last executing test programs: 5.23065097s ago: executing program 4 (id=4124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2\x00', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x1234, 0x4e22, 0x10002000, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1}]}}}}}}}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x0, 0x0}, 0x1, 0x0) 5.017244279s ago: executing program 4 (id=4127): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e001c0012e244010280020012", 0x2d}], 0x1}, 0x0) 4.875257306s ago: executing program 4 (id=4128): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback={0xfe80000000000000}, 0x9}, 0x1c, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000200)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xffffff33}}], 0x18, 0x4855}, 0x24000052) 4.752734493s ago: executing program 4 (id=4131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x1f4, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='hybla', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) read(r2, &(0x7f0000002000), 0x1000) read(r2, &(0x7f0000002000), 0x1000) read(r2, &(0x7f0000002000), 0x1000) read(r2, &(0x7f0000002000), 0x1000) write(r1, &(0x7f0000001000)='\x00'/16384, 0x4000) read(r2, &(0x7f0000002000), 0x1000) read(r2, &(0x7f0000002000), 0x1000) read(r2, &(0x7f0000002000), 0x1000) read(r2, &(0x7f0000002000), 0x1000) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) 3.947286121s ago: executing program 4 (id=4134): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001500)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r2 = eventfd(0xf7b2) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r2}) syz_ublk_setup_io_uring(0x1556, &(0x7f0000000440)={0x0, 0x4ee24, 0x2000, 0x1, 0x15a}, 0x0, 0x0, 0x0) 3.06431363s ago: executing program 2 (id=4140): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d04000000000000000000001004000000040000000000000803000000000000"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x1, 0x4}, 0x50) 3.023774715s ago: executing program 2 (id=4142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x6, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec00008500000082000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.013695256s ago: executing program 3 (id=4143): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB='nat\x00'/67], 0x48) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) 2.796632752s ago: executing program 2 (id=4145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote={0xaa}}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet(r0, &(0x7f0000000200)='hello', 0x5, 0x0, 0x0, 0x0) close(r0) 2.227980966s ago: executing program 2 (id=4147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x28, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x3c}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2.117210205s ago: executing program 4 (id=4148): syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000286dd6000000000102b40fe800000000000000000000000000001fe8000000000000000000000000000023b00"/66], 0x0) 2.016532339s ago: executing program 3 (id=4149): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e001c0012e244010280020012", 0x2d}], 0x1}, 0x0) 1.95505749s ago: executing program 3 (id=4151): r0 = socket$inet(0x2, 0x2, 0x11) bind$inet(r0, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x0, 0x1}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) read(r3, &(0x7f0000000300), 0x10) lseek(r3, 0x2, 0x0) read(r3, &(0x7f0000000400), 0x1000) 1.738518448s ago: executing program 3 (id=4154): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 1.659049017s ago: executing program 3 (id=4156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x24, 0x10, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f0002006f76735f7061636b65740000"]}, 0x24}}, 0x0) recvfrom(r0, &(0x7f0000000400)=""/1024, 0x400, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x21, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x22, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x23, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x24, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x25, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x26, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x27, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x28, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x29, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x2a, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x2b, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x2c, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x2d, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x2e, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x2f, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, 0x30, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c0002000600060008000000100003000c001a0004000100"]}, 0x68}}, 0x0) 1.559562534s ago: executing program 1 (id=4157): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1.401329008s ago: executing program 3 (id=4158): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000080)="00012c615bc2") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0x15, 0x2, "b4eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.386448645s ago: executing program 1 (id=4159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) accept(r0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)='\x00\x00', 0x4, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) 1.288613753s ago: executing program 2 (id=4160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0x3}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000140)={'bridge0\x00', @ifru_ivalue=0x4}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000050001a004c00040020000100080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="28000600080001000100000008000200e803000008000300030000000800040040420f000800050000000000"], 0x70}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 1.202106094s ago: executing program 0 (id=4161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {0x0}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, '\x00\x00\x00\x00'}]}]}, 0x48}}, 0x0) 1.168062924s ago: executing program 1 (id=4162): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x1f90, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000020)='nv', 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000020)='nv', 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000110)={&(0x7f0000000120)=@newqdisc={0x4c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x0, 0x0}, {0x0, 0x0, {{0x0, 0x3e8, 0xffffffff}}}}]}, 0x48}}, 0x0) write(r1, &(0x7f0000000200)='hello_world_tcp_nv_trigger_test', 0x20) write(r2, &(0x7f0000000300)='hello_world_tcp_nv_trigger_test', 0x20) 1.117239291s ago: executing program 0 (id=4163): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.105527483s ago: executing program 1 (id=4164): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3322, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000100)={0x2, 0x3323, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x20}, 0x8) connect$inet(r1, &(0x7f0000000400)={0x2, 0x3322, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000700)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x60}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00), 0x100}], 0x1}, 0x0) 1.065153874s ago: executing program 0 (id=4165): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d0400000000000000000000100400000004000000000000080300000000000000"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x1, 0x4}, 0x50) 1.028817876s ago: executing program 0 (id=4166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000000101040000000000000000020000003800018014000180080001007f000001080002007f00000120000280060001000600000006000200341200000600030006b800003800028014000180080001007f000001080002007f0000012000028006000100060000000600020006b8000006000300341200000800070000000e100c0005800a000100512e393331000000"], 0x98}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x6b8, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3412, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x6b8, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000600)="0300003008020001050504038090a27e0020052080060008914a00030001010001000000010000000100000000000000", 0x30, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000700)="0300003008020001050504038090a27e0020052080060008914a00030001010001000000010000000100000000000000", 0x30, 0x0, 0x0, 0x0) 991.666338ms ago: executing program 1 (id=4167): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x10005}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xd}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 947.388184ms ago: executing program 1 (id=4168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) 873.124283ms ago: executing program 0 (id=4169): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 397.974316ms ago: executing program 2 (id=4170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x28, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1c, 0x0, 0x1, [@nested={0x4, 0x3c}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 0s ago: executing program 0 (id=4171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) write(r2, &(0x7f0000000100)='10\x00', 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)='100\x00', 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1785768490.788:823): avc: denied { mounton } for pid=16564 comm="syz-executor" path="/root/syzkaller.91dDIk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1003.958383][ T30] audit: type=1400 audit(1785768490.828:824): avc: denied { mounton } for pid=16564 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1004.037937][T17027] netlink: 'syz.2.2989': attribute type 2 has an invalid length. [ 1004.549969][T17032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1004.587939][T17032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1004.741652][ T5839] IPVS: starting estimator thread 0... [ 1004.872674][T17038] IPVS: using max 39 ests per chain, 93600 per kthread [ 1005.165980][T17041] netlink: 'syz.2.2995': attribute type 21 has an invalid length. [ 1005.227548][T17041] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 1005.385138][T17041] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2995'. [ 1006.044976][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1006.057347][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1006.083846][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1006.097636][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1006.108741][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1006.314146][T17059] binder: 17053:17059 ioctl c01c5868 0 returned -22 [ 1006.719052][ T7967] syz_tun (unregistering): left allmulticast mode [ 1007.224831][T11035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.252418][T11035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.156036][T12528] Bluetooth: hci0: command tx timeout [ 1008.756186][T11035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1008.780658][T11035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.911775][T17107] tipc: Enabled bearer , priority 0 [ 1009.377482][ T5839] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 1009.945757][T11035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.988268][T11035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.081003][T17107] tipc: Resetting bearer [ 1010.150366][T17100] tipc: Disabling bearer [ 1010.232591][T12528] Bluetooth: hci0: command tx timeout [ 1010.549632][T11035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.605692][T11035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.072452][ T5839] usb 3-1: device descriptor read/64, error -71 [ 1011.125467][T17129] binder: 17127:17129 ioctl c01c5868 0 returned -22 [ 1012.025598][ T30] audit: type=1400 audit(1785768499.128:825): avc: denied { connect } for pid=17139 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1012.080860][ T30] audit: type=1400 audit(1785768499.158:826): avc: denied { setopt } for pid=17139 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1012.140430][ T30] audit: type=1400 audit(1785768499.158:827): avc: denied { bind } for pid=17139 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1012.312806][T12528] Bluetooth: hci0: command tx timeout [ 1013.172472][T17155] tipc: Enabled bearer , priority 0 [ 1013.381752][T11035] bridge_slave_1: left allmulticast mode [ 1013.387806][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.403345][T11035] bridge_slave_0: left allmulticast mode [ 1013.409147][T11035] bridge_slave_0: left promiscuous mode [ 1013.417206][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.441226][ T30] audit: type=1400 audit(1785768500.538:828): avc: denied { write } for pid=17162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1013.569277][ T30] audit: type=1400 audit(1785768500.668:829): avc: denied { write } for pid=17183 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1013.673931][T11035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.683679][T11035] bond_slave_0: left allmulticast mode [ 1013.692836][T11035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.701875][T11035] bond_slave_1: left allmulticast mode [ 1013.708832][T11035] bond0 (unregistering): Released all slaves [ 1013.717819][T17047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.725538][T17047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.733004][T17047] bridge_slave_0: entered allmulticast mode [ 1013.740016][T17047] bridge_slave_0: entered promiscuous mode [ 1013.749976][T17155] syzkaller0: entered promiscuous mode [ 1013.756041][T17155] syzkaller0: entered allmulticast mode [ 1013.770138][T17181] tipc: Resetting bearer [ 1013.784877][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1013.793083][T17047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.800254][T17047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.822760][T17047] bridge_slave_1: entered allmulticast mode [ 1013.839181][T17047] bridge_slave_1: entered promiscuous mode [ 1013.847034][T17154] tipc: Resetting bearer [ 1013.870866][T17154] tipc: Disabling bearer [ 1013.881981][T11035] tipc: Left network mode [ 1013.944775][T17047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.965480][T17047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.118813][T17047] team0: Port device team_slave_0 added [ 1014.318988][T17047] team0: Port device team_slave_1 added [ 1014.328899][T17190] syzkaller0: entered promiscuous mode [ 1014.342260][T17190] syzkaller0: entered allmulticast mode [ 1014.615253][T12528] Bluetooth: hci0: command tx timeout [ 1014.687784][T11035] hsr_slave_0: left promiscuous mode [ 1014.699782][T11035] hsr_slave_1: left promiscuous mode [ 1014.712215][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.729404][T11035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.748967][T11035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.756609][T11035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.777836][T11035] veth1_macvtap: left promiscuous mode [ 1014.786874][T11035] veth0_macvtap: left promiscuous mode [ 1014.798008][T11035] veth1_vlan: left promiscuous mode [ 1014.809758][T11035] veth0_vlan: left promiscuous mode [ 1014.899671][ T30] audit: type=1400 audit(1785768501.998:830): avc: denied { write } for pid=17199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1014.932558][T15955] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 1015.285996][ T30] audit: type=1400 audit(1785768502.378:831): avc: denied { write } for pid=17220 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.423775][T15955] usb 4-1: device descriptor read/64, error -71 [ 1015.712685][T15955] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 1015.882422][T15955] usb 4-1: device descriptor read/64, error -71 [ 1015.960384][T11035] team0 (unregistering): Port device team_slave_1 removed [ 1015.992726][T15955] usb usb4-port1: attempt power cycle [ 1015.998536][T11035] team0 (unregistering): Port device team_slave_0 removed [ 1016.121262][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1016.142051][T17047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.165545][T17047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.212460][T17047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.232236][T17234] tipc: Enabled bearer , priority 0 [ 1016.258547][T17233] syzkaller0: entered promiscuous mode [ 1016.267523][T17233] syzkaller0: entered allmulticast mode [ 1016.284028][T17047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.291706][T17047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.321913][T17047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.334713][T17238] syzkaller0: entered promiscuous mode [ 1016.340250][ T30] audit: type=1400 audit(1785768759.506:832): avc: denied { ioctl } for pid=17235 comm="syz.4.3040" path="socket:[49644]" dev="sockfs" ino=49644 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1016.365765][T15955] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 1016.375689][T17238] syzkaller0: entered allmulticast mode [ 1016.402877][T15955] usb 4-1: device descriptor read/8, error -71 [ 1016.451241][T17233] tipc: Resetting bearer [ 1016.464918][T17047] hsr_slave_0: entered promiscuous mode [ 1016.471033][T17047] hsr_slave_1: entered promiscuous mode [ 1016.477682][T17047] debugfs: 'hsr0' already exists in 'hsr' [ 