last executing test programs: 22.868592667s ago: executing program 1 (id=4647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000100008800c00078008"], 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r5], 0x50}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) 22.435753583s ago: executing program 1 (id=4653): r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5}) 21.307642398s ago: executing program 1 (id=4656): socket(0x21, 0x2, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000340), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_ACCEPT={0xd, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0x80, &(0x7f0000000c40)=@pppol2tpv3in6, 0x0, 0x80000, 0x2}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000380), 0x1a, 0x600500) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x14) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000004c0)) r6 = socket$inet(0x2, 0x804, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021280011800e000100636f6e6e6c696d6974000000140002800800024000000000080001"], 0xac}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x35c, 0xffffffff, 0x0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x24}, {0x5, "b459", 0x1}}, @common=@ttl={{0x24}, {0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x1, 0x2, 0x6, 0x1, 0x2], 0x0, 0x4}, {0x4, [0x0, 0x0, 0x9, 0x2, 0x1, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0xfffffff9, 0xc0, 0x2}}}, {{@uncond, 0x0, 0xb4, 0x110, 0x0, {}, [@common=@unspec=@nfacct={{0x44}, {'syz0\x00', 0x1ff}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x26, 0x9, [0x9, 0x1f, 0x3b, 0x35, 0x37, 0x20, 0x33, 0xd, 0xc, 0xf, 0x17, 0x13, 0x27, 0xf, 0x12, 0x32], 0x1, 0x80000001}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3b8) preadv(r5, &(0x7f0000000540), 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) 21.141593932s ago: executing program 3 (id=4659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x41}, 0xa3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000002100), 0x8, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xa002c000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) open(&(0x7f00000003c0)='./file0/../file0/file0\x00', 0x0, 0xc8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f000000c3c0)={0x2020}, 0x2020) sendfile(r6, r5, 0x0, 0x8a000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = open(0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='btrfs\x00', 0x201c844, 0x0) ioctl$BTRFS_IOC_DEFRAG(r7, 0xab04, 0x3) 19.947738831s ago: executing program 3 (id=4661): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='\xf2\xdez$>Z\x9e\xf0\xd2\x8e~f\xe0\xcb|\x9cc\xff\xfd6.', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 19.825204304s ago: executing program 3 (id=4662): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000200)='.pending_reads\x00', 0x210002, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000fc0)) sendto$inet6(r3, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000003c0)=ANY=[], 0x0, 0xfffffe60, 0x0, 0x1, 0x10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socket(0x15, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f40)=ANY=[@ANYBLOB="17005d005600440d080000000000000007000000", @ANYRES64=r4], 0x18}}, 0x80) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', &(0x7f0000000040), 0x1000) getpid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) writev(0xffffffffffffffff, &(0x7f0000000f00)=[{&(0x7f0000000e00)}], 0x1) 19.533428008s ago: executing program 1 (id=4663): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050019000000000005387e35f74bb65ff7d665ea5b3d4f7802c086c1837566d2fbbb48140c8b8951581355f4ee1b0566e06a7b03717ca2bf3cb4676c54e89c61"], 0x3c}}, 0x0) 19.241870297s ago: executing program 1 (id=4666): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xfffe, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.813065525s ago: executing program 3 (id=4670): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') read$FUSE(r0, &(0x7f0000006480)={0x2020}, 0x2020) r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000000e00)={0x2020}, 0x2020) 18.638427362s ago: executing program 4 (id=4672): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='\xf2\xdez$>Z\x9e\xf0\xd2\x8e~f\xe0\xcb|\x9cc\xff\xfd6.', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, 0x0) 18.450065653s ago: executing program 3 (id=4673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b00)={'erspan0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x1ff, 0x1ff, {{0x24, 0x4, 0x1, 0x1b, 0x90, 0x65, 0x0, 0x9, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0x8b, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0xf}, 0x3}, {@multicast2, 0x7fffffff}, {@private=0xa010101, 0x8}, {@private=0xa010100, 0x8}, {@empty, 0xe}, {@multicast2, 0xa9}]}, @rr={0x7, 0xf, 0xcd, [@rand_addr=0x64010101, @loopback, @multicast1]}, @ssrr={0x89, 0x17, 0x88, [@multicast2, @private=0xa010101, @local, @loopback, @multicast2]}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x7, 0x4e, [@multicast2]}, @timestamp_prespec={0x44, 0x14, 0x29, 0x3, 0x3, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6f}]}, @end]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000ac0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x4}, 0x6, 0x3, 0x800, 0x3, 0xc, 'syz1\x00', "45c80e9aa46bdbc537c82cff446dff95f7a3edb7a2e7d739efbe88e8ef83f2b4", "51ad5c84e1ed062dc9726897b8fad87833dfaec00baf9764e860e4e2ee552406", [{0x5, 0x8001, {0x2, 0x3}}, {0x7ff, 0xff00, {0x2, 0xffffff60}}, {0xd, 0x4, {0x3, 0x1ff}}, {0xfffd, 0x7, {0x3, 0x1ff}}, {0x7f, 0x4, {0x1, 0x9}}, {0xfffa, 0x9, {0x1, 0xc}}, {0x1, 0x80, {0x0, 0x7f}}, {0x2, 0x0, {0x1, 0x9}}, {0x8, 0x10, {0x1, 0x9}}, {0x4, 0x933, {0x0, 0x7fffffff}}, {0x200, 0x5, {0x1}}, {0x40, 0x400, {0x0, 0x10001}}, {0x5, 0x9, {0x2, 0x2}}, {0x10, 0x2, {0x2, 0x9}}, {0xb, 