210.329123][ T9891] veth1_macvtap: entered promiscuous mode [ 210.339316][ T43] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 210.362165][ T43] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 210.363371][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.427769][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.453246][ T9891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.464990][ T9891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.477148][ T9891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.486021][ T9891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.579369][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.594173][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.627275][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.650294][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.981026][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.084905][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.154495][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.231344][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.270374][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.279654][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.287770][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.298841][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.306458][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.421328][ T49] gretap0: left allmulticast mode [ 211.428330][ T49] gretap0: left promiscuous mode [ 211.433448][ T49] bridge0: port 3(gretap0) entered disabled state [ 211.442679][ T49] bridge_slave_1: left allmulticast mode [ 211.451320][ T49] bridge_slave_1: left promiscuous mode [ 211.460769][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.472097][ T49] bridge_slave_0: left allmulticast mode [ 211.477885][ T49] bridge_slave_0: left promiscuous mode [ 211.483607][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.782038][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.792500][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.802318][ T49] bond0 (unregistering): Released all slaves [ 211.892447][T10032] chnl_net:caif_netlink_parms(): no params data found [ 211.967495][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.974690][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.983181][T10032] bridge_slave_0: entered allmulticast mode [ 211.989932][T10032] bridge_slave_0: entered promiscuous mode [ 212.000021][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.017356][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.024507][T10032] bridge_slave_1: entered allmulticast mode [ 212.031540][T10032] bridge_slave_1: entered promiscuous mode [ 212.066341][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.077464][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.108435][T10032] team0: Port device team_slave_0 added [ 212.122209][T10032] team0: Port device team_slave_1 added [ 212.149823][ T49] hsr_slave_0: left promiscuous mode [ 212.155490][ T49] hsr_slave_1: left promiscuous mode [ 212.162774][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.171007][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.181871][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.191502][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.212210][ T49] veth1_macvtap: left promiscuous mode [ 212.216585][ T5886] usb 1-1: USB disconnect, device number 18 [ 212.220579][ T49] veth0_macvtap: left promiscuous mode [ 212.231946][ T49] veth1_vlan: left promiscuous mode [ 212.239443][ T49] veth0_vlan: left promiscuous mode [ 212.430554][ T5850] usb 7-1: USB disconnect, device number 5 [ 212.760798][ T49] team0 (unregistering): Port device team_slave_1 removed [ 212.832248][ T49] team0 (unregistering): Port device team_slave_0 removed [ 212.904393][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.913551][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.921706][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.929538][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.938025][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.356183][ T5818] Bluetooth: hci1: command tx timeout [ 213.386531][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.397974][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.406036][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.419809][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.428905][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.636907][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.643954][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.670557][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.693288][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.700280][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.727362][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.793225][T10032] hsr_slave_0: entered promiscuous mode [ 213.801080][T10032] hsr_slave_1: entered promiscuous mode [ 213.807566][T10032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.815096][T10032] Cannot create hsr debugfs directory [ 213.896324][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 214.059105][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.074999][ T43] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.093366][ T49] IPVS: stop unused estimator thread 0... [ 214.099907][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.112121][ T43] usb 7-1: config 0 descriptor?? [ 214.171162][T10053] chnl_net:caif_netlink_parms(): no params data found [ 214.259704][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.348359][T10044] chnl_net:caif_netlink_parms(): no params data found [ 214.414573][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.504450][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.530045][ T43] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 214.564594][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.001A/input/input21 [ 214.618364][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.636841][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.653075][T10053] bridge_slave_0: entered allmulticast mode [ 214.673083][ T43] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 214.687720][T10053] bridge_slave_0: entered promiscuous mode [ 214.721862][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.764050][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.771600][ T5857] usb 7-1: USB disconnect, device number 6 [ 214.773274][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.794877][T10053] bridge_slave_1: entered allmulticast mode [ 214.804372][T10053] bridge_slave_1: entered promiscuous mode [ 214.945390][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.958556][ T5814] Bluetooth: hci2: command tx timeout [ 214.969987][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.977865][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.985408][T10044] bridge_slave_0: entered allmulticast mode [ 214.998177][T10044] bridge_slave_0: entered promiscuous mode [ 215.008484][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.015584][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.019787][ T30] audit: type=1400 audit(1748364420.471:946): avc: denied { sqpoll } for pid=10074 comm="syz.0.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 215.025801][T10044] bridge_slave_1: entered allmulticast mode [ 215.051565][T10044] bridge_slave_1: entered promiscuous mode [ 215.076419][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.148334][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.194059][T10053] team0: Port device team_slave_0 added [ 215.207361][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.238781][T10053] team0: Port device team_slave_1 added [ 215.339719][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.352764][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.380032][ T30] audit: type=1400 audit(1748364420.831:947): avc: denied { append } for pid=10079 comm="syz.0.1211" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 215.383131][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.418782][T10044] team0: Port device team_slave_0 added [ 215.435596][ T5857] kernel read not supported for file /snd/controlC0 (pid: 5857 comm: kworker/0:3) [ 215.446360][ T5814] Bluetooth: hci1: command tx timeout [ 215.467855][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.490279][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.497863][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.526819][ T5814] Bluetooth: hci3: command tx timeout [ 215.528755][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.555631][T10044] team0: Port device team_slave_1 added [ 215.582262][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.632250][T10053] hsr_slave_0: entered promiscuous mode [ 215.638686][T10053] hsr_slave_1: entered promiscuous mode [ 215.644519][T10053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.654852][T10053] Cannot create hsr debugfs directory [ 215.660378][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 215.697530][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.704534][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.732574][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.752167][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.770168][T10032] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.783132][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.791153][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.817208][ T5850] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 215.824976][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.853195][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 215.861947][ T24] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 215.873710][T10032] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.880822][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.896550][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.905692][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.914247][ T24] usb 7-1: Product: syz [ 215.919416][ T24] usb 7-1: Manufacturer: syz [ 215.924019][ T24] usb 7-1: SerialNumber: syz [ 215.938844][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.968806][T10032] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.982176][T10032] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.003078][ T5850] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.017004][T10044] hsr_slave_0: entered promiscuous mode [ 216.023086][T10044] hsr_slave_1: entered promiscuous mode [ 216.028895][ T5850] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 216.039415][T10044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.047545][T10044] Cannot create hsr debugfs directory [ 216.054626][ T5850] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.065758][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.073807][ T5850] usb 1-1: Product: syz [ 216.079102][ T5850] usb 1-1: Manufacturer: syz [ 216.085881][ T5850] usb 1-1: SerialNumber: syz [ 216.155671][ T24] usb 7-1: 0:2 : does not exist [ 216.187034][ T24] usb 7-1: USB disconnect, device number 7 [ 216.273608][ T49] bridge_slave_1: left allmulticast mode [ 216.282985][ T49] bridge_slave_1: left promiscuous mode [ 216.288699][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.300926][ T49] bridge_slave_0: left allmulticast mode [ 216.308936][T10087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 216.310805][ T49] bridge_slave_0: left promiscuous mode [ 216.321888][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.339781][ T49] bridge_slave_1: left allmulticast mode [ 216.345458][ T49] bridge_slave_1: left promiscuous mode [ 216.352331][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.361603][ T49] bridge_slave_0: left allmulticast mode [ 216.367604][ T49] bridge_slave_0: left promiscuous mode [ 216.373251][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.764392][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.782236][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.792727][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1216'. [ 216.793437][ T49] bond0 (unregistering): Released all slaves [ 216.804165][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1216'. [ 216.902881][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.914038][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.924543][ T49] bond0 (unregistering): Released all slaves [ 216.931205][T10087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 217.046176][ T5814] Bluetooth: hci2: command tx timeout [ 217.055159][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.128207][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.141182][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.148298][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.163823][ T5850] cdc_ncm 1-1:1.0: failed to get mac address [ 217.185654][ T5850] cdc_ncm 1-1:1.0: bind() failure [ 217.195922][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.203044][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.222928][ T5850] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 217.234628][ T5850] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 217.248205][ T5850] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 217.262588][ T5850] usb 1-1: USB disconnect, device number 19 [ 217.364315][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1221'. [ 217.526722][ T5818] Bluetooth: hci1: command tx timeout [ 217.588054][ T49] hsr_slave_0: left promiscuous mode [ 217.594482][ T49] hsr_slave_1: left promiscuous mode [ 217.601606][ T5818] Bluetooth: hci3: command tx timeout [ 217.607848][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.615669][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.623880][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.631585][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.644627][ T49] hsr_slave_0: left promiscuous mode [ 217.650609][ T49] hsr_slave_1: left promiscuous mode [ 217.656434][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.663899][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.672777][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.680292][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.713614][ T49] veth1_macvtap: left promiscuous mode [ 217.719405][ T49] veth0_macvtap: left promiscuous mode [ 217.725059][ T49] veth1_vlan: left promiscuous mode [ 217.730840][ T49] veth0_vlan: left promiscuous mode [ 217.737044][ T49] veth1_macvtap: left promiscuous mode [ 217.742561][ T49] veth0_macvtap: left promiscuous mode [ 217.748430][ T49] veth1_vlan: left promiscuous mode [ 217.755095][ T49] veth0_vlan: left promiscuous mode [ 217.938630][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1229'. [ 217.961241][ T30] audit: type=1400 audit(1748364423.411:948): avc: denied { read } for pid=10120 comm="syz.6.1229" path="socket:[36652]" dev="sockfs" ino=36652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 218.430366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 218.494596][ T49] team0 (unregistering): Port device team_slave_1 removed [ 218.584415][T10128] kvm: MONITOR instruction emulated as NOP! [ 218.594072][ T49] team0 (unregistering): Port device team_slave_0 removed [ 219.065062][ T30] audit: type=1400 audit(1748364424.511:949): avc: denied { mounton } for pid=10137 comm="syz.6.1235" path="/68/file0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 219.073430][T10138] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O [ 219.115948][ T5818] Bluetooth: hci2: command tx timeout [ 219.253502][T10142] binder: 10141:10142 ioctl c0306201 200000000640 returned -22 [ 219.508781][ T49] team0 (unregistering): Port device team_slave_1 removed [ 219.541270][ T49] team0 (unregistering): Port device team_slave_0 removed [ 219.596030][ T5818] Bluetooth: hci1: command tx timeout [ 219.675843][ T5818] Bluetooth: hci3: command tx timeout [ 219.795523][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.889774][T10032] veth0_vlan: entered promiscuous mode [ 219.908208][T10032] veth1_vlan: entered promiscuous mode [ 219.978478][T10032] veth0_macvtap: entered promiscuous mode [ 220.034122][T10032] veth1_macvtap: entered promiscuous mode [ 220.098201][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.149933][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.177403][T10044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.197705][T10032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.218437][T10032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.242989][T10032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.266974][T10032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.299522][T10044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.338848][T10044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.387714][T10044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.608671][T10053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.663162][T10053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.702008][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.710186][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.722999][ T5857] Process accounting resumed [ 220.739162][ T30] audit: type=1400 audit(1748364426.171:950): avc: denied { unmount } for pid=10164 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 220.768550][T10053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.811414][T10053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.849523][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.858207][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.879026][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.898084][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.917450][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.924558][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.973581][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.980676][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.034932][T10053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.061687][T10053] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.073747][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.080895][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.088669][ T5857] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 221.108478][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.115625][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.197624][ T5818] Bluetooth: hci2: command tx timeout [ 221.224613][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.251694][ T5857] usb 1-1: unable to get BOS descriptor or descriptor too short [ 221.263138][ T5857] usb 1-1: not running at top speed; connect to a high speed hub [ 221.273271][ T5857] usb 1-1: config 2 has an invalid interface number: 212 but max is 1 [ 221.284459][ T5857] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 221.334287][ T5857] usb 1-1: config 2 has no interface number 0 [ 221.362464][ T1326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.372994][ T5857] usb 1-1: config 2 has no interface number 1 [ 221.382857][ T5857] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 221.398538][ T5857] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 221.446247][ T5857] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 221.464617][T10044] veth0_vlan: entered promiscuous mode [ 221.474119][ T5857] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 221.487231][ T5857] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 221.503911][T10044] veth1_vlan: entered promiscuous mode [ 221.531437][ T5857] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.582333][ T5857] usb 1-1: config 2 interface 212 has no altsetting 0 [ 221.591548][T10044] veth0_macvtap: entered promiscuous mode [ 221.605398][ T5857] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 221.612943][ T30] audit: type=1400 audit(1748364427.051:951): avc: denied { bind } for pid=10179 comm="syz.6.