1016.484057][T17047] Cannot create hsr debugfs directory [ 1016.489749][T17232] tipc: Resetting bearer [ 1016.520200][T17232] tipc: Disabling bearer [ 1016.665265][T15955] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 1016.744223][T15955] usb 4-1: device descriptor read/8, error -71 [ 1016.788245][T11035] IPVS: stop unused estimator thread 0... [ 1016.844848][T17252] syz_tun: entered allmulticast mode [ 1016.873116][T15955] usb usb4-port1: unable to enumerate USB device [ 1016.916642][T17251] syz_tun: left allmulticast mode [ 1017.098589][ T30] audit: type=1400 audit(1785768760.266:833): avc: denied { getopt } for pid=17262 comm="syz.4.3046" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1017.127370][T12528] Bluetooth: hci5: hcon ffff8880216f0000 sent 1 < count 1025 [ 1018.039150][ T30] audit: type=1400 audit(1785769017.277:834): avc: denied { write } for pid=17244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.256095][ T30] audit: type=1400 audit(1785769017.497:835): avc: denied { write } for pid=17280 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.376214][T17287] tipc: Enabled bearer , priority 0 [ 1018.386353][T17287] syzkaller0: entered promiscuous mode [ 1018.398665][T17287] syzkaller0: entered allmulticast mode [ 1018.436235][T17287] tipc: Resetting bearer [ 1018.470553][T17286] tipc: Resetting bearer [ 1018.514604][T17286] tipc: Disabling bearer [ 1018.638245][T17295] syz_tun: entered allmulticast mode [ 1018.655927][T17294] syz_tun: left allmulticast mode [ 1018.855756][T17047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1018.890923][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.916883][T17047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1018.948886][ T30] audit: type=1400 audit(1785769018.187:836): avc: denied { write } for pid=17293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1018.950626][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1019.037489][T17047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1019.164817][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1019.362443][T17047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1019.723794][ T30] audit: type=1400 audit(1785769018.937:837): avc: denied { write } for pid=17322 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.886412][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1020.196434][T17351] tipc: Enabled bearer , priority 0 [ 1020.244432][T17351] syzkaller0: entered promiscuous mode [ 1020.262795][T17351] syzkaller0: entered allmulticast mode [ 1020.298335][T17351] tipc: Resetting bearer [ 1020.323637][T17349] tipc: Resetting bearer [ 1020.370344][T17349] tipc: Disabling bearer [ 1020.406273][T17047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.460083][T17047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.482458][T15955] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1020.520555][ T30] audit: type=1400 audit(1785769275.820:838): avc: denied { write } for pid=17333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.522306][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.550729][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.598774][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.605901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.656459][T15955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.669294][T15955] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1020.717446][T15955] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1020.756765][T15955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.817231][ T30] audit: type=1400 audit(1785769276.110:839): avc: denied { write } for pid=17366 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.876925][T15955] usb 3-1: config 0 descriptor?? [ 1021.051678][T15955] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1022.472446][T17390] raw_sendmsg: syz.3.3071 forgot to set AF_INET. Fix it! [ 1023.218170][ T30] audit: type=1400 audit(1785769278.520:840): avc: denied { write } for pid=17379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1023.357151][T17047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.116665][ T30] audit: type=1400 audit(1785769279.420:841): avc: denied { write } for pid=17408 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.165825][T11009] usb 3-1: USB disconnect, device number 85 [ 1024.191494][T17047] veth0_vlan: entered promiscuous mode [ 1024.234134][T17415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3075'. [ 1024.275240][T17047] veth1_vlan: entered promiscuous mode [ 1024.355984][T17422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.377821][T17422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.465479][T17423] syz_tun: entered allmulticast mode [ 1024.477542][T17420] syz_tun: left allmulticast mode [ 1024.502129][T17047] veth0_macvtap: entered promiscuous mode [ 1024.519614][T17047] veth1_macvtap: entered promiscuous mode [ 1024.529528][T17428] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1024.551005][T17047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.581105][T17047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.704391][T11035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.734237][T11035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.776567][ T30] audit: type=1400 audit(1785769280.080:842): avc: denied { write } for pid=17418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1024.862131][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.870120][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.879026][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.946902][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.975809][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.986080][ T30] audit: type=1400 audit(1785769280.290:843): avc: denied { write } for pid=17443 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1025.001345][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.008100][T13726] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1025.050869][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.068660][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.203661][T13726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.216232][T13726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.216786][T17449] binder: 17447:17449 ioctl c01c5868 0 returned -22 [ 1025.226589][T13726] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1025.288711][T13726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.348834][T13726] usb 5-1: config 0 descriptor?? [ 1025.448424][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1025.452249][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1025.456610][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1025.460141][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1025.460771][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1025.670760][ T6463] syz_tun (unregistering): left allmulticast mode [ 1025.786902][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.794570][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.801691][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.809531][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.825597][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.840994][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.849828][T13726] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1025.881986][T13726] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1025.905874][T11034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.987871][T13726] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 1026.161828][ T30] audit: type=1400 audit(1785769281.460:844): avc: denied { write } for pid=17473 comm="syz.3.3087" name="uncompressed" dev="configfs" ino=34132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1026.274098][ T30] audit: type=1400 audit(1785769281.460:845): avc: denied { write } for pid=17473 comm="syz.3.3087" name="u" dev="configfs" ino=51270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1026.316550][ T30] audit: type=1400 audit(1785769281.460:846): avc: denied { read } for pid=17473 comm="syz.3.3087" name="dwFrameInterval" dev="configfs" ino=51272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1026.388511][T11034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.110046][ T30] audit: type=1800 audit(1785769281.460:847): pid=17474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3087" name="dwFrameInterval" dev="configfs" ino=51272 res=0 errno=0 [ 1027.142096][T13726] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 1027.326084][T11034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.428169][T11034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.463451][T17499] binder: 17497:17499 ioctl c01c5868 0 returned -22 [ 1027.513236][ T5614] Bluetooth: hci1: command tx timeout [ 1027.562508][T11009] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1027.583191][ T5708] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1027.609089][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.616383][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.623789][T17455] bridge_slave_0: entered allmulticast mode [ 1027.630823][T17455] bridge_slave_0: entered promiscuous mode [ 1027.638766][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.646234][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.653797][T17455] bridge_slave_1: entered allmulticast mode [ 1027.661060][T17455] bridge_slave_1: entered promiscuous mode [ 1027.727931][T11009] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1027.742087][T17455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.746397][T11009] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.759629][T17455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.773072][ T5708] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1027.793037][ T5708] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1027.805574][T11009] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1027.819371][T11009] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.830961][ T5708] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1027.843251][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.851768][T11009] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.882593][T11009] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1027.888776][T17455] team0: Port device team_slave_0 added [ 1027.892385][T17493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1027.906522][T11009] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1027.925470][ T5708] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1027.939150][T11009] usb 2-1: Product: syz [ 1027.947314][T13726] usb 5-1: USB disconnect, device number 76 [ 1027.955628][T11009] usb 2-1: Manufacturer: syz [ 1027.984064][T17455] team0: Port device team_slave_1 added [ 1027.989378][T11009] cdc_wdm 2-1:1.0: skipping garbage [ 1028.011169][T11009] cdc_wdm 2-1:1.0: skipping garbage [ 1028.038805][T11009] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1028.063889][T11009] cdc_wdm 2-1:1.0: Unknown control protocol [ 1028.213985][T17491] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1028.230677][ T5708] usb 4-1: USB disconnect, device number 99 [ 1028.270427][T11034] bridge_slave_1: left allmulticast mode [ 1028.306127][T11034] bridge_slave_1: left promiscuous mode [ 1028.328696][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.351987][T11034] bridge_slave_0: left allmulticast mode [ 1028.368709][T11034] bridge_slave_0: left promiscuous mode [ 1028.378905][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.429007][ T30] audit: type=1400 audit(1785769283.720:848): avc: denied { write } for pid=17507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1028.641367][ T30] audit: type=1400 audit(1785769283.910:849): avc: denied { write } for pid=17532 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.385200][T11034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.409940][T11034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.420137][T11034] bond0 (unregistering): Released all slaves [ 1029.460599][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1029.474187][T17455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.486552][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.564255][T17455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.593711][ T5614] Bluetooth: hci1: command tx timeout [ 1029.610925][T11034] tipc: Left network mode [ 1029.617668][T17455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.655354][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.693415][T17455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.857605][T17560] binder: 17556:17560 ioctl c01c5868 0 returned -22 [ 1029.895499][T17455] hsr_slave_0: entered promiscuous mode [ 1030.001878][T17455] hsr_slave_1: entered promiscuous mode [ 1030.022738][T17455] debugfs: 'hsr0' already exists in 'hsr' [ 1030.057723][T17455] Cannot create hsr debugfs directory [ 1030.531016][ T5715] usb 2-1: USB disconnect, device number 79 [ 1030.631246][ T30] audit: type=1400 audit(1785769285.910:850): avc: denied { setopt } for pid=17566 comm="syz.0.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1030.658224][T17571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1030.841264][T17579] binder: BINDER_SET_CONTEXT_MGR already set [ 1030.854925][T17579] binder: 17578:17579 ioctl 4018620d 200000000480 returned -16 [ 1030.871101][ T30] audit: type=1800 audit(1785769286.170:851): pid=17581 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3114" name="dwFrameInterval" dev="configfs" ino=51592 res=0 errno=0 [ 1030.905662][T17579] binder: 17578:17579 ioctl c0306201 200000000040 returned -14 [ 1031.197779][T11034] hsr_slave_0: left promiscuous mode [ 1031.244581][T11034] hsr_slave_1: left promiscuous mode [ 1031.279529][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.319543][T11034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.349102][T11034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.386849][T11034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.446751][T11034] veth1_macvtap: left promiscuous mode [ 1031.458780][T11034] veth0_macvtap: left promiscuous mode [ 1031.470989][T11034] veth1_vlan: left promiscuous mode [ 1031.486255][T11034] veth0_vlan: left promiscuous mode [ 1031.491608][ T30] audit: type=1400 audit(1785769286.790:852): avc: denied { write } for pid=17563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.622237][T17615] binder: 17612:17615 ioctl c01c5868 0 returned -22 [ 1031.658770][ T30] audit: type=1400 audit(1785769286.960:853): avc: denied { write } for pid=17614 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1031.687782][ T5614] Bluetooth: hci1: command tx timeout [ 1031.775612][ T5823] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1031.875455][T11034] team0 (unregistering): Port device team_slave_1 removed [ 1031.895192][T11034] team0 (unregistering): Port device team_slave_0 removed [ 1031.944122][ T5823] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1031.968847][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.986627][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1032.001711][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.016942][ T5823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.027847][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1032.028132][ T5823] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1032.044209][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1032.052229][ T5823] usb 2-1: Product: syz [ 1032.076864][ T5823] usb 2-1: Manufacturer: syz [ 1032.091085][ T5823] cdc_wdm 2-1:1.0: skipping garbage [ 1032.101768][ T5823] cdc_wdm 2-1:1.0: skipping garbage [ 1032.110953][ T5823] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1032.118487][ T5823] cdc_wdm 2-1:1.0: Unknown control protocol [ 1032.304622][T17611] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1033.101026][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1033.117536][ T30] audit: type=1400 audit(1785769288.420:854): avc: denied { write } for pid=17627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.149010][T17642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.166275][T17642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.173410][T17642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.198828][T11034] IPVS: stop unused estimator thread 0... [ 1033.314013][ T30] audit: type=1400 audit(1785769288.620:855): avc: denied { write } for pid=17651 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.336111][T13726] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1033.513519][T13726] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1033.522850][T17659] binder: 17655:17659 ioctl c01c5868 0 returned -22 [ 1033.541540][T13726] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.607754][T13726] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1033.622067][T13726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.633855][T13726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.646292][T13726] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1033.660282][T13726] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1033.668523][T13726] usb 5-1: Product: syz [ 1033.673107][T13726] usb 5-1: Manufacturer: syz [ 1033.691232][T13726] cdc_wdm 5-1:1.0: skipping garbage [ 1033.701921][T13726] cdc_wdm 5-1:1.0: skipping garbage [ 