0x7, {0x3, 0x2}}, {0x9, 0xd}, {0x5dcf, 0x42, {0x3, 0x3}}, {0x1, 0x2, {0x0, 0x2}}, {0x9, 0x1000, {0x2, 0x7}}, {0x1, 0xf1b2, {0x3, 0x8}}, {0xcad, 0xfdab, {0x2, 0x8}}, {0x100, 0xfff8, {0x2, 0x8}}, {0xd, 0x7, {0x3, 0x8}}, {0xa1, 0x10, {0x3, 0x7fff}}, {0x8, 0x3, {0x3, 0x8}}, {0x51ba, 0x1000, {0x3, 0xa}}, {0x1, 0x8, {0x0, 0x2}}, {0x7ff, 0x5, {0x3, 0xd59e}}, {0xcc4c, 0x7, {0x0, 0x1}}, {0x3, 0x3, {0x3, 0x1}}, {0xfffc, 0x3, {0x3, 0x8}}, {0x8, 0x5, {0x1, 0x2}}, {0x4, 0x2, {0x0, 0x2}}, {0x10, 0x7, {0x3, 0x9}}, {0xf2c, 0x8, {0x1, 0x1ff}}, {0x800, 0x8, {0x0, 0x99}}, {0x9, 0x81, {0x2, 0x1}}, {0x1, 0x6c1a, {0x0, 0x7f}}, {0x6, 0xf, {0x2}}, {0x219, 0x5, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{}, 0x10, 0x7, 0x7, 0x81, 0x0, 'syz0\x00', "ec2e448c067163de1b878e1ec402270117c1f57a2c823b91df590bbc23e26447", "ea6b6b55496717c4b2eb99db64cbb328aaefb975e7cf1bcb3fa4bdc7fb2cffcf", [{0x4, 0xc59a, {0x3, 0xa}}, {0x7, 0x0, {0x0, 0x2}}, {0xff, 0x4, {0x3}}, {0x10, 0x1, {0x2, 0x9}}, {0x8, 0x2, {0x0, 0x2}}, {0x1ff, 0x0, {0x0, 0xb8}}, {0x1, 0x1000, {0x3, 0xb}}, {0x3, 0x18, {0x0, 0x2}}, {0x7, 0x1, {0x2, 0x6}}, {0x3, 0x3, {0x0, 0x9}}, {0xdb5, 0x9, {0x2, 0x9}}, {0xd, 0x4, {0x3, 0x10}}, {0x9, 0x2479, {0x1, 0x1}}, {0x0, 0xb9, {0x2, 0x4}}, {0xfafc, 0x6, {0x1, 0x6}}, {0xabfc, 0x4, {0x2, 0x6}}, {0x8, 0x9, {0x3, 0x4}}, {0xb, 0x7, {0x0, 0x6}}, {0x0, 0x5, {0x3, 0xfffff000}}, {0x6, 0x7ff, {0x2, 0x1ff}}, {0x8, 0x5, {0x0, 0x3}}, {0xe0f1, 0x830a, {0x2, 0xeb}}, {0x7, 0xff4, {0x0, 0x10001}}, {0x1, 0xc, {0x0, 0x3}}, {0x9, 0x0, {0x2, 0x7}}, {0xffff, 0x2601, {0x0, 0x9}}, {0x8, 0x2, {0x3}}, {0x7, 0x8, {0x1, 0x1}}, {0x1, 0xfffd, {0x2, 0x1ff}}, {0x8000, 0x4, {0x1, 0x1ff}}, {0xfffd, 0x7fff, {0x3, 0xb}}, {0x5, 0x0, {0x2, 0x6}}, {0x81, 0x0, {0x2, 0x4}}, {0x9, 0x9, {0x3, 0x1}}, {0x7fff, 0x7f, {0x1, 0x7}}, {0x97fa, 0x9, {0x0, 0x1}}, {0x4, 0x3, {0x0, 0x60000}}, {0x0, 0x9, {0x0, 0x6}}, {0x2, 0x4, {0x3}}, {0x6, 0xd, {0x2, 0x9}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 18.431401568s ago: executing program 4 (id=4674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp=r3}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 17.221348261s ago: executing program 3 (id=4675): r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x101042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_async', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb904"], 0xfdef) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB="28000e0004"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7, 0x400000) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup(r6) write$P9_RFLUSH(r0, 0x0, 0x0) 11.361424637s ago: executing program 1 (id=4677): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c000280050019000000000005387e35f74bb65ff7d665ea5b3d4f7802c086c1837566d2fbbb48140c8b8951581355f4ee1b0566e06a7b03717ca2bf3cb4676c54e89c61"], 0x3c}}, 0x0) 11.32356745s ago: executing program 4 (id=4679): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)={0x65, 0x7d, 0x2, {{0x0, 0x4c, 0x8, 0x100, {0x2, 0x0, 0x1}, 0x8040000, 0x9, 0x2, 0x2, 0xb, '/dev/adsp1\x00', 0x9, '/^&]&+,/]', 0x4, '([-*', 0x1, ')'}, 0x4, '}%.{'}}, 0x65) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.761127176s ago: executing program 4 (id=4682): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c1000000000", 0x53}], 0x1) 9.463255751s ago: executing program 4 (id=4686): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c32890e0c48377b5b1f41793698372bf4f773b160898333f60c062db8742ce6f013a33be2ae50cf5066452bf1a933f7452e207822f4ec240bedb05c24e0870b00ffe8121b32fe9d5894e5805cb83b231fa9bcb5b64add14d1d7373a3adbd"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, r6, 0x11, 0x0, r5}, 0x11) syz_open_dev$usbmon(0x0, 0xffffffffffffffff, 0x200000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.209557275s ago: executing program 2 (id=4688): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "1425c709"}, @local, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x4, "d11d3cc3"}, @local=@item_012={0x2, 0x2, 0x0, "dc35"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, 0x0) 5.751456636s ago: executing program 0 (id=4690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x50) 5.525150121s ago: executing program 0 (id=4691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 5.334954139s ago: executing program 0 (id=4692): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)={0x65, 0x7d, 0x2, {{0x0, 0x4c, 0x8, 0x100, {0x2, 0x0, 0x1}, 0x8040000, 0x9, 0x2, 0x2, 0xb, '/dev/adsp1\x00', 0x9, '/^&]&+,/]', 0x4, '([-*', 0x1, ')'}, 0x4, '}%.{'}}, 0x65) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.99027106s ago: executing program 2 (id=4693): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x7}) socket$packet(0x11, 0x3, 0x300) socket$nl_crypto(0x10, 0x3, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) 4.071827543s ago: executing program 2 (id=4694): openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x381101, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000200)="952bb3e006"}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') 3.926965551s ago: executing program 2 (id=4695): socket$inet(0xa, 0x801, 0x84) syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000390000000e0001006e657464657673696d0000000ff91b5cd86390e8017673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x64}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000600)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c1000000000000000", 0x56}], 0x1) 3.64333678s ago: executing program 2 (id=4697): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811010203010902d61c17c30000000904000601096e7e0009050c000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.385561937s ago: executing program 0 (id=4698): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x16d0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.270348782s