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.638346][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.647411][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.655411][ T5857] usb 1-1: Product: syz [ 221.667399][T10044] veth1_macvtap: entered promiscuous mode [ 221.674609][ T5857] usb 1-1: Manufacturer: syz [ 221.680936][ T5857] usb 1-1: SerialNumber: syz [ 221.729770][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.753278][T10182] input: syz1 as /devices/virtual/input/input22 [ 221.761395][ T5818] Bluetooth: hci3: command tx timeout [ 221.781429][ T1326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.815004][T10053] veth0_vlan: entered promiscuous mode [ 221.831212][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.871619][T10053] veth1_vlan: entered promiscuous mode [ 221.891879][T10044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.910034][T10044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.920744][T10044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.932876][T10044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.944297][ T5857] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input23 [ 221.960792][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.969910][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.977727][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.030757][ T30] audit: type=1400 audit(1748364427.481:952): avc: denied { map } for pid=10187 comm="syz.6.1253" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 222.056816][ T30] audit: type=1400 audit(1748364427.491:953): avc: denied { execute } for pid=10187 comm="syz.6.1253" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 222.095269][ C0] xpad 1-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1 [ 222.095287][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.106198][ T5857] usb 1-1: USB disconnect, device number 20 [ 222.124988][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.125217][T10053] veth0_macvtap: entered promiscuous mode [ 222.203138][ T1326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.240160][T10053] veth1_macvtap: entered promiscuous mode [ 222.289822][ T1326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.309754][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.326669][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.334472][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.349068][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.368270][T10053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.378063][T10053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.386791][T10053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.395443][T10053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.451160][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.463751][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.620441][ T1326] bridge_slave_1: left allmulticast mode [ 222.629825][ T1326] bridge_slave_1: left promiscuous mode [ 222.639293][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.649013][ T1326] bridge_slave_0: left allmulticast mode [ 222.654664][ T1326] bridge_slave_0: left promiscuous mode [ 222.660946][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.987715][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.997730][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.008225][ T1326] bond0 (unregistering): Released all slaves [ 223.065107][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.095877][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.138397][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.151480][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.205554][T10185] chnl_net:caif_netlink_parms(): no params data found [ 223.347281][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.354392][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.362994][T10185] bridge_slave_0: entered allmulticast mode [ 223.369727][T10185] bridge_slave_0: entered promiscuous mode [ 223.378998][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.386501][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.393588][T10185] bridge_slave_1: entered allmulticast mode [ 223.407076][T10185] bridge_slave_1: entered promiscuous mode [ 223.466673][ T1326] hsr_slave_0: left promiscuous mode [ 223.485749][ T1326] hsr_slave_1: left promiscuous mode [ 223.491417][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.505773][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.526724][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.534126][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.563510][ T1326] veth1_macvtap: left promiscuous mode [ 223.569121][ T5891] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 223.586364][ T1326] veth0_macvtap: left promiscuous mode [ 223.592034][ T1326] veth1_vlan: left promiscuous mode [ 223.598175][ T1326] veth0_vlan: left promiscuous mode [ 223.730185][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 223.741223][ T5891] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 223.751240][ T5891] usb 1-1: config 0 has no interface number 0 [ 223.761221][ T5891] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 223.771172][ T5891] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 223.783140][ T5891] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 223.792816][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.801255][ T5891] usb 1-1: Product: syz [ 223.805428][ T5891] usb 1-1: Manufacturer: syz [ 223.810106][ T5891] usb 1-1: SerialNumber: syz [ 223.820297][ T5891] usb 1-1: config 0 descriptor?? [ 223.827035][T10204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.834262][T10204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.925472][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 223.961154][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 224.054120][T10204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.064018][T10204] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.236011][ T5818] Bluetooth: hci1: command tx timeout [ 224.373485][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.399231][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.506904][T10185] team0: Port device team_slave_0 added [ 224.514931][T10185] team0: Port device team_slave_1 added [ 224.545980][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.553512][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.559545][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.581497][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.599078][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.611054][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.616102][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.619260][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.632929][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.640915][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.669699][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.699512][ T5891] asix 1-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xe5 [ 224.724698][T10185] hsr_slave_0: entered promiscuous mode [ 224.731010][T10185] hsr_slave_1: entered promiscuous mode [ 224.931725][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.946843][ T9] usb 1-1: USB disconnect, device number 21 [ 225.003999][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.014417][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.022566][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.030308][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.038557][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.065881][ T5891] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 225.131760][T10209] chnl_net:caif_netlink_parms(): no params data found [ 225.212750][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.216084][ T5891] usb 7-1: Using ep0 maxpacket: 16 [ 225.220466][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.232192][T10209] bridge_slave_0: entered allmulticast mode [ 225.233516][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.239905][T10209] bridge_slave_0: entered promiscuous mode [ 225.251311][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.257211][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.273473][ T5891] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 225.275617][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.283677][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.295690][T10209] bridge_slave_1: entered allmulticast mode [ 225.304700][ T5891] usb 7-1: config 0 descriptor?? [ 225.305296][T10209] bridge_slave_1: entered promiscuous mode [ 225.350792][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.402953][T10209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.434694][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.451088][T10209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.532436][T10209] team0: Port device team_slave_0 added [ 225.551280][T10209] team0: Port device team_slave_1 added [ 225.578009][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.615520][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'. [ 225.625386][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1261'. [ 225.637555][T10215] chnl_net:caif_netlink_parms(): no params data found [ 225.667573][T10209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.674519][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.701530][T10209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.736049][ T5891] hid-multitouch 0003:1FD2:6007.001B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 225.741354][T10209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.754910][T10209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.782404][T10209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.865685][T10185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.890827][T10209] hsr_slave_0: entered promiscuous mode [ 225.897070][T10209] hsr_slave_1: entered promiscuous mode [ 225.902878][T10209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.911257][T10209] Cannot create hsr debugfs directory [ 225.918339][T10185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.943450][T10215] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.950826][T10215] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.958520][T10215] bridge_slave_0: entered allmulticast mode [ 225.966025][T10215] bridge_slave_0: entered promiscuous mode [ 225.977472][ T9] usb 7-1: USB disconnect, device number 8 [ 225.989800][T10185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.004439][T10215] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.013152][T10215] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.020231][ T5891] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 226.028085][T10215] bridge_slave_1: entered allmulticast mode [ 226.034708][T10215] bridge_slave_1: entered promiscuous mode [ 226.054519][T10185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.083289][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.108289][T10215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.132545][T10215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.172536][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.207008][T10215] team0: Port device team_slave_0 added [ 226.213181][ T5891] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 226.213223][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.213247][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.213270][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 226.213294][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.213332][ T5891] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.213352][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.226555][ T5891] usb 1-1: config 0 descriptor?? [ 226.239586][T10215] team0: Port device team_slave_1 added [ 226.296438][T10230] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.324850][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.329970][ T5818] Bluetooth: hci1: command tx timeout [ 226.371848][T10215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.379073][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.405397][T10215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.434937][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.454944][T10215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.461988][T10215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.490184][T10215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.576526][T10215] hsr_slave_0: entered promiscuous mode [ 226.582950][T10215] hsr_slave_1: entered promiscuous mode [ 226.589187][T10215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.597552][T10215] Cannot create hsr debugfs directory [ 226.617708][ T30] audit: type=1326 audit(1748364432.071:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.6.1264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5518e969 code=0x0 [ 226.716050][ T5818] Bluetooth: hci2: command tx timeout [ 226.737150][ T5891] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 226.746444][ T5891] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 226.762805][ T5891] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 226.781260][ T59] bridge_slave_1: left allmulticast mode [ 226.790349][ T59] bridge_slave_1: left promiscuous mode [ 226.796121][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.804653][ T59] bridge_slave_0: left allmulticast mode [ 226.810690][ T59] bridge_slave_0: left promiscuous mode [ 226.816355][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.826900][ T59] bridge_slave_1: left allmulticast mode [ 226.832539][ T59] bridge_slave_1: left promiscuous mode [ 226.838256][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.848005][ T59] bridge_slave_0: left allmulticast mode [ 226.853634][ T59] bridge_slave_0: left promiscuous mode [ 226.859437][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.040084][ T5850] usb 1-1: USB disconnect, device number 22 [ 227.119691][ T5818] Bluetooth: hci3: command tx timeout [ 227.270287][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.280565][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.290005][ T59] bond0 (unregistering): Released all slaves [ 227.362616][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.372556][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.381962][ T59] bond0 (unregistering): Released all slaves [ 227.442381][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.477841][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.494153][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.501269][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.551781][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.558892][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.629349][ T30] audit: type=1400 audit(1748364433.071:955): avc: denied { create } for pid=10239 comm="syz.0.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 227.719526][T10185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.910945][ T30] audit: type=1400 audit(1748364433.361:956): avc: denied { watch_reads } for pid=10248 comm="syz.6.1269" path="/89/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 228.028696][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.064178][T10185] veth0_vlan: entered promiscuous mode [ 228.089083][ T59] hsr_slave_0: left promiscuous mode [ 228.094791][ T59] hsr_slave_1: left promiscuous mode [ 228.100770][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.112323][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.124988][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.135863][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 228.143515][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.162053][ T59] hsr_slave_0: left promiscuous mode [ 228.168197][ T59] hsr_slave_1: left promiscuous mode [ 228.173964][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.178772][ T30] audit: type=1400 audit(1748364433.621:957): avc: denied { mounton } for pid=10258 comm="syz.6.1272" path="/file0" dev="ramfs" ino=41206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 228.181642][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.212249][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.220355][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.259398][ T59] veth1_macvtap: left promiscuous mode [ 228.265598][ T59] veth0_macvtap: left promiscuous mode [ 228.273056][ T59] veth1_vlan: left promiscuous mode [ 228.279284][ T59] veth0_vlan: left promiscuous mode [ 228.290708][ T59] veth1_macvtap: left promiscuous mode [ 228.296271][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 228.301448][ T59] veth0_macvtap: left promiscuous mode [ 228.308407][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 228.321664][ T59] veth1_vlan: left promiscuous mode [ 228.327500][ T10] usb 1-1: config 179 has no interface number 0 [ 228.333783][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 228.345273][ T59] veth0_vlan: left promiscuous mode [ 228.354624][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 228.366601][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.377965][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 228.402927][ T5818] Bluetooth: hci1: command tx timeout [ 228.405807][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 228.463142][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 228.482811][T10269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.491530][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.511056][T10249] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.795947][ T5818] Bluetooth: hci2: command tx timeout [ 228.802133][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input25 [ 228.968668][ T30] audit: type=1400 audit(1748364434.421:958): avc: denied { create } for pid=10275 comm="syz.6.1280" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 229.070931][ T30] audit: type=1400 audit(1748364434.511:959): avc: denied { unlink } for pid=9234 comm="syz-executor" name="file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 229.167133][ T59] team0 (unregistering): Port device team_slave_1 removed [ 229.198893][ T5818] Bluetooth: hci3: command tx timeout [ 229.205710][ T59] team0 (unregistering): Port device team_slave_0 removed [ 229.238953][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.248033][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.475120][ T5850] usb 1-1: USB disconnect, device number 23 [ 229.475189][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 229.489885][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 229.762632][ T59] team0 (unregistering): Port device team_slave_1 removed [ 229.793433][ T59] team0 (unregistering): Port device team_slave_0 removed [ 230.063515][T10185] veth1_vlan: entered promiscuous mode [ 230.115689][T10185] veth0_macvtap: entered promiscuous mode [ 230.127104][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1283'. [ 230.135052][T10185] veth1_macvtap: entered promiscuous mode [ 230.138009][T10282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.163144][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.183551][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.197185][T10185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.219912][T10185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.231787][T10185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.241230][T10185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.286168][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 230.376519][ T8493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.384355][ T8493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.436576][T10215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.451553][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 230.453706][T10215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.457418][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.476204][ T5818] Bluetooth: hci1: command tx timeout [ 230.493731][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.496710][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.511216][T10215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.538637][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.553657][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.554270][T10215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.579248][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.597310][ T10] usb 1-1: config 0 descriptor?? [ 230.671834][T10209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.768519][T10209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.779656][T10209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.791767][T10209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.876849][ T5818] Bluetooth: hci2: command tx timeout [ 230.889157][T10215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.921608][T10215] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.948230][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.955332][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.965411][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.972542][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.019799][T10209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.049229][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 231.078164][T10209] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.087717][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.001D/input/input26 [ 231.105462][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.112578][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.145690][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.152818][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.156006][ T10] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 231.277882][ T5818] Bluetooth: hci3: command tx timeout [ 231.403441][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.483387][T10215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.572138][T10215] veth0_vlan: entered promiscuous mode [ 231.589722][T10215] veth1_vlan: entered promiscuous mode [ 231.651731][T10215] veth0_macvtap: entered promiscuous mode [ 231.663819][T10209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.675570][T10215] veth1_macvtap: entered promiscuous mode [ 231.719911][T10215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.739196][T10215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.774379][T10209] veth0_vlan: entered promiscuous mode [ 231.784662][T10215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.801048][T10215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.811447][T10215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.822523][T10215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.849940][T10209] veth1_vlan: entered promiscuous mode [ 231.915592][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.943108][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.952730][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.961876][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.969848][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.978857][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.997807][T10209] veth0_macvtap: entered promiscuous mode [ 232.039354][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.058773][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.060323][ T5857] usb 1-1: USB disconnect, device number 24 [ 232.069741][T10209] veth1_macvtap: entered promiscuous mode [ 232.203114][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.225202][T10209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.238641][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.251694][T10209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.260396][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.273513][T10209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.283768][T10209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.292979][T10209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.301888][T10209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.336948][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.557585][T10310] chnl_net:caif_netlink_parms(): no params data found [ 232.604845][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.615444][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.749512][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.757670][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.762110][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.773390][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.774580][T10310] bridge_slave_0: entered allmulticast mode [ 232.793082][ T30] audit: type=1400 audit(1748364438.241:960): avc: denied { read } for pid=10329 comm="syz.6.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.816063][T10310] bridge_slave_0: entered promiscuous mode [ 232.825423][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.838098][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.845232][T10310] bridge_slave_1: entered allmulticast mode [ 232.852372][T10310] bridge_slave_1: entered promiscuous mode [ 232.897515][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.920007][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.955293][ T36] bridge_slave_1: left allmulticast mode [ 232.961850][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 232.969506][ T5814] Bluetooth: hci2: command tx timeout [ 232.975705][ T36] bridge_slave_1: left promiscuous mode [ 232.982132][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.000801][ T36] bridge_slave_0: left allmulticast mode [ 233.006664][ T36] bridge_slave_0: left promiscuous mode [ 233.012330][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.152411][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 233.162321][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.172431][ T43] usb 1-1: Product: syz [ 233.178130][ T43] usb 1-1: Manufacturer: syz [ 233.182769][ T43] usb 1-1: SerialNumber: syz [ 233.194977][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 233.251821][ T30] audit: type=1400 audit(1748364438.701:961): avc: denied { firmware_load } for pid=5890 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 233.260809][ T5890] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 233.320927][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.348020][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.398782][ T36] bond0 (unregistering): Released all slaves [ 233.535301][ C1] usb 1-1: ath: unknown panic pattern! [ 233.559067][T10310] team0: Port device team_slave_0 added [ 233.571872][T10310] team0: Port device team_slave_1 added [ 233.612330][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.620855][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.647304][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.672061][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.679253][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.706338][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.743408][ T9] usb 1-1: USB disconnect, device number 25 [ 233.800198][T10310] hsr_slave_0: entered promiscuous mode [ 233.806934][T10310] hsr_slave_1: entered promiscuous mode [ 233.813018][T10310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.820652][T10310] Cannot create hsr debugfs directory [ 233.854329][ T36] hsr_slave_0: left promiscuous mode [ 233.860269][ T36] hsr_slave_1: left promiscuous mode [ 233.869268][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.879102][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.889157][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.898268][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.916329][ T36] veth1_macvtap: left promiscuous mode [ 233.921928][ T36] veth0_macvtap: left promiscuous mode [ 233.927699][ T36] veth1_vlan: left promiscuous mode [ 233.933061][ T36] veth0_vlan: left promiscuous mode [ 234.076020][ T5814] Bluetooth: hci1: command tx timeout [ 234.142113][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.153897][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.161918][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.169871][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.178117][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.316627][ T5890] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 234.323638][ T5890] ath9k_htc: Failed to initialize the device [ 234.327359][ T36] team0 (unregistering): Port device team_slave_1 removed [ 234.337169][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 234.370178][ T36] team0 (unregistering): Port device team_slave_0 removed [ 234.861130][T10335] chnl_net:caif_netlink_parms(): no params data found [ 234.933974][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.944778][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.953153][T10335] bridge_slave_0: entered allmulticast mode [ 234.961036][T10335] bridge_slave_0: entered promiscuous mode [ 234.970405][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.979013][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.987489][T10335] bridge_slave_1: entered allmulticast mode [ 234.994105][T10335] bridge_slave_1: entered promiscuous mode [ 235.025390][T10335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.042869][T10335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.088766][T10335] team0: Port device team_slave_0 added [ 235.112350][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.130822][T10335] team0: Port device team_slave_1 added [ 235.173988][T10335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.181141][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.210130][T10335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.239346][T10310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.259784][T10310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.295317][T10335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.316451][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.352965][T10335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.365907][T10310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.384726][T10310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.500835][T10335] hsr_slave_0: entered promiscuous mode [ 235.512308][T10335] hsr_slave_1: entered promiscuous mode [ 235.539644][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.550018][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.558809][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.574361][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.581798][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.823271][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.889416][T10310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.907923][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.002055][T10310] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.055135][T10335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.098772][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.130653][T10354] chnl_net:caif_netlink_parms(): no params data found [ 236.156072][ T5818] Bluetooth: hci1: command tx timeout [ 236.196428][ T5857] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 236.213094][T10335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.244483][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.246053][ T5818] Bluetooth: hci2: command tx timeout [ 236.251587][ T8493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.303284][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.310358][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.407415][ T5857] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.418443][ T5857] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.447625][ T5857] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.476771][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.512022][T10335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.529366][T10361] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 236.551488][ T5857] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.689497][T10335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.727613][T10354] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.734672][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.742220][T10354] bridge_slave_0: entered allmulticast mode [ 236.760867][T10354] bridge_slave_0: entered promiscuous mode [ 236.804648][T10310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 236.819271][T10310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.833519][T10354] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.844600][T10354] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.853705][T10354] bridge_slave_1: entered allmulticast mode [ 236.867086][T10354] bridge_slave_1: entered