1033.719947][T13726] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1033.728746][T13726] cdc_wdm 5-1:1.0: Unknown control protocol [ 1033.763844][ T5614] Bluetooth: hci1: command tx timeout [ 1034.018969][T17641] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 1034.814249][T13726] usb 2-1: USB disconnect, device number 80 [ 1035.031324][T17455] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1035.382399][ T30] audit: type=1400 audit(1785769290.680:856): avc: denied { write } for pid=17665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.427742][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.507890][T17455] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1035.643333][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.650749][ T30] audit: type=1400 audit(1785769290.930:857): avc: denied { write } for pid=17694 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1035.674911][T17455] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1035.694887][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.703488][T17455] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1035.713069][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.137556][T13726] usb 5-1: USB disconnect, device number 77 [ 1036.294621][T17718] binder: 17712:17718 ioctl c01c5868 0 returned -22 [ 1036.389240][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.423409][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.473931][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.481011][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.523323][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.542138][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.549319][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.612669][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.627569][ T30] audit: type=1400 audit(1785769291.910:858): avc: denied { setattr } for pid=17727 comm="syz.3.3148" name="/" dev="configfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1036.681717][ T30] audit: type=1400 audit(1785769291.960:859): avc: denied { write } for pid=17699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1036.908141][ T30] audit: type=1400 audit(1785769292.210:860): avc: denied { write } for pid=17744 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1037.164859][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1037.253035][ T5839] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1037.270054][T17455] veth0_vlan: entered promiscuous mode [ 1037.304082][T17455] veth1_vlan: entered promiscuous mode [ 1037.324910][T17765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.362437][T17765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.454172][ T5839] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1037.491064][ T5839] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1037.501316][T17455] veth0_macvtap: entered promiscuous mode [ 1037.518078][T17455] veth1_macvtap: entered promiscuous mode [ 1037.527478][ T5839] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1037.550260][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.575488][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.657476][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.704454][T17752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1037.712428][T14763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.716885][ T5839] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.721744][T14763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.737829][T14763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.747941][T14763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.751221][ T30] audit: type=1400 audit(1785769293.050:861): avc: denied { write } for pid=17754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.487620][T17780] binder: 17777:17780 ioctl c01c5868 0 returned -22 [ 1038.523888][ T5839] usb 4-1: USB disconnect, device number 100 [ 1038.605978][ T30] audit: type=1400 audit(1785769293.910:862): avc: denied { write } for pid=17779 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.681346][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.699628][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.756424][T14763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.291092][T14763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1041.046063][T17811] file system registered [ 1041.050370][ T30] audit: type=1400 audit(1785769296.350:863): avc: denied { write } for pid=17800 comm="syz.3.3163" name="functions" dev="configfs" ino=8023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1041.104958][T17811] unloading [ 1041.189751][ T30] audit: type=1400 audit(1785769296.410:864): avc: denied { write } for pid=17800 comm="syz.3.3163" name="functions" dev="configfs" ino=8023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1041.453109][T12528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1041.478857][T12528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1041.496096][T12528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1041.515679][T12528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1041.525699][T12528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1041.555536][ T30] audit: type=1400 audit(1785769296.860:865): avc: denied { write } for pid=17788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.762091][ T30] audit: type=1400 audit(1785769297.060:866): avc: denied { write } for pid=17824 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.019818][ T7914] syz_tun (unregistering): left allmulticast mode [ 1042.299154][ T1123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.401654][T17839] binder: 17837:17839 ioctl c01c5868 0 returned -22 [ 1042.580321][ T1123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.862599][T10084] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1043.332569][ T1123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.503666][ T1123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.599064][T10084] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1043.611332][T10084] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1043.621903][T10084] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1043.630650][T17813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.631444][T10084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.638799][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.172933][T17813] bridge_slave_0: entered allmulticast mode [ 1044.174303][T17813] bridge_slave_0: entered promiscuous mode [ 1044.178281][T17813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.178400][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.178553][T17813] bridge_slave_1: entered allmulticast mode [ 1044.179963][T17813] bridge_slave_1: entered promiscuous mode [ 1044.205299][T17813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.207826][T17813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.211204][ T5614] Bluetooth: hci3: command tx timeout [ 1044.286966][T17843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1044.310289][T10084] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1044.383683][T17865] binder: 17864:17865 unknown command 2 [ 1044.434797][T17865] binder: 17864:17865 ioctl c0306201 200000000340 returned -22 [ 1044.443643][T17813] team0: Port device team_slave_0 added [ 1044.468914][T17813] team0: Port device team_slave_1 added [ 1044.562039][T10084] usb 4-1: USB disconnect, device number 101 [ 1044.721543][T17813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.740922][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.791792][T17813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.837504][T17813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.860408][T17813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1044.914948][T17813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.172337][T17813] hsr_slave_0: entered promiscuous mode [ 1045.187031][T17813] hsr_slave_1: entered promiscuous mode [ 1045.846139][ T30] audit: type=1400 audit(1785769301.140:867): avc: denied { write } for pid=17878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.051735][ T1123] bridge_slave_1: left allmulticast mode [ 1046.057722][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.084485][ T1123] bridge_slave_0: left allmulticast mode [ 1046.090328][ T1123] bridge_slave_0: left promiscuous mode [ 1046.096401][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.114354][ T30] audit: type=1400 audit(1785769301.410:868): avc: denied { write } for pid=17896 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1046.232652][ T5614] Bluetooth: hci3: command tx timeout [ 1046.526169][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.539190][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.551674][ T1123] bond0 (unregistering): Released all slaves [ 1046.588948][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1046.660453][ T1123] tipc: Left network mode [ 1046.684300][T17909] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1046.926010][T17912] syzkaller0: entered promiscuous mode [ 1046.944193][T17912] syzkaller0: entered allmulticast mode [ 1047.218082][ T1123] hsr_slave_0: left promiscuous mode [ 1047.266947][ T30] audit: type=1400 audit(1785769302.560:869): avc: denied { write } for pid=17923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.419270][ T30] audit: type=1400 audit(1785769302.720:870): avc: denied { write } for pid=17947 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1047.919847][ T1123] hsr_slave_1: left promiscuous mode [ 1047.958147][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.982308][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.993130][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3194'. [ 1048.024970][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.038445][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.088677][ T1123] veth1_macvtap: left promiscuous mode [ 1048.111103][ T1123] veth0_macvtap: left promiscuous mode [ 1048.128074][ T1123] veth1_vlan: left promiscuous mode [ 1048.138192][ T1123] veth0_vlan: left promiscuous mode [ 1048.312641][ T5614] Bluetooth: hci3: command tx timeout [ 1048.685092][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 1048.713815][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 1048.807291][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1048.945475][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1048.956874][T17972] syz_tun: entered allmulticast mode [ 1049.132671][T17977] syzkaller0: entered promiscuous mode [ 1049.158001][T17977] syzkaller0: entered allmulticast mode [ 1049.235575][T17977] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1049.551629][ T1123] IPVS: stop unused estimator thread 0... [ 1050.334965][ T30] audit: type=1400 audit(1785769305.640:871): avc: denied { write } for pid=17983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.392634][ T5614] Bluetooth: hci3: command tx timeout [ 1050.427181][T17813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1050.487526][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1050.499166][T18014] syz_tun: entered allmulticast mode [ 1050.505527][T17813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.582809][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.616963][T17813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.696508][ T30] audit: type=1400 audit(1785769305.960:872): avc: denied { write } for pid=18013 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1050.747736][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1050.812678][T17813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1051.041937][T17813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.571051][ T30] audit: type=1400 audit(1785769306.870:873): avc: denied { lock } for pid=18034 comm="syz.1.3216" path="socket:[53080]" dev="sockfs" ino=53080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1051.611312][T18033] syzkaller0: entered promiscuous mode [ 1051.626159][T18033] syzkaller0: entered allmulticast mode [ 1051.673681][T18033] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1051.820662][T17813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.900191][T17813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.947522][T11035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.954678][T11035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.017277][T11035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.024435][T11035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.079159][ T30] audit: type=1400 audit(1785769307.380:874): avc: denied { write } for pid=18030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.193148][T17813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1052.276421][T17813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1052.376094][T18059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1053.017637][ T30] audit: type=1400 audit(1785769308.320:875): avc: denied { write } for pid=18065 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.384980][ T30] audit: type=1400 audit(1785769309.690:876): avc: denied { read write } for pid=18091 comm="syz.4.3228" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1054.489733][ T30] audit: type=1400 audit(1785769309.690:877): avc: denied { open } for pid=18091 comm="syz.4.3228" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1054.662051][ T30] audit: type=1400 audit(1785769309.960:878): avc: denied { write } for pid=18078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.777987][T17813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.920308][T17813] veth0_vlan: entered promiscuous mode [ 1054.940597][T17813] veth1_vlan: entered promiscuous mode [ 1054.967500][ T30] audit: type=1400 audit(1785769310.270:879): avc: denied { write } for pid=18108 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.981661][T17813] veth0_macvtap: entered promiscuous mode [ 1055.066412][T17813] veth1_macvtap: entered promiscuous mode [ 1055.086587][T18114] overlayfs: failed to resolve './file1/file0': -2 [ 1055.119663][T17813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.136364][T17813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.200586][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.231186][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.263585][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.306886][ T1123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.348622][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.443262][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.133572][T18128] vlan4: entered promiscuous mode [ 1056.138625][T18128] dummy0: entered promiscuous mode [ 1056.254618][ T5839] IPVS: starting estimator thread 0... [ 1056.375454][ T5849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.383308][T18132] IPVS: using max 64 ests per chain, 153600 per kthread [ 1056.406657][T18134] tipc: Started in network mode [ 1056.412390][ T5849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.425844][T18134] tipc: Node identity 029ea8fe3609, cluster identity 4711 [ 1056.441932][T18134] tipc: Enabled bearer , priority 0 [ 1056.468448][T18134] tipc: Resetting bearer [ 1056.518347][T18133] tipc: Disabling bearer [ 1057.651557][T18169] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1058.384782][T11009] IPVS: starting estimator thread 0... [ 1058.627855][T18184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1059.582789][T18176] IPVS: using max 43 ests per chain, 103200 per kthread [ 1059.637622][T18184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3256'. [ 1059.697518][T12528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1059.711493][T12528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1059.719909][T12528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1059.731840][T12528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1059.739398][T12528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1059.781670][T18193] tipc: Started in network mode [ 1059.825560][T18193] tipc: Node identity 92d7b4bcf5f, cluster identity 4711 [ 1059.868558][T18193] tipc: Enabled bearer , priority 0 [ 1059.904934][T18203] tipc: Resetting bearer [ 1060.053226][T18192] tipc: Disabling bearer [ 1061.150385][T10068] syz_tun (unregistering): left allmulticast mode [ 1061.724694][T18189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.731988][T18189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.739793][T18189] bridge_slave_0: entered allmulticast mode [ 1061.747449][T18189] bridge_slave_0: entered promiscuous mode [ 1061.756918][T18189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.764166][T18189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.771630][T18189] bridge_slave_1: entered allmulticast mode [ 1061.779511][T18189] bridge_slave_1: entered promiscuous mode [ 1061.816997][T18189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.834758][T18189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.844267][T12528] Bluetooth: hci4: command tx timeout [ 1061.879069][T18189] team0: Port device team_slave_0 added [ 1061.887154][T18189] team0: Port device team_slave_1 added [ 1061.932187][T18189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.953213][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.020248][T18189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.483282][T18249] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1063.165884][ T7292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.254718][T18189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.270567][T18189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.310058][T18189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.364987][T18189] hsr_slave_0: entered promiscuous mode [ 1063.371447][T18189] hsr_slave_1: entered promiscuous mode [ 1063.378151][T18189] debugfs: 'hsr0' already exists in 'hsr' [ 1063.393567][T18189] Cannot create hsr debugfs directory [ 1063.476513][ T7292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.679012][ T7292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.759297][ T7292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.912828][T12528] Bluetooth: hci4: command tx timeout [ 1066.389598][T12528] Bluetooth: hci4: command tx timeout [ 1066.460105][ T7292] team0: Port device xfrm0 removed [ 1066.531691][ T30] audit: type=1400 audit(1785769319.831:880): avc: denied { write } for pid=18279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1066.726422][T18308] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1067.246358][ T30] audit: type=1400 audit(1785769320.551:881): avc: denied { write } for pid=18310 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1067.298419][ T7292] bond0 (unregistering): Released all slaves [ 1067.332051][ T1160] tipc: Resetting bearer [ 1067.356671][T18293] vlan2: entered promiscuous mode [ 1067.361731][T18293] dummy0: entered promiscuous mode [ 1067.377115][ T30] audit: type=1400 audit(1785769320.681:882): avc: denied { setopt } for pid=18313 comm="syz.2.