ago: executing program 0 (id=4699): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0xfffe, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 724.716132ms ago: executing program 4 (id=4701): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1a, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xe}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000009c0)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000003240), &(0x7f0000000100)=@tcp6=r4, 0x2}, 0x20) 0s ago: executing program 2 (id=4702): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "1425c709"}, @local, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x4, "d11d3cc3"}, @local=@item_012={0x2, 0x2, 0x0, "dc35"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, 0x0) kernel console output (not intermixed with test programs): 63387][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1327.270803][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1327.288090][T18651] usb usb5-port1: attempt power cycle [ 1328.003713][T18651] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1328.085807][T18651] usb 5-1: device descriptor read/8, error -71 [ 1328.144101][T18162] usb 3-1: USB disconnect, device number 85 [ 1328.514033][T18651] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1328.564477][T18651] usb 5-1: device descriptor read/8, error -71 [ 1328.741750][T18651] usb usb5-port1: unable to enumerate USB device [ 1328.989296][ T29] audit: type=1400 audit(1723642914.393:2743): avc: denied { getopt } for pid=19127 comm="syz.2.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1329.060406][ T29] audit: type=1400 audit(1723642914.463:2744): avc: denied { append } for pid=19127 comm="syz.2.3955" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1329.073046][T19131] dlm: no local IP address has been set [ 1329.091874][T19131] dlm: cannot start dlm midcomms -107 [ 1329.323864][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1329.564715][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.595514][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.614609][ T29] audit: type=1400 audit(1723642915.013:2745): avc: denied { map } for pid=19138 comm="syz.4.3957" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1329.665978][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1329.704941][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1329.759978][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.843969][ T9] usb 1-1: config 0 descriptor?? [ 1330.495652][ T6299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.576604][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1330.610531][ T9] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1330.688668][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1330.902997][ T6299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.169789][ T6299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.251868][ T29] audit: type=1400 audit(1723642916.653:2746): avc: denied { getopt } for pid=19154 comm="syz.4.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1331.342967][ T6299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.814516][T19166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1331.826785][T19166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1331.835838][T19166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1331.846128][T19166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1331.864085][T19166] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1331.876480][T19166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1331.919720][ T9] usb 1-1: USB disconnect, device number 83 [ 1332.365964][ T6299] bridge_slave_1: left allmulticast mode [ 1332.496628][ T6299] bridge_slave_1: left promiscuous mode [ 1332.502521][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.636472][ T6299] bridge_slave_0: left allmulticast mode [ 1332.642181][ T6299] bridge_slave_0: left promiscuous mode [ 1333.350518][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.726965][T18162] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1333.753213][T13483] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.955581][T18162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.974620][ T5225] Bluetooth: hci3: command tx timeout [ 1334.060316][T18162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.115712][T18162] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1334.122192][T19202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1334.141538][T19202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1334.228436][T19202] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3973'. [ 1334.237809][T18162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.294524][T18162] usb 5-1: config 0 descriptor?? [ 1334.876217][T18162] usbhid 5-1:0.0: can't add hid device: -71 [ 1334.885190][T18162] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1334.943212][T18162] usb 5-1: USB disconnect, device number 90 [ 1336.084363][ T5225] Bluetooth: hci3: command tx timeout [ 1336.094071][T19228] sctp: [Deprecated]: syz.0.3981 (pid 19228) Use of int in max_burst socket option deprecated. [ 1336.094071][T19228] Use struct sctp_assoc_value instead [ 1336.502989][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.559290][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.589287][ T6299] bond0 (unregistering): Released all slaves [ 1336.695982][T19180] À: renamed from syztnl0 [ 1338.601432][ T5225] Bluetooth: hci3: command tx timeout [ 1338.982211][ T6299] hsr_slave_0: left promiscuous mode [ 1339.007278][ T6299] hsr_slave_1: left promiscuous mode [ 1339.049664][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.151385][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.168331][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.194098][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.263455][ T6299] veth1_macvtap: left promiscuous mode [ 1339.280675][ T6299] veth0_macvtap: left promiscuous mode [ 1339.299507][ T6299] veth1_vlan: left promiscuous mode [ 1339.317370][ T6299] veth0_vlan: left promiscuous mode [ 1339.445529][ T29] audit: type=1400 audit(1723642924.853:2747): avc: denied { watch } for pid=19268 comm="syz.3.3992" path="/39" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1339.517267][ T29] audit: type=1400 audit(1723642924.853:2748): avc: denied { watch_sb } for pid=19268 comm="syz.3.3992" path="/39" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1339.635149][ T29] audit: type=1400 audit(1723642924.853:2749): avc: denied { unlink } for pid=19268 comm="syz.3.3992" name="#b" dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1339.846865][ T29] audit: type=1400 audit(1723642924.893:2750): avc: denied { mount } for pid=19268 comm="syz.3.3992" name="/" dev="overlay" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1340.575428][ T29] audit: type=1400 audit(1723642925.953:2751): avc: denied { create } for pid=19294 comm="syz.3.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1340.625802][ T5225] Bluetooth: hci3: command tx timeout [ 1341.093725][ T29] audit: type=1400 audit(1723642925.963:2752): avc: denied { getopt } for pid=19294 comm="syz.3.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1342.813820][ T5275] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1343.303092][ T5275] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1343.339327][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.459065][ T5275] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1343.524129][ T5275] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1343.580649][ T5275] usb 4-1: Manufacturer: syz [ 1343.581457][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 1343.631085][ T5275] usb 4-1: config 0 descriptor?? [ 1343.753997][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 1344.239519][ T5275] rc_core: IR keymap rc-hauppauge not found [ 1344.267510][ T5275] Registered IR keymap rc-empty [ 1344.312485][ T5275] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1344.341679][ T5275] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 1344.381157][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1344.600430][ T5275] usb 4-1: USB disconnect, device number 104 [ 1348.396979][ T29] audit: type=1326 audit(1723642933.803:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.1.4014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53a15799f9 code=0x0 [ 1348.464173][ T5225] Bluetooth: hci0: command 0x0401 tx timeout [ 1349.135822][T19361] sp0: Synchronizing with TNC [ 1349.443689][ T6292] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1349.714353][ T6292] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1349.722818][ T6292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1349.766113][ T29] audit: type=1400 audit(1723642935.163:2754): avc: denied { create } for pid=19384 comm="syz.3.4022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1349.821771][ T6292] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1349.834597][T19385] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1349.861929][ T6292] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1349.870989][ T29] audit: type=1400 audit(1723642935.243:2755): avc: denied { write } for pid=19384 comm="syz.3.4022" path="socket:[64948]" dev="sockfs" ino=64948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1349.923743][ T6292] usb 1-1: Manufacturer: syz [ 1349.946814][ T6292] usb 1-1: config 0 descriptor?? [ 1350.235471][T19164] chnl_net:caif_netlink_parms(): no params data found [ 1350.254067][ T6292] rc_core: IR keymap rc-hauppauge not found [ 1350.279648][ T6292] Registered IR keymap rc-empty [ 1350.327787][ T6292] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1350.353995][ T5272] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1350.419974][ T6292] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 1350.484047][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 1350.542076][ T6292] usb 1-1: USB disconnect, device number 84 [ 1350.886532][ T5272] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1350.902187][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.990747][ T5272] usb 5-1: config 0 descriptor?? [ 1351.545498][T19164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.565045][T19164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.584569][T19164] bridge_slave_0: entered allmulticast mode [ 1351.590534][T19398] sctp: [Deprecated]: syz.3.4024 (pid 19398) Use of int in max_burst socket option deprecated. [ 1351.590534][T19398] Use struct sctp_assoc_value instead [ 1351.611711][T19164] bridge_slave_0: entered promiscuous mode [ 1351.620490][T19164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.642263][T19164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.697727][T19164] bridge_slave_1: entered allmulticast mode [ 1351.728539][T19164] bridge_slave_1: entered promiscuous mode [ 1351.903764][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1351.935176][T19164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.988337][T19164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.124248][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1352.161683][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1352.206313][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1352.267575][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1352.308027][ T9] usb 4-1: Manufacturer: syz [ 1352.361887][ T9] usb 4-1: config 0 descriptor?? [ 1352.431356][T19164] team0: Port device team_slave_0 added [ 1352.461673][T19164] team0: Port device team_slave_1 added [ 