promiscuous mode [ 236.890935][ T5857] usb 7-1: USB disconnect, device number 9 [ 236.913172][ T36] bridge_slave_1: left allmulticast mode [ 236.938574][ T36] bridge_slave_1: left promiscuous mode [ 236.961246][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.977410][ T36] bridge_slave_0: left allmulticast mode [ 236.986595][ T36] bridge_slave_0: left promiscuous mode [ 236.992293][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.004510][ T36] bridge_slave_1: left allmulticast mode [ 237.011185][ T36] bridge_slave_1: left promiscuous mode [ 237.018675][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.027789][ T36] bridge_slave_0: left allmulticast mode [ 237.033567][ T36] bridge_slave_0: left promiscuous mode [ 237.040708][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.235961][ T974] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 237.385914][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 237.392794][ T974] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.414866][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 237.426136][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 237.437407][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 237.450435][ T974] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 237.459937][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.472164][ T974] usb 1-1: config 0 descriptor?? [ 237.479832][T10377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.490931][ T974] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 237.509898][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.527279][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.537515][ T36] bond0 (unregistering): Released all slaves [ 237.614189][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.623922][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.634259][ T36] bond0 (unregistering): Released all slaves [ 237.676248][ T5818] Bluetooth: hci3: command tx timeout [ 237.749359][T10354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.766391][T10354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.780109][ T9] usb 1-1: USB disconnect, device number 26 [ 237.800711][ T5890] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 237.873626][T10354] team0: Port device team_slave_0 added [ 237.879928][T10335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.892376][T10335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.901640][T10335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.914323][T10354] team0: Port device team_slave_1 added [ 237.935523][T10335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.955681][T10354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.962919][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.990170][ T5890] usb 7-1: Using ep0 maxpacket: 8 [ 237.995346][T10354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.011693][ T5890] usb 7-1: config index 0 descriptor too short (expected 29970, got 18) [ 238.020153][ T5890] usb 7-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 238.028981][ T5890] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 238.041284][ T5890] usb 7-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 238.050460][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.058565][ T5890] usb 7-1: Product: syz [ 238.064395][T10310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.071198][ T5890] usb 7-1: Manufacturer: syz [ 238.077889][T10354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.084818][T10354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.085755][ T5890] usb 7-1: SerialNumber: syz [ 238.111875][T10354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.127215][ T5890] usb 7-1: config 0 descriptor?? [ 238.134356][ T5890] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 238.150518][ T5890] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 238.204929][T10354] hsr_slave_0: entered promiscuous mode [ 238.211329][T10354] hsr_slave_1: entered promiscuous mode [ 238.217580][T10354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.225120][T10354] Cannot create hsr debugfs directory [ 238.238589][ T5818] Bluetooth: hci1: command tx timeout [ 238.315818][ T5818] Bluetooth: hci2: command tx timeout [ 238.399621][ T36] hsr_slave_0: left promiscuous mode [ 238.406273][ T5818] Bluetooth: hci4: unexpected event for opcode 0x2035 [ 238.413746][ T36] hsr_slave_1: left promiscuous mode [ 238.414463][ T24] usb 7-1: USB disconnect, device number 10 [ 238.429070][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.436559][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.456321][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.463728][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.482384][ T36] hsr_slave_0: left promiscuous mode [ 238.488401][ T36] hsr_slave_1: left promiscuous mode [ 238.494192][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.502106][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.511494][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.519126][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.538824][ T36] veth1_macvtap: left promiscuous mode [ 238.544299][ T36] veth0_macvtap: left promiscuous mode [ 238.549904][ T36] veth1_vlan: left promiscuous mode [ 238.555128][ T36] veth0_vlan: left promiscuous mode [ 238.561624][ T36] veth1_macvtap: left promiscuous mode [ 238.567634][ T36] veth0_macvtap: left promiscuous mode [ 238.573147][ T36] veth1_vlan: left promiscuous mode [ 238.578470][ T36] veth0_vlan: left promiscuous mode [ 238.934774][ T36] team0 (unregistering): Port device team_slave_1 removed [ 238.973680][ T36] team0 (unregistering): Port device team_slave_0 removed [ 239.044073][ T30] audit: type=1400 audit(1748364444.491:962): avc: denied { recv } for pid=5795 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.171 dest=52978 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 239.115793][ T30] audit: type=1400 audit(1748364444.561:963): avc: denied { setopt } for pid=10390 comm="syz.6.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 239.374277][T10394] kvm: user requested TSC rate below hardware speed [ 239.608805][ T36] team0 (unregistering): Port device team_slave_1 removed [ 239.652272][ T36] team0 (unregistering): Port device team_slave_0 removed [ 239.765881][ T5818] Bluetooth: hci3: command tx timeout [ 239.935900][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 240.049061][T10310] veth0_vlan: entered promiscuous mode [ 240.084448][T10310] veth1_vlan: entered promiscuous mode [ 240.121158][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 240.132766][ T30] audit: type=1400 audit(1748364445.581:964): avc: denied { egress } for pid=8493 comm="kworker/u8:8" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 240.133303][ T24] usb 1-1: config 64 has an invalid interface number: 4 but max is 0 [ 240.168028][T10335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.174703][ T24] usb 1-1: config 64 has no interface number 0 [ 240.184130][ T30] audit: type=1400 audit(1748364445.581:965): avc: denied { sendto } for pid=8493 comm="kworker/u8:8" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 240.194053][ T24] usb 1-1: config 64 interface 4 has no altsetting 0 [ 240.215976][T10310] veth0_macvtap: entered promiscuous mode [ 240.252905][ T30] audit: type=1400 audit(1748364445.701:966): avc: denied { create } for pid=10410 comm="syz.6.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 240.275408][ T24] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 240.279028][T10310] veth1_macvtap: entered promiscuous mode [ 240.290498][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.298732][ T24] usb 1-1: Product: syz [ 240.302914][ T24] usb 1-1: Manufacturer: syz [ 240.307702][ T24] usb 1-1: SerialNumber: syz [ 240.316705][ T5818] Bluetooth: hci1: command tx timeout [ 240.318283][T10335] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.352100][T10310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.383380][ T4498] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.390530][ T4498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.404930][T10310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.412482][ T5818] Bluetooth: hci2: command tx timeout [ 240.426360][T10310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.445787][T10310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.454502][T10310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.465848][T10310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.478286][ T4498] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.485380][ T4498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.582287][ T24] qmi_wwan 1-1:64.4: probe with driver qmi_wwan failed with error -22 [ 240.610172][ T24] usb 1-1: USB disconnect, device number 27 [ 240.685851][ T5857] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 240.693502][T10354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.729296][T10354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.749691][T10354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.770468][ T8493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.784243][ T8493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.785838][T10354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.835573][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.858561][ T5857] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.871807][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.883956][ T5857] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.895041][ T5857] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.909910][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.918812][ T5857] usb 7-1: SerialNumber: syz [ 240.951229][T10335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.016563][T10354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.049941][T10354] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.058344][T10335] veth0_vlan: entered promiscuous mode [ 241.070729][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.077872][ T8493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.097466][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.104517][ T8493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.124470][T10335] veth1_vlan: entered promiscuous mode [ 241.134865][ T5857] usb 7-1: 0:2 : does not exist [ 241.148225][ T5857] usb 7-1: USB disconnect, device number 11 [ 241.239645][ T30] audit: type=1400 audit(1748364446.691:967): avc: denied { mount } for pid=10418 comm="syz.0.1323" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 