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1067.417277][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1067.707352][ T7292] tipc: Disabling bearer [ 1067.904109][ T7292] tipc: Left network mode [ 1068.305743][T11009] IPVS: starting estimator thread 0... [ 1068.467760][T18338] IPVS: using max 44 ests per chain, 105600 per kthread [ 1068.482584][T12528] Bluetooth: hci4: command tx timeout [ 1069.254675][T18348] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1069.268194][T18348] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1069.735527][ T30] audit: type=1400 audit(1785769323.041:883): avc: denied { write } for pid=18340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1069.830067][ T30] audit: type=1400 audit(1785769323.131:884): avc: denied { write } for pid=18369 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.089108][T18375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.126269][T18375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.334125][ T7292] hsr_slave_0: left promiscuous mode [ 1070.343337][ T7292] hsr_slave_1: left promiscuous mode [ 1070.359406][ T7292] veth1_macvtap: left promiscuous mode [ 1070.377963][ T7292] veth0_macvtap: left promiscuous mode [ 1070.408171][ T7292] veth1_vlan: left promiscuous mode [ 1070.427196][T18382] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1070.497108][ T7292] veth0_vlan: left promiscuous mode [ 1072.371741][T18408] netlink: 'syz.2.3307': attribute type 21 has an invalid length. [ 1072.966406][T18408] netlink: 'syz.2.3307': attribute type 1 has an invalid length. [ 1073.037534][T18408] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3307'. [ 1073.101009][T18413] netlink: 'syz.1.3309': attribute type 2 has an invalid length. [ 1073.117359][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 1073.392384][T14597] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1073.491630][T18189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1074.363845][T14597] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1074.385938][T14597] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1074.441302][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1074.448548][T14597] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1074.477863][T18189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1074.485009][T14597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.508558][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1074.733689][T18418] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1074.773119][T18189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1074.850022][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.055047][T18189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1075.308358][T14597] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1075.318280][T18189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.372433][ T7292] IPVS: stop unused estimator thread 0... [ 1075.437302][T14597] usb 5-1: USB disconnect, device number 78 [ 1075.850049][ T30] audit: type=1400 audit(1785769585.216:885): avc: denied { write } for pid=18419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.960992][T18189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.009780][T18189] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.023094][ T30] audit: type=1400 audit(1785769585.386:886): avc: denied { write } for pid=18471 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.066423][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.073528][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.098334][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.105479][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.252160][T18497] binder: 18493:18497 ioctl c0306201 200000000040 returned -22 [ 1077.283917][T18497] binder: 18493:18497 ioctl c0306201 200000000640 returned -22 [ 1078.910277][ T30] audit: type=1400 audit(1785769843.301:887): avc: denied { write } for pid=18479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.003725][ T30] audit: type=1400 audit(1785769843.341:888): avc: denied { write } for pid=18519 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.132063][T18189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.267405][T18189] veth0_vlan: entered promiscuous mode [ 1079.500187][T18189] veth1_vlan: entered promiscuous mode [ 1079.656402][T18189] veth0_macvtap: entered promiscuous mode [ 1079.679967][T18189] veth1_macvtap: entered promiscuous mode [ 1079.765690][T18189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.808917][T18189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.045582][ T30] audit: type=1400 audit(1785770100.548:889): avc: denied { write } for pid=18523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.153274][ T30] audit: type=1400 audit(1785770100.638:890): avc: denied { write } for pid=18548 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.373459][T18553] binder: 18552:18553 ioctl c0306201 200000000040 returned -22 [ 1080.382872][ T5889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.404188][T18553] binder: 18552:18553 ioctl c0306201 200000000640 returned -22 [ 1080.785451][T11035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.345794][ T1041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.385594][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.407614][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.474315][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.483477][ T5889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.486771][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.706158][T18596] binder: 18595:18596 ioctl c0306201 200000000040 returned -22 [ 1082.720416][T18596] binder: 18595:18596 ioctl c0306201 200000000640 returned -22 [ 1083.893831][T18624] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1083.908276][T18624] ±ÿ: renamed from team_slave_1 (while UP) [ 1084.829403][ T30] audit: type=1400 audit(1785770617.460:891): avc: denied { ioctl } for pid=18643 comm="syz.2.3367" path="socket:[56504]" dev="sockfs" ino=56504 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1087.314953][T18665] vlan2: entered promiscuous mode [ 1087.320010][T18665] dummy0: entered promiscuous mode [ 1089.626368][ T30] audit: type=1400 audit(1785770620.255:892): avc: denied { read } for pid=18704 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1090.899157][T18714] vlan2: entered promiscuous mode [ 1090.904267][T18714] dummy0: entered promiscuous mode [ 1093.154333][T18760] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1093.167623][T18760] ±ÿ: renamed from team_slave_1 (while UP) [ 1093.465307][T18762] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1093.488020][T18762] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1094.293350][T18786] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1094.969525][ T5839] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1095.237101][ T5839] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1095.832469][ T5839] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1095.846198][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1095.858544][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.896530][T18778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1096.507055][ T5839] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1096.725357][ T5839] usb 3-1: USB disconnect, device number 86 [ 1097.512411][T18823] netlink: 'syz.0.3424': attribute type 21 has an invalid length. [ 1097.532305][T18823] netlink: 'syz.0.3424': attribute type 1 has an invalid length. [ 1097.561421][T18823] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1100.252404][T10084] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1100.538715][T10084] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1100.626291][T10084] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1100.661044][T10084] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1100.684048][T10084] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.725785][T18852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1100.755965][T10084] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1100.967941][T10084] usb 5-1: USB disconnect, device number 79 [ 1101.050040][T18869] netlink: 'syz.3.3439': attribute type 21 has an invalid length. [ 1101.061668][T18869] netlink: 'syz.3.3439': attribute type 1 has an invalid length. [ 1101.085888][T18869] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1105.411335][ T30] audit: type=1400 audit(1785770635.035:893): avc: denied { ioctl } for pid=18916 comm="syz.1.3456" path="/78/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 ioctlcmd=0x4b69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1107.352459][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 1109.960397][T18976] tipc: Enabling of bearer rejected, failed to enable media [ 1110.237000][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1112.892617][T19025] tipc: Enabling of bearer rejected, failed to enable media [ 1113.505419][T19051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1113.988772][T13726] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1114.483725][T13726] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1114.493082][T13726] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1114.505078][T13726] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1114.514431][T13726] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1114.529190][T13726] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1114.538582][T13726] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1114.564519][T13726] usb 3-1: Product: syz [ 1114.568871][T13726] usb 3-1: Manufacturer: syz [ 1114.959437][T13726] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1115.384078][T19076] tipc: Started in network mode [ 1115.405424][T19076] tipc: Node identity 86c25aa509bb, cluster identity 4711 [ 1115.449862][T19076] tipc: Enabled bearer , priority 0 [ 1115.611434][T19076] tipc: Resetting bearer [ 1115.645594][T19075] tipc: Disabling bearer [ 1116.518079][ T5715] usb 3-1: USB disconnect, device number 87 [ 1116.602734][T19096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1116.844295][T19097] binder: 19094:19097 ioctl c0306201 200000000040 returned -22 [ 1117.277254][T19113] tipc: Started in network mode [ 1117.282165][T19113] tipc: Node identity fa3fca4a4fec, cluster identity 4711 [ 1117.292997][T19113] tipc: Enabled bearer , priority 0 [ 1117.311263][T19113] tipc: Resetting bearer [ 1117.374459][T19112] tipc: Disabling bearer [ 1117.452355][ T5715] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1117.790059][ T5715] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1117.798838][ T5715] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1117.806504][ T5715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1117.817891][ T5715] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1117.834534][ T5715] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1117.843896][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1117.852181][ T5715] usb 4-1: Product: syz [ 1117.857079][ T5715] usb 4-1: Manufacturer: syz [ 1117.868765][ T5715] cdc_wdm 4-1:1.0: skipping garbage [ 1117.878531][ T5715] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1118.534627][T19131] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1118.546096][T19131] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1118.596101][T19135] binder: 19134:19135 ioctl c0306201 0 returned -14 [ 1118.606792][T19135] binder: 19134:19135 ioctl c0306201 200000000040 returned -22 [ 1118.622515][T19135] binder: 19134:19135 ioctl c0306201 200000000640 returned -22 [ 1118.777740][ T30] audit: type=1400 audit(1785770648.405:894): avc: denied { map } for pid=19140 comm="syz.1.3525" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1119.291204][T19148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1120.622985][T13726] usb 4-1: USB disconnect, device number 102 [ 1120.659985][ T30] audit: type=1400 audit(1785770650.285:895): avc: denied { setopt } for pid=19158 comm="syz.4.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1121.586311][T19189] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1121.599378][T19189] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1121.853051][T19197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1122.603318][T19201] syzkaller0: entered promiscuous mode [ 1122.629894][T19201] syzkaller0: entered allmulticast mode [ 1122.656918][T19201] tipc: Enabled bearer , priority 0 [ 1122.679998][T19201] tipc: Resetting bearer [ 1122.701510][T19200] tipc: Resetting bearer [ 1122.749124][T19200] tipc: Disabling bearer [ 1122.852266][ T5823] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1123.058880][ T5823] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1123.099496][ T5823] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1123.148337][ T5823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1123.196174][ T5823] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.283561][ T5823] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1123.331407][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1123.391156][ T5823] usb 4-1: Product: syz [ 1123.418958][ T5823] usb 4-1: Manufacturer: syz [ 1124.256619][ T5823] cdc_wdm 4-1:1.0: skipping garbage [ 1124.303076][ T5823] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1125.539182][T19238] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1125.575000][T19238] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1125.638569][ T5715] usb 4-1: USB disconnect, device number 103 [ 1125.776377][T19249] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1126.866758][T19267] binder: 19265:19267 ioctl c0306201 200000000040 returned -22 [ 1126.904258][T19267] binder: 19265:19267 ioctl c0306201 200000000640 returned -22 [ 1128.182380][ T5715] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1128.284157][ T5708] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1128.345275][ T5715] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1128.357897][ T5715] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 1128.366031][ T5715] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1128.376791][ T5715] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1128.397504][ T5715] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1128.407121][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1128.416406][T19287] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1128.431152][T19287] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1128.440772][ T5715] usb 2-1: Product: syz [ 1128.445756][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 1128.453959][ T5715] usb 2-1: Manufacturer: syz [ 1128.461844][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1128.473415][ T5708] usb 3-1: config 4 has an invalid interface number: 226 but max is 0 [ 1128.483970][ T5715] cdc_wdm 2-1:1.0: skipping garbage [ 1128.489822][ T5708] usb 3-1: config 4 has no interface number 0 [ 1128.499123][ T5715] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1128.508010][ T5708] usb 3-1: config 4 interface 226 has no altsetting 0 [ 1128.523511][ T5708] usb 3-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=31.01 [ 1128.544133][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.554184][ T5708] usb 3-1: Product: syz [ 1128.558966][ T5708] usb 3-1: Manufacturer: syz [ 1128.566148][ T5708] usb 3-1: SerialNumber: syz [ 1128.811201][ T5708] uvcvideo 3-1:4.226: Found multiple Units with ID 1 [ 1128.825092][ T5708] uvcvideo 3-1:4.226: Found UVC 0.00 device syz (05a9:7670) [ 1128.845483][ T5708] uvcvideo 3-1:4.226: No valid video chain found. [ 1128.856506][ T5708] usb 3-1: USB disconnect, device number 88 [ 1128.962301][T19294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.987252][T19294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.046973][T19296] binder: 