1352.625417][T19164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.636706][T19164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.739729][T19164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.776899][T19164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.799105][T19164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.906192][T19164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.122914][T19164] hsr_slave_0: entered promiscuous mode [ 1353.151061][T19164] hsr_slave_1: entered promiscuous mode [ 1353.281898][T19164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1353.340583][T19164] Cannot create hsr debugfs directory [ 1353.551030][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807aefe000: rx timeout, send abort [ 1353.560183][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807aefe000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1353.838307][ T5275] usb 5-1: USB disconnect, device number 91 [ 1353.918790][ T9] usb 4-1: USB disconnect, device number 105 [ 1353.993608][T19453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.056663][T19453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.070255][T18651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.094126][T19453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.103175][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.115712][ T5306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.124801][ T5306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.146940][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.224135][T19454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.336318][T19454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.551091][ T29] audit: type=1400 audit(1723642939.953:2756): avc: denied { mounton } for pid=19464 comm="syz.3.4037" path="/51/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1354.704601][T19463] netlink: 'syz.4.4036': attribute type 4 has an invalid length. [ 1354.750884][T19463] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4036'. [ 1355.157917][ T29] audit: type=1326 audit(1723642940.413:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19474 comm="syz.4.4040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f834c7799f9 code=0x0 [ 1355.192913][T19477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1355.358853][ T29] audit: type=1400 audit(1723642940.763:2758): avc: denied { append } for pid=19480 comm="syz.1.4042" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1355.448486][ T29] audit: type=1400 audit(1723642940.783:2759): avc: denied { open } for pid=19480 comm="syz.1.4042" path="/565/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1356.197251][ T29] audit: type=1400 audit(1723642941.553:2760): avc: denied { mount } for pid=19492 comm="syz.1.4044" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1358.577575][T19164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1358.666005][T19524] : renamed from ipvlan1 [ 1358.792469][T19164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1358.822840][T19164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1358.910857][T19164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1359.501568][ T5275] net_ratelimit: 23 callbacks suppressed [ 1359.501591][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.814719][T10490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.842505][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.875657][T19164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.895575][T19164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.937169][T19164] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1359.984483][T19164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1359.997590][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.140787][ T6299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.148079][ T6299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1360.366193][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.373406][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1360.572658][ T3045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.741410][ T29] audit: type=1400 audit(1723642946.143:2761): avc: denied { watch } for pid=19551 comm="syz.0.4057" path="/280/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1361.375317][T19574] netlink: 'syz.1.4060': attribute type 10 has an invalid length. [ 1361.577353][T19574] team0: Port device netdevsim0 added [ 1361.658987][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.741011][T19575] netlink: 'syz.1.4060': attribute type 10 has an invalid length. [ 1361.904420][T19575] team0: Port device netdevsim0 removed [ 1361.936958][T19575] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1362.090599][T19164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1362.381319][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.451004][T19164] veth0_vlan: entered promiscuous mode [ 1362.547087][T19164] veth1_vlan: entered promiscuous mode [ 1362.694869][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.961834][T19164] veth0_macvtap: entered promiscuous mode [ 1363.088114][T19164] veth1_macvtap: entered promiscuous mode [ 1363.108047][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.176143][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.235850][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.292990][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.354893][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.431858][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.512150][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.558474][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.582411][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.615967][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.637156][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.695018][T19164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.724571][ T6292] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1363.757298][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.781201][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.803979][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.870162][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.903744][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.933800][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1363.972345][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.985214][ T6292] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1364.003726][ T6292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.016733][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.049830][ T6292] usb 2-1: config 0 descriptor?? [ 1364.073650][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.119726][T19164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.141063][T19164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.162189][T19164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.277975][T19164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.291975][T19164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.339316][T19164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.359160][T19164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.821937][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.926144][ T5726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.963076][ T5726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.076781][ T5726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.119814][ T5726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.303338][ T29] audit: type=1326 audit(1723642950.703:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19644 comm="syz.3.4080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x0 [ 1365.670308][T19658] sp0: Synchronizing with TNC [ 1365.895329][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.134899][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.221965][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1366.577216][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802cbc1400: rx timeout, send abort [ 1366.578391][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802cbc1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1366.744687][T19685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4083'. [ 1367.154880][ T6292] usb 2-1: USB disconnect, device number 77 [ 1367.157154][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.453642][T19686] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1367.813141][T19701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.823977][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.896162][T19701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.938716][T19701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.965691][T19701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.103717][ T9] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1368.121020][T19714] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1368.323892][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1368.340906][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.413327][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1368.436394][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.465470][ T9] usb 5-1: Product: syz [ 1368.472707][ T9] usb 5-1: Manufacturer: syz [ 1368.499804][ T9] usb 5-1: SerialNumber: syz [ 1368.699182][ T29] audit: type=1326 audit(1723642954.093:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19719 comm="syz.1.4094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53a15799f9 code=0x0 [ 1369.084973][ T5272] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1369.211044][T19731] sp0: Synchronizing with TNC [ 1369.368495][ T5272] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1369.405769][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.524732][ T5272] usb 3-1: config 0 descriptor?? [ 1369.654434][ T9] cdc_ncm 5-1:1.0: failed to get mac address [ 1369.670977][ T9] cdc_ncm 5-1:1.0: bind() failure [ 1369.692169][ T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1369.754457][ T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1369.777054][ T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1369.838488][ T9] usb 5-1: USB disconnect, device number 92 [ 1370.294369][ T6292] net_ratelimit: 6 callbacks suppressed [ 1370.294391][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1371.380764][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.070079][ T5277] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1372.212846][ T5272] usb 3-1: USB disconnect, device number 86 [ 1372.213950][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.276136][T19801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1372.300180][ T5277] usb 4-1: config 17 has an invalid interface number: 255 but max is 0 [ 1372.332458][ T5277] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.387206][ T5277] usb 4-1: config 17 has no interface number 0 [ 1372.398914][ T5277] usb 4-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1372.458532][ T5277] usb 4-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1372.473081][ T3045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.504062][ T5277] usb 4-1: config 17 interface 255 has no altsetting 0 [ 1372.551497][ T5277] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1372.600636][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.681514][ T5277] aiptek 4-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1373.004159][ T29] audit: type=1326 audit(1723642958.424:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.2.4111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf531799f9 code=0x0 [ 1373.392657][T19827] sp0: Synchronizing with TNC [ 1373.480524][ T3045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.794615][T19835] pim6reg1: entered promiscuous mode [ 1373.804026][T19835] pim6reg1: entered allmulticast mode [ 1374.357782][ T29] audit: type=1400 audit(1723642959.784:2765): avc: denied { bind } for pid=19842 comm="syz.0.