241.269218][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.281338][ T30] audit: type=1400 audit(1748364446.731:968): avc: denied { mounton } for pid=10418 comm="syz.0.1323" path="/370/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 241.336147][ T30] audit: type=1400 audit(1748364446.781:969): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 241.349944][T10335] veth0_macvtap: entered promiscuous mode [ 241.371480][T10335] veth1_macvtap: entered promiscuous mode [ 241.437836][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.467452][T10335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.490953][T10335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.520351][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.535553][T10335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.544652][T10335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.553453][T10335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.562171][T10335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.605383][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.622560][T10354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.682690][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.686413][T10354] veth0_vlan: entered promiscuous mode [ 241.697467][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.704854][T10354] veth1_vlan: entered promiscuous mode [ 241.776170][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.794578][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.814409][ T36] bridge_slave_1: left allmulticast mode [ 241.824397][ T36] bridge_slave_1: left promiscuous mode [ 241.830932][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.846449][ T5818] Bluetooth: hci3: command tx timeout [ 241.871805][ T36] bridge_slave_0: left allmulticast mode [ 241.905203][ T36] bridge_slave_0: left promiscuous mode [ 241.926438][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.940608][T10428] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 242.073996][T10432] Trying to write to read-only block-device nullb0 [ 242.153875][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.170443][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.181516][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.199659][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.210774][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.369321][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.380306][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.394269][ T36] bond0 (unregistering): Released all slaves [ 242.411418][T10354] veth0_macvtap: entered promiscuous mode [ 242.439751][T10440] syzkaller1: entered promiscuous mode [ 242.445856][T10440] syzkaller1: entered allmulticast mode [ 242.468474][T10354] veth1_macvtap: entered promiscuous mode [ 242.476850][ T5814] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 242.491070][ T5814] Bluetooth: hci4: Injecting HCI hardware error event [ 242.504839][ T5818] Bluetooth: hci4: hardware error 0x00 [ 242.546285][T10354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.557444][T10354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.600505][T10354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.610732][T10354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.625922][T10354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.634629][T10354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.822216][ T36] hsr_slave_0: left promiscuous mode [ 242.829351][ T36] hsr_slave_1: left promiscuous mode [ 242.835021][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.843115][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.853569][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.868724][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.884225][ T36] veth1_macvtap: left promiscuous mode [ 242.890228][ T36] veth0_macvtap: left promiscuous mode [ 242.896725][ T36] veth1_vlan: left promiscuous mode [ 242.901976][ T36] veth0_vlan: left promiscuous mode [ 243.159986][ T36] team0 (unregistering): Port device team_slave_1 removed [ 243.190775][ T36] team0 (unregistering): Port device team_slave_0 removed [ 243.566487][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.593035][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1331'. [ 243.608669][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.669736][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1331'. [ 243.684488][T10433] chnl_net:caif_netlink_parms(): no params data found [ 243.731971][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'. [ 243.753392][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 243.766246][T10453] netlink: 'syz.0.1332': attribute type 15 has an invalid length. [ 243.834139][ T4498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.844801][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.854786][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.866675][ T4498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.884482][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.894196][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.906850][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.917006][ T5814] Bluetooth: hci3: command tx timeout [ 243.973054][T10433] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.974752][ T30] audit: type=1400 audit(1748364449.421:970): avc: denied { create } for pid=10461 comm="syz.0.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 243.981430][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.041860][T10433] bridge_slave_0: entered allmulticast mode [ 244.045755][ T30] audit: type=1400 audit(1748364449.491:971): avc: denied { write } for pid=10461 comm="syz.0.1334" path="socket:[45945]" dev="sockfs" ino=45945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 244.049112][T10433] bridge_slave_0: entered promiscuous mode [ 244.130876][T10433] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.140464][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.149416][T10433] bridge_slave_1: entered allmulticast mode [ 244.159128][T10433] bridge_slave_1: entered promiscuous mode [ 244.205418][T10433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.220884][T10433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.236184][ T5823] Bluetooth: hci1: command tx timeout [ 244.290689][T10433] team0: Port device team_slave_0 added [ 244.350259][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.408597][T10433] team0: Port device team_slave_1 added [ 244.472023][T10433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.481323][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.530778][T10433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.566038][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 244.571039][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.591202][T10433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.598189][T10433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.624948][T10433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.687980][T10433] hsr_slave_0: entered promiscuous mode [ 244.693953][T10433] hsr_slave_1: entered promiscuous mode [ 244.701431][T10433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.709010][T10433] Cannot create hsr debugfs directory [ 244.744863][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.782798][T10455] chnl_net:caif_netlink_parms(): no params data found [ 244.809633][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.919934][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.927185][T10455] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.934287][T10455] bridge_slave_0: entered allmulticast mode [ 244.942538][T10455] bridge_slave_0: entered promiscuous mode [ 244.968093][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.975206][T10455] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.982550][T10455] bridge_slave_1: entered allmulticast mode [ 244.989409][T10455] bridge_slave_1: entered promiscuous mode [ 245.023481][T10455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.044471][T10455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.084938][T10455] team0: Port device team_slave_0 added [ 245.091210][ T36] bridge_slave_1: left allmulticast mode [ 245.098992][ T36] bridge_slave_1: left promiscuous mode [ 245.104603][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.113074][ T36] bridge_slave_0: left allmulticast mode [ 245.119504][ T36] bridge_slave_0: left promiscuous mode [ 245.125123][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.360205][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.370966][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.381994][ T36] bond0 (unregistering): Released all slaves [ 245.392479][T10455] team0: Port device team_slave_1 added [ 245.428394][T10455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.441749][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.469632][T10455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.484726][T10455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.491779][T10455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.518153][T10455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.574282][T10455] hsr_slave_0: entered promiscuous mode [ 245.580380][T10455] hsr_slave_1: entered promiscuous mode [ 245.586429][T10455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.593973][T10455] Cannot create hsr debugfs directory [ 245.690147][ T36] hsr_slave_0: left promiscuous mode [ 245.696037][ T36] hsr_slave_1: left promiscuous mode [ 245.702008][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.710352][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.718579][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.726016][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.741908][ T36] veth1_macvtap: left promiscuous mode [ 245.747579][ T36] veth0_macvtap: left promiscuous mode [ 245.753100][ T36] veth1_vlan: left promiscuous mode [ 245.760106][ T36] veth0_vlan: left promiscuous mode [ 245.996001][ T5818] Bluetooth: hci2: command tx timeout [ 246.081966][T10481] kvm: user requested TSC rate below hardware speed [ 246.189163][ T36] team0 (unregistering): Port device team_slave_1 removed [ 246.221447][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.236121][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.244409][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.254070][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.261680][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.300710][ T36] team0 (unregistering): Port device team_slave_0 removed [ 246.317754][ T5818] Bluetooth: hci1: command tx timeout [ 246.359546][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1342'. [ 246.826947][T10492] hsr_slave_1 (unregistering): left promiscuous mode [ 246.990178][T10433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.033361][T10433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.045702][T10433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.058648][T10433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.156031][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 247.191677][T10486] chnl_net:caif_netlink_parms(): no params data found [ 247.263328][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.323869][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.332461][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 247.337993][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.347643][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.361313][T10486] bridge_slave_0: entered allmulticast mode [ 247.368761][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.377146][T10486] bridge_slave_0: entered promiscuous mode [ 247.378651][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.388900][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.397152][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 247.404623][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.414332][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.425338][T10486] bridge_slave_1: entered allmulticast mode [ 247.430718][ T24] usb 1-1: config 0 descriptor?? [ 247.439412][T10486] bridge_slave_1: entered promiscuous mode [ 247.466061][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.513744][T10486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.525424][T10486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.548996][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.604358][T10486] team0: Port device team_slave_0 added [ 247.634839][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.655915][T10486] team0: Port device team_slave_1 added [ 247.685665][T10433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.702768][T10486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.710506][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.738743][T10486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.750444][T10486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.757607][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.783707][T10486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.802285][T10455] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.813219][T10455] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.825217][T10455] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.850954][T10455] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.873144][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001E/input/input29 [ 247.891313][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.001E/input/input30 [ 247.911020][ T24] kye 0003:0458:5011.001E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 247.927491][T10433] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.953623][T10486] hsr_slave_0: entered promiscuous mode [ 247.959891][T10486] hsr_slave_1: entered promiscuous mode [ 247.982741][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.989885][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.001044][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.008165][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.085914][ T5818] Bluetooth: hci2: command tx timeout [ 248.140583][ T36] bridge_slave_1: left allmulticast mode [ 248.151262][ T36] bridge_slave_1: left promiscuous mode [ 248.159318][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.165183][ T9] usb 1-1: USB disconnect, device number 28 [ 248.178496][ T36] bridge_slave_0: left allmulticast mode [ 248.187251][ T36] bridge_slave_0: left promiscuous mode [ 248.192891][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.212515][T10513] ================================================================== [ 248.220598][T10513] BUG: KASAN: use-after-free in __crypto_shash_import+0x241/0x290 [ 248.228416][T10513] Write of size 1 at addr ffff88816237a347 by task syz.6.1348/10513 [ 248.236389][T10513] [ 248.238711][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.6.1348 Not tainted 6.15.0-syzkaller-02148-g44ed0f35df34 #0 PREEMPT(full) [ 248.238736][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.238749][T10513] Call Trace: [ 248.238755][T10513] [ 248.238763][T10513] dump_stack_lvl+0x116/0x1f0 [ 248.238793][T10513] print_report+0xcd/0x680 [ 248.238812][T10513] ? __virt_addr_valid+0x81/0x610 [ 248.238830][T10513] ? __phys_addr+0xe8/0x180 [ 248.238848][T10513] ? __crypto_shash_import+0x241/0x290 [ 248.238870][T10513] kasan_report+0xe0/0x110 [ 248.238890][T10513] ? __crypto_shash_import+0x241/0x290 [ 248.238914][T10513] __crypto_shash_import+0x241/0x290 [ 248.238937][T10513] crypto_shash_import+0x88/0x260 [ 248.238959][T10513] crypto_ahash_import+0xcd/0x2a0 [ 248.238977][T10513] hash_accept+0x33c/0x3d0 [ 248.238996][T10513] do_accept+0x33e/0x530 [ 248.239023][T10513] ? __pfx_do_accept+0x10/0x10 [ 248.239058][T10513] __sys_accept4+0x100/0x1c0 [ 248.239084][T10513] ? __pfx___sys_accept4+0x10/0x10 [ 248.239110][T10513] ? xfd_validate_state+0x61/0x180 [ 248.239132][T10513] ? __sys_setsockopt+0x1c0/0x230 [ 248.239156][T10513] __x64_sys_accept4+0x96/0x100 [ 248.239183][T10513] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.239207][T10513] do_syscall_64+0xcd/0x4c0 [ 248.239232][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.239251][T10513] RIP: 0033:0x7fad5518e969 [ 248.239265][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.239282][T10513] RSP: 002b:00007fad56053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 248.239299][T10513] RAX: ffffffffffffffda RBX: 00007fad553b5fa0 RCX: 00007fad5518e969 [ 248.239310][T10513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 248.239321][T10513] RBP: 00007fad55210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 248.239332][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.239342][T10513] R13: 0000000000000000 R14: 00007fad553b5fa0 R15: 00007ffef8862538 [ 248.239360][T10513] [ 248.239366][T10513] [ 248.446946][T10513] The buggy address belongs to the physical page: [ 248.453339][T10513] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16237a [ 248.462164][T10513] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 248.469344][T10513] raw: 057ff00000000000 ffffea000588de88 ffffea000588de88 0000000000000000 [ 248.477906][T10513] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 248.486470][T10513] page dumped because: kasan: bad access detected [ 248.492870][T10513] page_owner info is not present (never set?) [ 248.498907][T10513] [ 248.501211][T10513] Memory state around the buggy address: [ 248.506820][T10513] ffff88816237a200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 248.514859][T10513] ffff88816237a280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 248.522899][T10513] >ffff88816237a300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 248.530941][T10513] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.537071][T10513] ffff88816237a380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 248.545117][T10513] ffff88816237a400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 248.553155][T10513] ================================================================== [ 248.569008][ T5818] Bluetooth: hci3: command tx timeout [ 248.573197][ T5823] Bluetooth: hci1: command tx timeout [ 248.581872][ T30] audit: type=1400 audit(1748364454.021:972): avc: denied { write } for pid=5795 comm="syz-executor" path="pipe:[2930]" dev="pipefs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 248.605113][ T30] audit: type=1400 audit(1748364454.031:973): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=35014 daddr=10.128.1.171 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 248.713877][T10513] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.721105][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.6.1348 Not tainted 6.15.0-syzkaller-02148-g44ed0f35df34 #0 PREEMPT(full) [ 248.732803][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.742840][T10513] Call Trace: [ 248.746109][T10513] [ 248.749034][T10513] dump_stack_lvl+0x3d/0x1f0 [ 248.753618][T10513] panic+0x71c/0x800 [ 248.757503][T10513] ? __pfx_panic+0x10/0x10 [ 248.761905][T10513] ? rcu_is_watching+0x12/0xc0 [ 248.766665][T10513] ? irqentry_exit+0x3b/0x90 [ 248.771256][T10513] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.776447][T10513] ? preempt_schedule_thunk+0x16/0x30 [ 248.781814][T10513] ? __crypto_shash_import+0x241/0x290 [ 248.787267][T10513] ? preempt_schedule_common+0x44/0xc0 [ 248.792716][T10513] ? __crypto_shash_import+0x241/0x290 [ 248.798161][T10513] check_panic_on_warn+0xab/0xb0 [ 248.803090][T10513] end_report+0x107/0x170 [ 248.807420][T10513] kasan_report+0xee/0x110 [ 248.811833][T10513] ? __crypto_shash_import+0x241/0x290 [ 248.817289][T10513] __crypto_shash_import+0x241/0x290 [ 248.822582][T10513] crypto_shash_import+0x88/0x260 [ 248.827602][T10513] crypto_ahash_import+0xcd/0x2a0 [ 248.832617][T10513] hash_accept+0x33c/0x3d0 [ 248.837037][T10513] do_accept+0x33e/0x530 [ 248.841277][T10513] ? __pfx_do_accept+0x10/0x10 [ 248.846050][T10513] __sys_accept4+0x100/0x1c0 [ 248.850647][T10513] ? __pfx___sys_accept4+0x10/0x10 [ 248.855840][T10513] ? xfd_validate_state+0x61/0x180 [ 248.860940][T10513] ? __sys_setsockopt+0x1c0/0x230 [ 248.865955][T10513] __x64_sys_accept4+0x96/0x100 [ 248.870797][T10513] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.876007][T10513] do_syscall_64+0xcd/0x4c0 [ 248.880514][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.886395][T10513] RIP: 0033:0x7fad5518e969 [ 248.890795][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.910393][T10513] RSP: 002b:00007fad56053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 248.918791][T10513] RAX: ffffffffffffffda RBX: 00007fad553b5fa0 RCX: 00007fad5518e969 [ 248.926755][T10513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 248.934715][T10513] RBP: 00007fad55210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 248.942673][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.950631][T10513] R13: 0000000000000000 R14: 00007fad553b5fa0 R15: 00007ffef8862538 [ 248.958594][T10513] [ 248.961783][T10513] Kernel Offset: disabled [ 248.966085][T10513] Rebooting in 86400 seconds..