19295:19296 ioctl c0306201 200000000040 returned -22 [ 1129.055324][T19296] binder: 19295:19296 ioctl c0306201 200000000640 returned -22 [ 1129.270057][ T30] audit: type=1400 audit(1785770658.835:896): avc: denied { read } for pid=19297 comm="syz.4.3577" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1130.113793][T19318] binder: 19317:19318 ioctl 40046210 0 returned -14 [ 1130.916725][ T5708] usb 2-1: USB disconnect, device number 81 [ 1131.010264][T19321] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1131.054353][T19321] ±ÿ: renamed from team_slave_1 (while UP) [ 1131.897435][T19338] binder: 19337:19338 ioctl c0306201 200000000040 returned -22 [ 1131.933084][T19338] binder: 19337:19338 ioctl c0306201 200000000640 returned -22 [ 1132.143645][T19347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1132.158351][T19347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1132.813662][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 1135.058327][ T30] audit: type=1400 audit(1785770664.685:897): avc: denied { create } for pid=19384 comm="syz.3.3602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1135.969251][T19396] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1135.984069][T19396] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1136.088721][T19398] syzkaller0: entered promiscuous mode [ 1136.102501][T19398] syzkaller0: entered allmulticast mode [ 1136.129222][T19398] tipc: Started in network mode [ 1136.143931][T19398] tipc: Node identity 8adf1d294e26, cluster identity 4711 [ 1136.161456][T19398] tipc: Enabled bearer , priority 0 [ 1136.186961][T19398] tipc: Resetting bearer [ 1136.207530][T19397] tipc: Resetting bearer [ 1136.260814][T19397] tipc: Disabling bearer [ 1136.287464][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3607'. [ 1136.342771][ T5708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1137.553008][T11009] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1138.782506][T19419] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1139.234159][ T30] audit: type=1400 audit(1785770668.865:898): avc: denied { read } for pid=19420 comm="syz.0.3614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1140.194245][ T30] audit: type=1400 audit(1785770669.815:899): avc: denied { read } for pid=19448 comm="syz.3.3623" path="socket:[59128]" dev="sockfs" ino=59128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1140.702586][T19455] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3625'. [ 1140.857329][T19457] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1140.876352][T19457] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1143.525704][T19479] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1143.766368][T19487] input: syz1 as /devices/virtual/input/input33 [ 1144.032172][T19490] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3637'. [ 1144.132424][T19500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1145.415585][ T5839] IPVS: starting estimator thread 0... [ 1145.604724][T19512] IPVS: using max 42 ests per chain, 100800 per kthread [ 1145.702104][T19522] hub 8-0:1.0: USB hub found [ 1145.709616][T19522] hub 8-0:1.0: 1 port detected [ 1146.482730][T19522] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1147.061126][T19542] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1147.934508][T19546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1148.018702][T19536] tipc: New replicast peer: 255.255.255.255 [ 1148.040223][T19536] tipc: Enabled bearer , priority 10 [ 1148.520165][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 1149.167281][ T5715] tipc: Node number set to 3050555978 [ 1151.193086][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1151.601479][T19586] vlan2: entered promiscuous mode [ 1151.928576][T19593] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1152.477708][ T30] audit: type=1326 audit(1785771193.242:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1152.525749][ T30] audit: type=1326 audit(1785771193.272:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1152.554112][ T30] audit: type=1326 audit(1785771193.272:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1152.642348][ T30] audit: type=1326 audit(1785771193.272:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1152.725001][T19600] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1153.734566][ T30] audit: type=1326 audit(1785771193.352:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1153.942903][ T30] audit: type=1326 audit(1785771193.352:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1153.978051][ T30] audit: type=1326 audit(1785771193.352:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1154.067221][ T30] audit: type=1326 audit(1785771193.352:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1154.158585][ T30] audit: type=1326 audit(1785771193.352:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1154.296600][ T30] audit: type=1326 audit(1785771193.352:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.1.3669" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88f3d9e019 code=0x7ffc0000 [ 1155.687246][T19630] vlan2: entered promiscuous mode [ 1156.419833][T11009] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1156.454666][T19650] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1156.576533][T11009] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1156.593192][T19654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3685'. [ 1156.602946][T11009] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1156.804455][T11009] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.857453][T11009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.893128][T11009] usb 2-1: Product: syz [ 1156.915374][T11009] usb 2-1: Manufacturer: syz [ 1156.935078][T11009] usb 2-1: SerialNumber: syz [ 1156.961156][T19636] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1157.158766][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 1157.167807][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 1157.193941][T11009] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1157.223227][T11009] cdc_ncm 2-1:1.0: bind() failure [ 1157.243222][T11009] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1157.251590][T11009] cdc_ncm 2-1:1.1: bind() failure [ 1157.265873][T11009] usb 2-1: USB disconnect, device number 82 [ 1160.557958][T19744] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3715'. [ 1160.652375][T19745] syzkaller0: entered promiscuous mode [ 1160.657896][T19745] syzkaller0: entered allmulticast mode [ 1162.251032][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1163.303374][T19787] netlink: 'syz.3.3729': attribute type 29 has an invalid length. [ 1163.370188][T19790] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3730'. [ 1164.293062][T19751] syzkaller0: entered promiscuous mode [ 1164.298570][T19751] syzkaller0: entered allmulticast mode [ 1164.305215][T19753] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1164.332606][T19765] vlan2: entered promiscuous mode [ 1164.337674][T19765] dummy0: entered promiscuous mode [ 1164.655628][T19805] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1164.670687][T19805] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1164.849789][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3742'. [ 1164.941291][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1164.941306][ T30] audit: type=1400 audit(1785771203.695:928): avc: denied { name_bind } for pid=19825 comm="syz.2.3743" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1165.012842][ T30] audit: type=1400 audit(1785771203.725:929): avc: denied { name_connect } for pid=19825 comm="syz.2.3743" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1165.093019][T19826] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1165.190322][T19833] syzkaller0: entered promiscuous mode [ 1165.196368][T19833] syzkaller0: entered allmulticast mode [ 1165.205525][T19833] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1165.964768][T19837] vlan2: entered promiscuous mode [ 1166.855987][T19867] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1166.979122][T19876] syzkaller0: entered promiscuous mode [ 1166.984808][T19876] syzkaller0: entered allmulticast mode [ 1166.993624][T19876] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1167.131092][T19878] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1167.142104][T19878] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1167.858257][T19882] vlan2: entered promiscuous mode [ 1168.154752][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'. [ 1168.165862][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3766'. [ 1168.227799][T19902] netlink: 'syz.4.3768': attribute type 46 has an invalid length. [ 1168.247811][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3768'. [ 1168.340847][T19908] syzkaller0: entered promiscuous mode [ 1168.348128][T19908] syzkaller0: entered allmulticast mode [ 1168.380065][T19908] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1168.562482][T19915] tipc: Enabled bearer , priority 0 [ 1168.573785][T19915] tipc: Resetting bearer [ 1168.690446][T12528] Bluetooth: hci3: command 0x0406 tx timeout [ 1168.741663][T19914] tipc: Disabling bearer [ 1169.283869][T19928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1169.303955][T19928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 1169.497655][T19933] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1169.509357][T19933] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1169.592964][ T5614] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1169.741244][T19946] syzkaller0: entered promiscuous mode [ 1169.762467][T19946] syzkaller0: entered allmulticast mode [ 1170.030501][T19957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'. [ 1171.676586][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.724265][T19999] syzkaller0: entered promiscuous mode [ 1171.730240][T19999] syzkaller0: entered allmulticast mode [ 1171.889451][T20006] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1173.746899][T20050] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1174.887327][ T30] audit: type=1400 audit(1785771211.651:930): avc: denied { relabelfrom } for pid=20073 comm="syz.2.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1174.907968][ T30] audit: type=1400 audit(1785771211.661:931): avc: denied { relabelto } for pid=20073 comm="syz.2.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1174.969878][T20079] syzkaller0: create flow: hash 3679174646 index 2 [ 1175.005935][ T12] syzkaller0: tun_net_xmit 76 [ 1175.026407][ T12] syzkaller0: tun_net_xmit 48 [ 1175.036736][T15955] syzkaller0: tun_net_xmit 76 [ 1175.510314][T15955] syzkaller0: tun_net_xmit 76 [ 1175.847553][T15955] syzkaller0: tun_net_xmit 76 [ 1175.956505][T20079] syzkaller0: delete flow: hash 3679174646 index 2 [ 1176.620350][T20116] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3840'. [ 1176.998624][T20127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1177.506287][T20138] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1178.213669][T13726] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1178.373718][T13726] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1178.390850][T13726] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1178.411376][T13726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1178.421500][T13726] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1178.442367][T13726] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1178.468104][T13726] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1178.476624][T13726] usb 2-1: Product: syz [ 1178.480979][T13726] usb 2-1: Manufacturer: syz [ 1178.491208][T13726] cdc_wdm 2-1:1.0: skipping garbage [ 1178.496745][T13726] cdc_wdm 2-1:1.0: skipping garbage [ 1178.502055][T13726] cdc_wdm 2-1:1.0: skipping garbage [ 1178.507662][T13726] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1179.763482][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1179.898724][T20169] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3860'. [ 1181.066142][T14597] usb 2-1: USB disconnect, device number 83 [ 1181.236467][T20198] netlink: 62 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1181.278540][T20202] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3873'. [ 1182.422986][ T30] audit: type=1400 audit(1785771219.181:932): avc: denied { setopt } for pid=20228 comm="syz.4.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1183.779361][T11009] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1184.082254][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 1184.135809][T20273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3902'. [ 1184.192226][T11009] usb 3-1: device descriptor read/64, error -71 [ 1184.443096][T11009] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1184.582203][T11009] usb 3-1: device descriptor read/64, error -71 [ 1184.702922][T11009] usb usb3-port1: attempt power cycle [ 1185.053634][T11009] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1185.092985][T11009] usb 3-1: device descriptor read/8, error -71 [ 1185.493122][T11009] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1185.533552][T11009] usb 3-1: device descriptor read/8, error -71 [ 1185.664404][T11009] usb usb3-port1: unable to enumerate USB device [ 1185.917471][ T5614] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1186.306960][ T30] audit: type=1800 audit(1785771223.071:933): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3913" name="id" dev="configfs" ino=62056 res=0 errno=0 [ 1186.344470][ T30] audit: type=1400 audit(1785771223.111:934): avc: denied { write } for pid=20304 comm="syz.4.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1187.821276][ T30] audit: type=1800 audit(1785771224.581:935): pid=20333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3928" name="id" dev="configfs" ino=62531 res=0 errno=0 [ 1187.822562][ T5614] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 1187.939317][T20336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1187.981388][ T30] audit: type=1400 audit(1785771224.741:936): avc: denied { bind } for pid=20335 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1188.054927][ T30] audit: type=1400 audit(1785771224.811:937): avc: denied { bind } for pid=20339 comm="syz.2.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1188.155136][T20349] netlink: 'syz.4.3934': attribute type 1 has an invalid length. [ 1188.184691][T20349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3934'. [ 1188.204549][T20349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3934'. [ 1188.227034][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3934'. [ 1188.263856][T14597] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1188.393852][ T5614] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 1188.435217][T14597] usb 2-1: device descriptor read/64, error -71 [ 1188.554377][ T30] audit: type=1800 audit(1785771225.291:938): pid=20362 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3939" name="id" dev="configfs" ino=62606 res=0 errno=0 [ 1188.724272][T14597] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1188.892816][T14597] usb 2-1: device descriptor read/64, error -71 [ 1189.004156][T14597] usb usb2-port1: attempt power cycle [ 1189.382222][T14597] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1189.401508][T20376] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3944'. [ 1189.425780][T14597] usb 2-1: device descriptor read/8, error -71 [ 1189.733084][T14597] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1189.792769][T14597] usb 2-1: device descriptor read/8, error -71 [ 1189.809347][ T5614] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 1189.827706][T20389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1189.828704][ T30] audit: type=1800 audit(1785771226.591:939): pid=20393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3951" name="id" dev="configfs" ino=62682 res=0 errno=0 [ 1189.943166][T14597] usb usb2-port1: unable to enumerate USB device [ 1190.347314][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'. [ 1190.355583][T20408] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1190.365735][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'. [ 1191.202260][ T5614] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 1191.248526][ T30] audit: type=1800 audit(1785771228.011:940): pid=20427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3965" name="id" dev="configfs" ino=62773 res=0 errno=0 [ 1191.938646][T20441] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3969'. [ 1192.224683][T20455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.242907][T20453] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1192.253124][T20455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.332263][T15955] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1192.340372][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1192.349501][T20457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 1192.478102][ T5614] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1192.486841][T15955] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1192.498072][T15955] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1192.504008][ T30] audit: type=1800 audit(1785771229.271:941): pid=20461 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3978" name="id" dev="configfs" ino=62836 res=0 errno=0 [ 