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1374.465562][ T29] audit: type=1400 audit(1723642959.784:2766): avc: denied { name_bind } for pid=19842 comm="syz.0.4117" src=20129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1374.518631][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.550083][ T29] audit: type=1400 audit(1723642959.784:2767): avc: denied { node_bind } for pid=19842 comm="syz.0.4117" saddr=172.20.20.170 src=20129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1374.715307][ T5272] usb 4-1: USB disconnect, device number 106 [ 1375.114932][T19865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1375.170354][T19852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1375.243254][ T5306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.563380][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.782522][ T5306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.418194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.586378][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.785501][ T6292] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1377.035365][ T6292] usb 2-1: config 17 has an invalid interface number: 255 but max is 0 [ 1377.083559][ T6292] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.134436][ T6292] usb 2-1: config 17 has no interface number 0 [ 1377.140688][ T6292] usb 2-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1377.217764][ T6292] usb 2-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1377.263480][ T6292] usb 2-1: config 17 interface 255 has no altsetting 0 [ 1377.286019][ T6292] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1377.306264][T19911] netlink: 'syz.3.4140': attribute type 4 has an invalid length. [ 1377.349106][ T6292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.407967][T19915] netlink: 'syz.3.4140': attribute type 4 has an invalid length. [ 1377.460340][ T6292] aiptek 2-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 1377.521524][T19917] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1377.616111][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.927433][ T5306] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1378.143772][ T5306] usb 5-1: Using ep0 maxpacket: 16 [ 1378.169468][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.205387][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.237923][ T5306] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1378.253915][ T5307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.268656][ T5306] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1378.288528][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.334820][ T5306] usb 5-1: config 0 descriptor?? [ 1378.515337][T19943] netlink: 'syz.3.4147': attribute type 4 has an invalid length. [ 1378.550750][T19943] netlink: 'syz.3.4147': attribute type 4 has an invalid length. [ 1378.649013][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.796052][ T5306] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 1378.845606][ T29] audit: type=1326 audit(1723642964.307:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1378.899404][ T5306] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input50 [ 1379.090847][ T29] audit: type=1326 audit(1723642964.337:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.158096][ T5306] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1379.161909][ T29] audit: type=1326 audit(1723642964.357:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.242790][ T29] audit: type=1326 audit(1723642964.357:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.275021][ T29] audit: type=1326 audit(1723642964.357:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.275353][ T5306] usb 5-1: USB disconnect, device number 93 [ 1379.390380][ T5275] usb 2-1: USB disconnect, device number 78 [ 1379.427386][ T29] audit: type=1326 audit(1723642964.377:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.539292][ T29] audit: type=1326 audit(1723642964.377:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.625971][T19963] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4153'. [ 1379.638043][ T29] audit: type=1326 audit(1723642964.387:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.675079][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.718727][ T29] audit: type=1326 audit(1723642964.387:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.787320][ T29] audit: type=1326 audit(1723642964.387:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.850272][ T29] audit: type=1326 audit(1723642964.387:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.887118][ T29] audit: type=1326 audit(1723642964.387:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1379.981340][ T29] audit: type=1326 audit(1723642964.387:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1380.046247][ T29] audit: type=1326 audit(1723642964.397:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1380.100034][ T29] audit: type=1326 audit(1723642964.397:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.3.