1192.508778][T15955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1192.542853][T15955] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1192.554921][T15955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1192.566657][T15955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1192.580774][T15955] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1192.590463][T15955] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1192.598717][T15955] usb 3-1: Product: syz [ 1192.603171][T15955] usb 3-1: Manufacturer: syz [ 1192.620734][T15955] cdc_wdm 3-1:1.0: skipping garbage [ 1192.632282][T15955] cdc_wdm 3-1:1.0: skipping garbage [ 1192.645036][T15955] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1193.913607][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 1193.936607][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 1193.952684][ T5614] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1193.961835][ T30] audit: type=1800 audit(1785771230.721:942): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3989" name="id" dev="configfs" ino=62896 res=0 errno=0 [ 1194.228670][T20495] syzkaller0: entered promiscuous mode [ 1194.240869][T20495] syzkaller0: entered allmulticast mode [ 1194.252574][T20495] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1194.870726][ T5614] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1194.883648][ T30] audit: type=1800 audit(1785771231.651:943): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4000" name="id" dev="configfs" ino=62363 res=0 errno=0 [ 1195.089979][ T5839] usb 3-1: USB disconnect, device number 93 [ 1195.344381][T20534] syzkaller0: entered promiscuous mode [ 1195.372238][T20534] syzkaller0: entered allmulticast mode [ 1195.391692][T20534] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1195.402402][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1195.430983][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1195.449586][ T30] audit: type=1400 audit(1785771232.211:944): avc: denied { mount } for pid=20539 comm="syz.0.4010" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1195.505480][ T30] audit: type=1400 audit(1785771232.221:945): avc: denied { search } for pid=20539 comm="syz.0.4010" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1195.527970][ T5614] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1195.545494][ T30] audit: type=1400 audit(1785771232.221:946): avc: denied { write } for pid=20539 comm="syz.0.4010" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1195.569223][ T30] audit: type=1400 audit(1785771232.221:947): avc: denied { open } for pid=20539 comm="syz.0.4010" path="/144/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 1195.593897][ T30] audit: type=1800 audit(1785771232.291:948): pid=20544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4012" name="id" dev="configfs" ino=62430 res=0 errno=0 [ 1195.665090][ T30] audit: type=1400 audit(1785771232.421:949): avc: denied { mount } for pid=20539 comm="syz.0.4010" name="/" dev="rpc_pipefs" ino=62436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1195.858796][T20540] NFSD: Failed to start, no listeners configured. [ 1196.904105][ T5614] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 1196.954399][T20579] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1197.756927][ T30] audit: type=1400 audit(1785771234.521:950): avc: denied { unmount } for pid=17813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1197.794221][T20594] syzkaller0: entered promiscuous mode [ 1197.821294][T20594] syzkaller0: entered allmulticast mode [ 1197.845978][ T30] audit: type=1400 audit(1785771234.581:951): avc: denied { unmount } for pid=17813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1197.882788][T20594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1198.093184][ T5614] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1198.207730][T20617] syzkaller0: entered promiscuous mode [ 1198.228911][T20617] syzkaller0: entered allmulticast mode [ 1198.256966][T14597] libceph: mon0 (2)127.0.0.1:20000 socket closed (con state V2_BANNER_PAYLOAD) [ 1198.266336][T20587] ceph: No mds server is up or the cluster is laggy [ 1198.752921][T14597] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 1198.991823][T20643] syzkaller0: entered promiscuous mode [ 1199.006501][T20643] syzkaller0: entered allmulticast mode [ 1199.037940][T20643] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1199.236669][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1199.236685][ T30] audit: type=1400 audit(1785771236.001:954): avc: denied { connect } for pid=20650 comm="syz.2.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1199.322579][ T30] audit: type=1400 audit(1785771236.091:955): avc: denied { map } for pid=20653 comm="syz.3.4050" path="socket:[63663]" dev="sockfs" ino=63663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1199.452301][ T1123] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.732272][T20681] netlink: 'syz.2.4060': attribute type 1 has an invalid length. [ 1201.282738][ T5839] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1201.479856][T20708] tipc: Enabling of bearer rejected, failed to enable media [ 1201.516799][T20708] syzkaller0: entered promiscuous mode [ 1201.532424][T20708] syzkaller0: entered allmulticast mode [ 1201.539105][ T5839] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1201.547797][ T5839] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1201.569156][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1201.579908][T20708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1201.589592][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1201.613091][ T5839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1201.627563][ T5839] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1201.640142][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1201.648203][ T5839] usb 3-1: Product: syz [ 1201.652477][ T5839] usb 3-1: Manufacturer: syz [ 1201.669401][ T5839] cdc_wdm 3-1:1.0: skipping garbage [ 1201.679984][ T5839] cdc_wdm 3-1:1.0: skipping garbage [ 1201.688587][ T5839] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1201.694912][ T5839] cdc_wdm 3-1:1.0: Unknown control protocol [ 1202.251599][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 4 bytes [ 1203.021614][T20739] ip_tables: iptables: counters copy to user failed while replacing table [ 1203.213154][T20746] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1203.349734][T20756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20756 comm=syz.1.4088 [ 1203.365736][T20756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20756 comm=syz.1.4088 [ 1203.380031][T20756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20756 comm=syz.1.4088 [ 1203.397053][ T30] audit: type=1400 audit(1785771240.161:956): avc: denied { write } for pid=20753 comm="syz.1.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1203.471846][ T30] audit: type=1400 audit(1785771240.231:957): avc: denied { connect } for pid=20761 comm="syz.1.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1203.492615][ T5823] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1203.493005][ T30] audit: type=1400 audit(1785771240.261:958): avc: denied { write } for pid=20761 comm="syz.1.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1203.774756][ T5823] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.848813][ T5823] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1203.928995][ T5823] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1203.976380][ T5823] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.004933][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.064998][ T5823] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1204.100193][T11009] usb 3-1: USB disconnect, device number 94 [ 1204.213724][ T5823] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1204.285536][ T5823] usb 4-1: USB disconnect, device number 104 [ 1204.309377][T20773] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1204.369472][T20773] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1204.407770][T20773] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1204.503256][T20773] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1204.566703][T20773] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1204.766623][T20783] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1205.722749][T20808] bridge0: port 3(erspan0) entered blocking state [ 1205.730557][T20808] bridge0: port 3(erspan0) entered disabled state [ 1205.752740][T20808] erspan0: entered allmulticast mode [ 1205.781353][T20808] erspan0: entered promiscuous mode [ 1205.801560][T20808] bridge0: port 3(erspan0) entered blocking state [ 1205.809270][T20808] bridge0: port 3(erspan0) entered forwarding state [ 1205.832898][T20814] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1206.094933][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1206.457876][ T5724] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1206.705812][T20841] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4123'. [ 1206.784572][ T5724] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.795174][ T5724] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1206.811701][ T5724] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1206.826439][ T5724] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1206.841548][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.890551][ T5724] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.127160][ T5724] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1207.138616][ T5724] usb 4-1: USB disconnect, device number 105 [ 1207.791679][T20867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1207.995798][T20870] FAULT_INJECTION: forcing a failure. [ 1207.995798][T20870] name failslab, interval 1, probability 100, space 0, times 1 [ 1208.003343][T20860] FAULT_INJECTION: forcing a failure. [ 1208.003343][T20860] name failslab, interval 1, probability 100, space 0, times 1 [ 1208.010117][T16564] FAULT_INJECTION: forcing a failure. [ 1208.010117][T16564] name failslab, interval 1, probability 100, space 0, times 1 [ 1208.021469][T20870] CPU: 1 UID: 0 PID: 20870 Comm: syz.1.4133 Not tainted syzkaller #0 PREEMPT(full) [ 1208.021492][T20870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1208.021503][T20870] Call Trace: [ 1208.021509][T20870] [ 1208.021516][T20870] dump_stack_lvl+0x100/0x190 [ 1208.021541][T20870] should_fail_ex.cold+0x5/0xa [ 1208.021564][T20870] should_failslab+0xc2/0x120 [ 1208.021588][T20870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1208.021608][T20870] ? do_getname+0x35/0x390 [ 1208.021634][T20870] do_getname+0x35/0x390 [ 1208.021656][T20870] do_sys_openat2+0xc7/0x1e0 [ 1208.021677][T20870] ? __pfx_do_sys_openat2+0x10/0x10 [ 1208.021698][T20870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1208.021726][T20870] __x64_sys_openat+0x12d/0x210 [ 1208.021748][T20870] ? __pfx___x64_sys_openat+0x10/0x10 [ 1208.021767][T20870] ? ksys_write+0x1ac/0x250 [ 1208.021798][T20870] do_syscall_64+0x115/0x870 [ 1208.021819][T20870] ? clear_bhb_loop+0x40/0x90 [ 1208.021841][T20870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.021859][T20870] RIP: 0033:0x7f88f3d9e019 [ 1208.021875][T20870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.021890][T20870] RSP: 002b:00007f88f4c48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1208.021907][T20870] RAX: ffffffffffffffda RBX: 00007f88f4025fa0 RCX: 00007f88f3d9e019 [ 1208.021918][T20870] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1208.021929][T20870] RBP: 00007f88f3e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1208.021940][T20870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.021951][T20870] R13: 00007f88f4026038 R14: 00007f88f4025fa0 R15: 00007ffd2025c5e8 [ 1208.021974][T20870] [ 1208.037989][T20860] CPU: 1 UID: 0 PID: 20860 Comm: syz.2.4130 Not tainted syzkaller #0 PREEMPT(full) [ 1208.038012][T20860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1208.038021][T20860] Call Trace: [ 1208.038028][T20860] [ 1208.038034][T20860] dump_stack_lvl+0x100/0x190 [ 1208.038059][T20860] should_fail_ex.cold+0x5/0xa [ 1208.038081][T20860] should_failslab+0xc2/0x120 [ 1208.038102][T20860] __kmalloc_cache_noprof+0x91/0x6c0 [ 1208.038129][T20860] ? io_uring_setup.cold+0x6c/0x1cae [ 1208.038156][T20860] io_uring_setup.cold+0x6c/0x1cae [ 1208.038184][T20860] ? __pfx_io_uring_setup+0x10/0x10 [ 1208.038207][T20860] ? find_held_lock+0x2b/0x80 [ 1208.038222][T20860] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1208.038241][T20860] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1208.038273][T20860] ? xfd_validate_state+0x129/0x190 [ 1208.038301][T20860] __x64_sys_io_uring_setup+0xc2/0x170 [ 1208.038326][T20860] do_syscall_64+0x115/0x870 [ 1208.038345][T20860] ? clear_bhb_loop+0x40/0x90 [ 1208.038365][T20860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.038382][T20860] RIP: 0033:0x7f5d08f9e019 [ 1208.038402][T20860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.038417][T20860] RSP: 002b:00007f5d09ec1ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1208.038435][T20860] RAX: ffffffffffffffda RBX: 0000200000000648 RCX: 00007f5d08f9e019 [ 1208.038446][T20860] RDX: 00002000000006c8 RSI: 0000200000000648 RDI: 0000000000000e26 [ 1208.038456][T20860] RBP: 0000200000000640 R08: 0000000000000008 R09: 0000000000000000 [ 1208.038465][T20860] R10: 00002000000006d0 R11: 0000000000000206 R12: 00002000000006c8 [ 1208.038476][T20860] R13: 00002000000006d0 R14: 00007f5d09ec1fd8 R15: 0000000000000002 [ 1208.038497][T20860] [ 1208.401329][T16564] CPU: 0 UID: 0 PID: 16564 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1208.401353][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1208.401363][T16564] Call Trace: [ 1208.401369][T16564] [ 1208.401376][T16564] dump_stack_lvl+0x100/0x190 [ 1208.401404][T16564] should_fail_ex.cold+0x5/0xa [ 1208.401427][T16564] should_failslab+0xc2/0x120 [ 1208.401452][T16564] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1208.401475][T16564] ? ptlock_alloc+0x1f/0x70 [ 1208.401507][T16564] ptlock_alloc+0x1f/0x70 [ 1208.401534][T16564] pte_alloc_one+0x82/0x3d0 [ 1208.401555][T16564] __pte_alloc+0x6d/0x3e0 [ 1208.401577][T16564] ? __pfx___pte_alloc+0x10/0x10 [ 1208.401598][T16564] ? __pfx___might_resched+0x10/0x10 [ 1208.401619][T16564] ? copy_page_range+0x1c4a/0x5b20 [ 1208.401651][T16564] copy_page_range+0x3dd8/0x5b20 [ 1208.401704][T16564] ? mas_wr_store_entry+0xa1/0x1e80 [ 1208.401732][T16564] ? __pfx_copy_page_range+0x10/0x10 [ 1208.401769][T16564] ? __pfx___might_resched+0x10/0x10 [ 1208.401794][T16564] ? dup_mmap+0xcfe/0x21b0 [ 1208.401818][T16564] ? down_write+0x146/0x1f0 [ 1208.401845][T16564] ? up_write+0x2e5/0x5c0 [ 1208.401873][T16564] dup_mmap+0xd44/0x21b0 [ 1208.401913][T16564] ? __pfx_dup_mmap+0x10/0x10 [ 1208.401937][T16564] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1208.401963][T16564] ? __lock_acquire+0x49f/0x1a40 [ 1208.401983][T16564] ? find_held_lock+0x2b/0x80 [ 1208.401998][T16564] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1208.402041][T16564] copy_process+0x4588/0x8030 [ 1208.402081][T16564] ? __pfx_copy_process+0x10/0x10 [ 1208.402106][T16564] ? do_raw_spin_lock+0x128/0x260 [ 1208.402142][T16564] kernel_clone+0x176/0x9d0 [ 1208.402167][T16564] ? __pfx_kernel_clone+0x10/0x10 [ 1208.402198][T16564] ? find_held_lock+0x2b/0x80 [ 1208.402213][T16564] ? __might_fault+0xc5/0x140 [ 1208.402233][T16564] __do_sys_clone+0xd9/0x120 [ 1208.402257][T16564] ? __pfx___do_sys_clone+0x10/0x10 [ 1208.402303][T16564] do_syscall_64+0x115/0x870 [ 1208.402323][T16564] ? clear_bhb_loop+0x40/0x90 [ 1208.402345][T16564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.402364][T16564] RIP: 0033:0x7f34d09c6a92 [ 1208.402379][T16564] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1208.402395][T16564] RSP: 002b:00007ffe696662e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1208.402412][T16564] RAX: ffffffffffffffda RBX: 00007ffe696662e0 RCX: 00007f34d09c6a92 [ 1208.402423][T16564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1208.402434][T16564] RBP: 00007ffe6966646c R08: 0000000000000000 R09: 0000000000000001 [ 1208.402445][T16564] R10: 0000555588bc37d0 R11: 0000000000000246 R12: 0000000000000001 [ 1208.402456][T16564] R13: 00000000000927c0 R14: 0000000000126e75 R15: 00007ffe696664c0 [ 1208.402480][T16564] [ 1208.717479][T20872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1208.737284][T20874] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4136'. [ 1208.769062][T20872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1209.103386][T16564] syz_tun (unregistering): left allmulticast mode [ 1209.721052][T20899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.736750][T20899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.819533][T20904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1210.120321][T20912] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4152'. [ 1210.282846][T12528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1210.300205][T12528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1210.309384][T12528] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1210.319542][T12528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1210.327059][T12528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1210.341933][T20925] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1210.363160][T20925] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1210.375973][T20925] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1210.393581][T20925] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1210.414076][T20925] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1210.425033][T20925] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1210.434758][T20925] ksmbd: Unknown IPC event: 3, ignore. [ 1210.442912][T20925] nbd: must specify a device to reconfigure [ 1210.668404][T20941] bridge0: port 3(gretap0) entered blocking state [ 1210.679872][T20941] bridge0: port 3(gretap0) entered disabled state [ 1210.689422][T20941] gretap0: entered allmulticast mode [ 1210.696510][T20941] gretap0: entered promiscuous mode [ 1210.703201][T20941] bridge0: port 3(gretap0) entered blocking state [ 1210.709723][T20941] bridge0: port 3(gretap0) entered forwarding state [ 1210.802194][T13726] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1210.964654][T13726] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1210.984649][T13726] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1211.014750][T13726] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1211.051674][T13726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1211.079842][T13726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1211.110371][T13726] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1211.129958][T13726] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1211.158980][T13726] usb 4-1: Product: syz [ 1211.172290][T13726] usb 4-1: Manufacturer: syz [ 1211.188113][T13726] cdc_wdm 4-1:1.0: skipping garbage [ 1211.201744][T13726] cdc_wdm 4-1:1.0: skipping garbage [ 1211.338138][T13726] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1211.344108][T13726] cdc_wdm 4-1:1.0: Unknown control protocol [ 1211.396741][T20920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.404011][T20920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.411186][T20920] bridge_slave_0: entered allmulticast mode [ 1211.419201][T20920] bridge_slave_0: entered promiscuous mode [ 1211.427395][T20920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.434894][T20920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.442059][T20920] bridge_slave_1: entered allmulticast mode [ 1211.450927][T20920] bridge_slave_1: entered promiscuous mode [ 1211.472066][T20920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.483531][T20920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.510210][T20920] team0: Port device team_slave_0 added [ 1211.521665][T20920] team0: Port device team_slave_1 added [ 1211.597651][T20974] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1211.702785][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 6 bytes [ 1211.708204][T20920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.720059][T20920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.747148][T20920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.759128][T20920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.766646][T20920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.793219][T20920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.833973][T20920] hsr_slave_0: entered promiscuous mode [ 1211.840292][T20920] hsr_slave_1: entered promiscuous mode [ 1211.846544][T20920] debugfs: 'hsr0' already exists in 'hsr' [ 1211.852607][T20920] Cannot create hsr debugfs directory [ 1211.951529][T20977] FAULT_INJECTION: forcing a failure. [ 1211.951529][T20977] name failslab, interval 1, probability 100, space 0, times 10 [ 1211.960441][ T10] FAULT_INJECTION: forcing a failure. [ 1211.960441][ T10] name failslab, interval 1, probability 100, space 0, times 10 [ 1211.966323][T20977] CPU: 1 UID: 0 PID: 20977 Comm: syz.0.4171 Not tainted syzkaller #0 PREEMPT(full) [ 1211.966346][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1211.966357][T20977] Call Trace: [ 1211.966363][T20977] [ 1211.966371][T20977] dump_stack_lvl+0x100/0x190 [ 1211.966395][T20977] should_fail_ex.cold+0x5/0xa [ 1211.966420][T20977] should_failslab+0xc2/0x120 [ 1211.966443][T20977] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1211.966466][T20977] ? sock_alloc_inode+0x26/0x2c0 [ 1211.966492][T20977] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1211.966516][T20977] sock_alloc_inode+0x26/0x2c0 [ 1211.966540][T20977] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1211.966564][T20977] alloc_inode+0x68/0x250 [ 1211.966586][T20977] sock_alloc+0x44/0x280 [ 1211.966606][T20977] ? security_socket_create+0x7f/0x250 [ 1211.966631][T20977] __sock_create+0xc2/0x860 [ 1211.966651][T20977] __sys_socket+0x14d/0x260 [ 1211.966668][T20977] ? __pfx___sys_socket+0x10/0x10 [ 1211.966691][T20977] __x64_sys_socket+0x72/0xb0 [ 1211.966707][T20977] ? lockdep_hardirqs_on+0x78/0x100 [ 1211.966727][T20977] do_syscall_64+0x115/0x870 [ 1211.966746][T20977] ? clear_bhb_loop+0x40/0x90 [ 1211.966767][T20977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.966783][T20977] RIP: 0033:0x7fda28d9e019 [ 1211.966797][T20977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.966812][T20977] RSP: 002b:00007fda29b90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1211.966829][T20977] RAX: ffffffffffffffda RBX: 00007fda29025fa0 RCX: 00007fda28d9e019 [ 1211.966842][T20977] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1211.966853][T20977] RBP: 00007fda28e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1211.966864][T20977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.966875][T20977] R13: 00007fda29026038 R14: 00007fda29025fa0 R15: 00007fff655b7758 [ 1211.966903][T20977] [ 1211.966928][T20977] socket: no more sockets [ 1211.977876][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1211.977897][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1211.977908][ T10] Workqueue: events vidtv_mux_tick [ 1211.977933][ T10] Call Trace: [ 1211.977940][ T10] [ 1211.977946][ T10] dump_stack_lvl+0x100/0x190 [ 1211.977967][ T10] should_fail_ex.cold+0x5/0xa [ 1211.977988][ T10] should_failslab+0xc2/0x120 [ 1211.978009][ T10] __kmalloc_cache_noprof+0x91/0x6c0 [ 1211.978035][ T10] ? vidtv_s302m_encode+0x1c3/0x1860 [ 1211.978059][ T10] vidtv_s302m_encode+0x1c3/0x1860 [ 1211.978078][ T10] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1211.978105][ T10] ? vidtv_memset+0x50/0x90 [ 1211.978122][ T10] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1211.978140][ T10] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1211.978164][ T10] ? __asan_memset+0x23/0x50 [ 1211.978182][ T10] vidtv_mux_tick+0x4e4/0x1460 [ 1211.978219][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1211.978242][ T10] ? __lock_acquire+0x49f/0x1a40 [ 1211.978266][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 1211.978295][ T10] ? rcu_is_watching+0x12/0xc0 [ 1211.978322][ T10] process_one_work+0xa23/0x1940 [ 1211.978349][ T10] ? __pfx_process_one_work+0x10/0x10 [ 1211.978372][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1211.978416][ T10] worker_thread+0x5ef/0xe50 [ 1211.978441][ T10] ? kthread+0x13a/0x450 [ 1211.978456][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1211.978472][ T10] kthread+0x370/0x450 [ 1211.978486][ T10] ? __pfx_kthread+0x10/0x10 [ 1211.978503][ T10] ret_from_fork+0x72b/0xd50 [ 1211.978526][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1211.978548][ T10] ? __switch_to+0x800/0x10f0 [ 1211.978564][ T10] ? __pfx_kthread+0x10/0x10 [ 1211.978581][ T10] ret_from_fork_asm+0x1a/0x30 [ 1211.978614][ T10] [ 1211.978639][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1211.987392][ T5889] FAULT_INJECTION: forcing a failure. [ 1211.987392][ T5889] name failslab, interval 1, probability 100, space 0, times 6 [ 1211.997201][ T10] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1211.997218][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 1212.000501][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.000519][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.000529][ T5889] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.000552][ T5889] Call Trace: [ 1212.000558][ T5889] [ 1212.000563][ T5889] dump_stack_lvl+0x100/0x190 [ 1212.000582][ T5889] should_fail_ex.cold+0x5/0xa [ 1212.000600][ T5889] should_failslab+0xc2/0x120 [ 1212.000622][ T5889] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.000640][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.000658][ T5889] ? __alloc_skb+0x140/0x710 [ 1212.000677][ T5889] __alloc_skb+0x140/0x710 [ 1212.000693][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.000710][ T5889] ? __pfx___alloc_skb+0x10/0x10 [ 1212.000726][ T5889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.000748][ T5889] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.000770][ T5889] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.000789][ T5889] ? rcu_is_watching+0x12/0xc0 [ 1212.000811][ T5889] ? lock_acquire+0x301/0x370 [ 1212.000830][ T5889] process_one_work+0xa23/0x1940 [ 1212.000850][ T5889] ? __pfx_process_one_work+0x10/0x10 [ 1212.000868][ T5889] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.000893][ T5889] worker_thread+0x5ef/0xe50 [ 1212.000910][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.000927][ T5889] ? kthread+0x13a/0x450 [ 1212.000940][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.000955][ T5889] kthread+0x370/0x450 [ 1212.000969][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.000984][ T5889] ret_from_fork+0x72b/0xd50 [ 1212.001004][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.001025][ T5889] ? __switch_to+0x800/0x10f0 [ 1212.001040][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.001054][ T5889] ret_from_fork_asm+0x1a/0x30 [ 1212.001079][ T5889] [ 1212.001099][ T5889] FAULT_INJECTION: forcing a failure. [ 1212.001099][ T5889] name failslab, interval 1, probability 100, space 0, times 5 [ 1212.003393][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.003405][ T10] Workqueue: events vidtv_mux_tick [ 1212.008077][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.008095][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.008105][ T5889] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.008123][ T5889] Call Trace: [ 1212.008128][ T5889] [ 1212.008133][ T5889] dump_stack_lvl+0x100/0x190 [ 1212.008151][ T5889] should_fail_ex.cold+0x5/0xa [ 1212.008167][ T5889] should_failslab+0xc2/0x120 [ 1212.008185][ T5889] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.008205][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.008222][ T5889] ? __alloc_skb+0x140/0x710 [ 1212.008240][ T5889] __alloc_skb+0x140/0x710 [ 1212.008256][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.008273][ T5889] ? __pfx___alloc_skb+0x10/0x10 [ 1212.008290][ T5889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.008311][ T5889] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.008333][ T5889] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.008352][ T5889] ? rcu_is_watching+0x12/0xc0 [ 1212.008373][ T5889] ? lock_acquire+0x301/0x370 [ 1212.008392][ T5889] process_one_work+0xa23/0x1940 [ 1212.008411][ T5889] ? __pfx_process_one_work+0x10/0x10 [ 1212.008429][ T5889] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.008449][ T5889] worker_thread+0x5ef/0xe50 [ 1212.008466][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.008482][ T5889] ? kthread+0x13a/0x450 [ 1212.008495][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.008510][ T5889] kthread+0x370/0x450 [ 1212.008524][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.008538][ T5889] ret_from_fork+0x72b/0xd50 [ 1212.008559][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.008579][ T5889] ? __switch_to+0x800/0x10f0 [ 1212.008594][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.008608][ T5889] ret_from_fork_asm+0x1a/0x30 [ 1212.008633][ T5889] [ 1212.008651][ T5889] FAULT_INJECTION: forcing a failure. [ 1212.008651][ T5889] name failslab, interval 1, probability 100, space 0, times 4 [ 1212.012793][ T10] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1212.012817][ T10] Code: a8 aa f9 31 ff 89 de e8 f5 a2 aa f9 84 db 0f 85 37 0d 00 00 e8 d8 a8 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1212.017480][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.017498][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.017507][ T5889] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.017525][ T5889] Call Trace: [ 1212.017530][ T5889] [ 1212.017535][ T5889] dump_stack_lvl+0x100/0x190 [ 1212.017553][ T5889] should_fail_ex.cold+0x5/0xa [ 1212.017569][ T5889] should_failslab+0xc2/0x120 [ 1212.017588][ T5889] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.017608][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.017624][ T5889] ? __alloc_skb+0x140/0x710 [ 1212.017642][ T5889] __alloc_skb+0x140/0x710 [ 1212.017658][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.017675][ T5889] ? __pfx___alloc_skb+0x10/0x10 [ 1212.017692][ T5889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.017712][ T5889] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.017734][ T5889] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.017753][ T5889] ? rcu_is_watching+0x12/0xc0 [ 1212.017774][ T5889] ? lock_acquire+0x301/0x370 [ 1212.017793][ T5889] process_one_work+0xa23/0x1940 [ 1212.017812][ T5889] ? __pfx_process_one_work+0x10/0x10 [ 1212.017831][ T5889] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.017850][ T5889] worker_thread+0x5ef/0xe50 [ 1212.017868][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.017888][ T5889] ? kthread+0x13a/0x450 [ 1212.017901][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.017916][ T5889] kthread+0x370/0x450 [ 1212.017930][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.017945][ T5889] ret_from_fork+0x72b/0xd50 [ 1212.017965][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.017985][ T5889] ? __switch_to+0x800/0x10f0 [ 1212.018000][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.018014][ T5889] ret_from_fork_asm+0x1a/0x30 [ 1212.018039][ T5889] [ 1212.018057][ T5889] FAULT_INJECTION: forcing a failure. [ 1212.018057][ T5889] name failslab, interval 1, probability 100, space 0, times 3 [ 1212.023141][ T10] RSP: 0018:ffffc900000f7830 EFLAGS: 00010246 [ 1212.023158][ T10] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1212.028079][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.028097][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.028106][ T5889] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.028124][ T5889] Call Trace: [ 1212.028129][ T5889] [ 1212.028134][ T5889] dump_stack_lvl+0x100/0x190 [ 1212.028151][ T5889] should_fail_ex.cold+0x5/0xa [ 1212.028167][ T5889] should_failslab+0xc2/0x120 [ 1212.028186][ T5889] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.028206][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.028223][ T5889] ? __alloc_skb+0x140/0x710 [ 1212.028241][ T5889] __alloc_skb+0x140/0x710 [ 1212.028257][ T5889] ? __alloc_skb+0x5b7/0x710 [ 1212.028274][ T5889] ? __pfx___alloc_skb+0x10/0x10 [ 1212.028290][ T5889] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.028311][ T5889] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.028333][ T5889] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.028352][ T5889] ? rcu_is_watching+0x12/0xc0 [ 1212.028374][ T5889] ? lock_acquire+0x301/0x370 [ 1212.028393][ T5889] process_one_work+0xa23/0x1940 [ 1212.028412][ T5889] ? __pfx_process_one_work+0x10/0x10 [ 1212.028430][ T5889] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.028449][ T5889] worker_thread+0x5ef/0xe50 [ 1212.028467][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.028483][ T5889] ? kthread+0x13a/0x450 [ 1212.028497][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 1212.028512][ T5889] kthread+0x370/0x450 [ 1212.028525][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.028540][ T5889] ret_from_fork+0x72b/0xd50 [ 1212.028559][ T5889] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.028580][ T5889] ? __switch_to+0x800/0x10f0 [ 1212.028594][ T5889] ? __pfx_kthread+0x10/0x10 [ 1212.028609][ T5889] ret_from_fork_asm+0x1a/0x30 [ 1212.028634][ T5889] [ 1212.028657][ C1] FAULT_INJECTION: forcing a failure. [ 1212.028657][ C1] name failslab, interval 1, probability 100, space 0, times 3 [ 1212.033402][ T10] RDX: 0000000000000000 RSI: ffffffff885fb948 RDI: ffff88813fe238c0 [ 1212.033414][ T10] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1212.033425][ T10] R10: ffffffff8edee6f3 R11: ffffffffffff0408 R12: 0000000000000000 [ 1212.033438][ T10] R13: dffffc0000000000 R14: ffff88801c727200 R15: ffff88802d9a1000 [ 1212.038170][ C1] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.038192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.038202][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.038223][ C1] Call Trace: [ 1212.038229][ C1] [ 1212.038235][ C1] dump_stack_lvl+0x100/0x190 [ 1212.038254][ C1] should_fail_ex.cold+0x5/0xa [ 1212.038272][ C1] should_failslab+0xc2/0x120 [ 1212.038292][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.038311][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.038329][ C1] ? __alloc_skb+0x140/0x710 [ 1212.038349][ C1] __alloc_skb+0x140/0x710 [ 1212.038367][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.038385][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1212.038404][ C1] ? rcu_is_watching+0x12/0xc0 [ 1212.038428][ C1] __netdev_alloc_skb+0x7a/0x960 [ 1212.038449][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 1212.038472][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1212.038495][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 1212.038517][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1212.038539][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1212.038562][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 1212.038584][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.038607][ C1] __iterate_interfaces+0x2e6/0x650 [ 1212.038626][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1212.038648][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1212.038668][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1212.038691][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 1212.038707][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1212.038723][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1212.038751][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1212.038776][ C1] handle_softirqs+0x1ea/0x9b0 [ 1212.038799][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1212.038819][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1212.038835][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1212.038852][ C1] __irq_exit_rcu+0x162/0x210 [ 1212.038872][ C1] irq_exit_rcu+0x9/0x30 [ 1212.038896][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1212.038914][ C1] [ 1212.038920][ C1] [ 1212.038925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.038943][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1212.038964][ C1] Code: f6 f2 5e 00 48 89 df 5b e9 1d 6e 64 00 be 03 00 00 00 5b e9 42 32 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 1e 5a 12 48 8b 34 24 65 48 8b 15 e1 1d 5a [ 1212.038979][ C1] RSP: 0018:ffffc900050af9d8 EFLAGS: 00000293 [ 1212.038992][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174febc [ 1212.039003][ C1] RDX: ffff888033730000 RSI: ffffffff8174fec6 RDI: ffff888033730000 [ 1212.039014][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1212.039025][ C1] R10: 0000000000000200 R11: ffffffffffff4008 R12: 0000000000000200 [ 1212.039035][ C1] R13: ffffffff8d4ec160 R14: 0000000000000001 R15: 0000000000000000 [ 1212.039048][ C1] ? dump_stack_lvl+0x16c/0x190 [ 1212.039065][ C1] ? dump_stack_lvl+0x176/0x190 [ 1212.039084][ C1] dump_stack_lvl+0x17c/0x190 [ 1212.039102][ C1] should_fail_ex.cold+0x5/0xa [ 1212.039121][ C1] should_failslab+0xc2/0x120 [ 1212.039141][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.039160][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.039177][ C1] ? __alloc_skb+0x140/0x710 [ 1212.039197][ C1] __alloc_skb+0x140/0x710 [ 1212.039215][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.039233][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1212.039251][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.039273][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.039297][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.039318][ C1] ? rcu_is_watching+0x12/0xc0 [ 1212.039342][ C1] ? lock_acquire+0x301/0x370 [ 1212.039363][ C1] process_one_work+0xa23/0x1940 [ 1212.039383][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1212.039403][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.039424][ C1] worker_thread+0x5ef/0xe50 [ 1212.039443][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1212.039461][ C1] ? kthread+0x13a/0x450 [ 1212.039475][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1212.039492][ C1] kthread+0x370/0x450 [ 1212.039507][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.039522][ C1] ret_from_fork+0x72b/0xd50 [ 1212.039544][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.039566][ C1] ? __switch_to+0x800/0x10f0 [ 1212.039582][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.039598][ C1] ret_from_fork_asm+0x1a/0x30 [ 1212.039625][ C1] [ 1212.039641][ C1] FAULT_INJECTION: forcing a failure. [ 1212.039641][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 1212.043508][ T10] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1212.043528][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.047821][ C1] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.047842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.047852][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.047871][ C1] Call Trace: [ 1212.047881][ C1] [ 1212.047886][ C1] dump_stack_lvl+0x100/0x190 [ 1212.047905][ C1] should_fail_ex.cold+0x5/0xa [ 1212.047923][ C1] should_failslab+0xc2/0x120 [ 1212.047944][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.047963][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.047981][ C1] ? __alloc_skb+0x140/0x710 [ 1212.048001][ C1] __alloc_skb+0x140/0x710 [ 1212.048019][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.048036][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1212.048055][ C1] ? rcu_is_watching+0x12/0xc0 [ 1212.048080][ C1] __netdev_alloc_skb+0x7a/0x960 [ 1212.048101][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 1212.048123][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1212.048146][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 1212.048168][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1212.048189][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.048211][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1212.048234][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 1212.048256][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.048280][ C1] __iterate_interfaces+0x2e6/0x650 [ 1212.048300][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1212.048322][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1212.048343][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1212.048366][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 1212.048382][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1212.048398][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1212.048425][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1212.048450][ C1] handle_softirqs+0x1ea/0x9b0 [ 1212.048471][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1212.048491][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1212.048508][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1212.048525][ C1] __irq_exit_rcu+0x162/0x210 [ 1212.048545][ C1] irq_exit_rcu+0x9/0x30 [ 1212.048564][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1212.048583][ C1] [ 1212.048588][ C1] [ 1212.048594][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.048612][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1212.048632][ C1] Code: f6 f2 5e 00 48 89 df 5b e9 1d 6e 64 00 be 03 00 00 00 5b e9 42 32 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 1e 5a 12 48 8b 34 24 65 48 8b 15 e1 1d 5a [ 1212.048648][ C1] RSP: 0018:ffffc900050af9d8 EFLAGS: 00000293 [ 1212.048660][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174febc [ 1212.048671][ C1] RDX: ffff888033730000 RSI: ffffffff8174fec6 RDI: ffff888033730000 [ 1212.048682][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1212.048692][ C1] R10: 0000000000000200 R11: ffffffffffff4008 R12: 0000000000000200 [ 1212.048702][ C1] R13: ffffffff8d4ec160 R14: 0000000000000001 R15: 0000000000000000 [ 1212.048714][ C1] ? dump_stack_lvl+0x16c/0x190 [ 1212.048732][ C1] ? dump_stack_lvl+0x176/0x190 [ 1212.048750][ C1] dump_stack_lvl+0x17c/0x190 [ 1212.048768][ C1] should_fail_ex.cold+0x5/0xa [ 1212.048786][ C1] should_failslab+0xc2/0x120 [ 1212.048806][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.048825][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.048843][ C1] ? __alloc_skb+0x140/0x710 [ 1212.048863][ C1] __alloc_skb+0x140/0x710 [ 1212.048885][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.048903][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1212.048921][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.048943][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.048967][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.048987][ C1] ? rcu_is_watching+0x12/0xc0 [ 1212.049010][ C1] ? lock_acquire+0x301/0x370 [ 1212.049031][ C1] process_one_work+0xa23/0x1940 [ 1212.049051][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1212.049070][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.049091][ C1] worker_thread+0x5ef/0xe50 [ 1212.049110][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1212.049127][ C1] ? kthread+0x13a/0x450 [ 1212.049142][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1212.049158][ C1] kthread+0x370/0x450 [ 1212.049173][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.049188][ C1] ret_from_fork+0x72b/0xd50 [ 1212.049210][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.049232][ C1] ? __switch_to+0x800/0x10f0 [ 1212.049247][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.049263][ C1] ret_from_fork_asm+0x1a/0x30 [ 1212.049290][ C1] [ 1212.049305][ C1] FAULT_INJECTION: forcing a failure. [ 1212.049305][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 1212.052031][ T10] CR2: 00007fff6af97e10 CR3: 0000000076f29000 CR4: 00000000003526f0 [ 1212.057466][ C1] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 1212.057486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1212.057496][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1212.057516][ C1] Call Trace: [ 1212.057521][ C1] [ 1212.057527][ C1] dump_stack_lvl+0x100/0x190 [ 1212.057545][ C1] should_fail_ex.cold+0x5/0xa [ 1212.057562][ C1] should_failslab+0xc2/0x120 [ 1212.057583][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.057601][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.057619][ C1] ? __alloc_skb+0x140/0x710 [ 1212.057638][ C1] __alloc_skb+0x140/0x710 [ 1212.057656][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.057674][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1212.057693][ C1] ? rcu_is_watching+0x12/0xc0 [ 1212.057717][ C1] __netdev_alloc_skb+0x7a/0x960 [ 1212.057738][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 1212.057760][ C1] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1212.057783][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 1212.057804][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1212.057825][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.057848][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1212.057871][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 1212.057898][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.057922][ C1] __iterate_interfaces+0x2e6/0x650 [ 1212.057941][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1212.057962][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1212.057983][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1212.058006][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 1212.058022][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1212.058038][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1212.058064][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1212.058089][ C1] handle_softirqs+0x1ea/0x9b0 [ 1212.058111][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1212.058131][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1212.058147][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1212.058164][ C1] __irq_exit_rcu+0x162/0x210 [ 1212.058184][ C1] irq_exit_rcu+0x9/0x30 [ 1212.058203][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1212.058222][ C1] [ 1212.058227][ C1] [ 1212.058233][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1212.058251][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1212.058270][ C1] Code: f6 f2 5e 00 48 89 df 5b e9 1d 6e 64 00 be 03 00 00 00 5b e9 42 32 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 1e 5a 12 48 8b 34 24 65 48 8b 15 e1 1d 5a [ 1212.058286][ C1] RSP: 0018:ffffc900050af9d8 EFLAGS: 00000293 [ 1212.058298][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffffffff8174febc [ 1212.058308][ C1] RDX: ffff888033730000 RSI: ffffffff8174fec6 RDI: ffff888033730000 [ 1212.058319][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1212.058329][ C1] R10: 0000000000000200 R11: ffffffffffff4008 R12: 0000000000000200 [ 1212.058339][ C1] R13: ffffffff8d4ec160 R14: 0000000000000001 R15: 0000000000000000 [ 1212.058351][ C1] ? dump_stack_lvl+0x16c/0x190 [ 1212.058369][ C1] ? dump_stack_lvl+0x176/0x190 [ 1212.058388][ C1] dump_stack_lvl+0x17c/0x190 [ 1212.058406][ C1] should_fail_ex.cold+0x5/0xa [ 1212.058424][ C1] should_failslab+0xc2/0x120 [ 1212.058444][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1212.058462][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.058480][ C1] ? __alloc_skb+0x140/0x710 [ 1212.058501][ C1] __alloc_skb+0x140/0x710 [ 1212.058519][ C1] ? __alloc_skb+0x5b7/0x710 [ 1212.058538][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 1212.058556][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.058578][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1212.058602][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 1212.058622][ C1] ? rcu_is_watching+0x12/0xc0 [ 1212.058645][ C1] ? lock_acquire+0x301/0x370 [ 1212.058665][ C1] process_one_work+0xa23/0x1940 [ 1212.058686][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1212.058705][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1212.058726][ C1] worker_thread+0x5ef/0xe50 [ 1212.058745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1212.058762][ C1] ? kthread+0x13a/0x450 [ 1212.058777][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1212.058794][ C1] kthread+0x370/0x450 [ 1212.058809][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.058825][ C1] ret_from_fork+0x72b/0xd50 [ 1212.058846][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1212.058868][ C1] ? __switch_to+0x800/0x10f0 [ 1212.058888][ C1] ? __pfx_kthread+0x10/0x10 [ 1212.058904][ C1] ret_from_fork_asm+0x1a/0x30 [ 1212.058930][ C1] [ 1214.577753][ T10] Call Trace: [ 1214.581028][ T10] [ 1214.583940][ T10] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1214.589130][ T10] ? vidtv_memset+0x50/0x90 [ 1214.593616][ T10] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 1214.599227][ T10] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 1214.604757][ T10] ? __asan_memset+0x23/0x50 [ 1214.609332][ T10] vidtv_mux_tick+0x4e4/0x1460 [ 1214.614098][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1214.619281][ T10] ? __lock_acquire+0x49f/0x1a40 [ 1214.624203][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 1214.629824][ T10] ? rcu_is_watching+0x12/0xc0 [ 1214.634576][ T10] process_one_work+0xa23/0x1940 [ 1214.639496][ T10] ? __pfx_process_one_work+0x10/0x10 [ 1214.644849][ T10] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 1214.650035][ T10] worker_thread+0x5ef/0xe50 [ 1214.654607][ T10] ? kthread+0x13a/0x450 [ 1214.658829][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1214.663917][ T10] kthread+0x370/0x450 [ 1214.667963][ T10] ? __pfx_kthread+0x10/0x10 [ 1214.672544][ T10] ret_from_fork+0x72b/0xd50 [ 1214.677120][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1214.682216][ T10] ? __switch_to+0x800/0x10f0 [ 1214.686873][ T10] ? __pfx_kthread+0x10/0x10 [ 1214.691445][ T10] ret_from_fork_asm+0x1a/0x30 [ 1214.696201][ T10] [ 1214.699199][ T10] Modules linked in: [ 1214.704528][ T10] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1214.723052][ T10] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 1214.738453][ T30] audit: type=1400 audit(1785771248.801:959): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1214.763682][T12528] Bluetooth: hci2: command tx timeout [ 1214.769287][ T5724] usb 4-1: USB disconnect, device number 106 [ 1214.828373][ T30] audit: type=1400 audit(1785771248.801:960): avc: denied { search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1214.885667][ T10] Code: a8 aa f9 31 ff 89 de e8 f5 a2 aa f9 84 db 0f 85 37 0d 00 00 e8 d8 a8 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 1214.957918][T20920] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.974976][ T30] audit: type=1400 audit(1785771248.801:961): avc: denied { write search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.009386][ T10] RSP: 0018:ffffc900000f7830 EFLAGS: 00010246 [ 1215.029404][ T10] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 1215.056476][ T10] RDX: 0000000000000000 RSI: ffffffff885fb948 RDI: ffff88813fe238c0 [ 1215.066033][ T30] audit: type=1400 audit(1785771248.801:962): avc: denied { add_name } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1215.110992][ T10] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1215.138225][ T10] R10: ffffffff8edee6f3 R11: ffffffffffff0408 R12: 0000000000000000 [ 1215.142922][ T30] audit: type=1400 audit(1785771248.801:963): avc: denied { create } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1215.192190][ T10] R13: dffffc0000000000 R14: ffff88801c727200 R15: ffff88802d9a1000 [ 1215.201662][ T10] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1215.210830][ T30] audit: type=1400 audit(1785771248.801:964): avc: denied { append open } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1215.210864][ T30] audit: type=1400 audit(1785771248.801:965): avc: denied { getattr } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1215.263230][T20920] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.292832][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1215.299573][ T10] CR2: 000055a60e551be0 CR3: 000000000e994000 CR4: 00000000003526f0 [ 1215.308108][ T10] Kernel panic - not syncing: Fatal exception [ 1215.321837][ T10] Kernel Offset: disabled [ 1215.326158][ T10] Rebooting in 86400 seconds..