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x7ffc0000 [ 1380.336355][T19977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.345092][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.413733][T19982] sctp: [Deprecated]: syz.1.4158 (pid 19982) Use of int in max_burst socket option deprecated. [ 1380.413733][T19982] Use struct sctp_assoc_value instead [ 1380.474431][T19974] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1380.712949][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.851504][T19992] No buffer was provided with the request [ 1380.937612][T19993] Bluetooth: MGMT ver 1.23 [ 1381.113795][T19996] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4167'. [ 1381.272241][ T5277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.951319][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1382.904338][T20031] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4179'. [ 1383.021948][ T5272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.565328][T20044] sctp: [Deprecated]: syz.4.4182 (pid 20044) Use of int in max_burst socket option deprecated. [ 1383.565328][T20044] Use struct sctp_assoc_value instead [ 1384.432482][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.441932][ T5306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.068848][ T5275] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1385.252884][T20070] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4192'. [ 1385.300071][ T5275] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1385.327725][ T5275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.346677][ T5277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.369223][ T5275] usb 1-1: config 0 has no interface number 0 [ 1385.373405][T20072] pimreg: entered allmulticast mode [ 1385.470554][ T5275] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1385.510997][ T5275] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1385.529717][ T6292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.638654][ T5275] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1385.681752][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.731353][ T5275] usb 1-1: Product: syz [ 1385.746103][ T5275] usb 1-1: Manufacturer: syz [ 1385.774880][ T5275] usb 1-1: SerialNumber: syz [ 1385.815031][ T5275] usb 1-1: config 0 descriptor?? [ 1386.433467][ T5275] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1386.503547][ T5275] usb 1-1: USB disconnect, device number 85 [ 1386.603148][T20100] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1386.666134][ T3045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.120125][T20110] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1387.470941][ T5306] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.716455][ T3045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.263520][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1388.263540][ T29] audit: type=1400 audit(1723642973.788:2803): avc: denied { write } for pid=20137 comm="syz.3.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1388.375851][ T5225] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1388.399480][ T5225] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1388.409452][ T5225] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1388.418517][ T5225] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1388.430878][ T5225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1388.439444][ T5225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1388.789519][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.264438][T18376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.299199][T20139] chnl_net:caif_netlink_parms(): no params data found [ 1389.498390][T18376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.866488][ T29] audit: type=1400 audit(1723642975.387:2804): avc: denied { ioctl } for pid=20164 comm="syz.0.4225" path="socket:[68074]" dev="sockfs" ino=68074 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1389.950423][T20177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.968259][ T29] audit: type=1326 audit(1723642975.438:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20167 comm="syz.3.4228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x0 [ 1390.055663][T18376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.177574][T20171] @: renamed from vlan0 (while UP) [ 1390.316578][T18376] bond0: (slave netdevsim0): Releasing backup interface [ 1390.363177][T18376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.565038][T13483] Bluetooth: hci6: command tx timeout [ 1390.585997][T20139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.593319][T20139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.681657][T20139] bridge_slave_0: entered allmulticast mode [ 1390.716877][T20139] bridge_slave_0: entered promiscuous mode [ 1390.759962][T20139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.780094][T20139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.788346][T20139] bridge_slave_1: entered allmulticast mode [ 1390.800410][T20139] bridge_slave_1: entered promiscuous mode [ 1391.008023][T20139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.065033][T20139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.264210][T20206] @: renamed from vlan0 (while UP) [ 1391.451790][T20139] team0: Port device team_slave_0 added [ 1391.656522][T20139] team0: Port device team_slave_1 added [ 1391.791540][ T29] audit: type=1326 audit(1723642977.309:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20220 comm="syz.3.4245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x0 [ 1391.880209][T20225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1392.163915][T20139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.180087][T20139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.206220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1392.267954][T20139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.322404][T18376] bridge_slave_1: left allmulticast mode [ 1392.342660][T18376] bridge_slave_1: left promiscuous mode [ 1392.363430][T18376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.410601][T18376] bridge_slave_0: left allmulticast mode [ 1392.509946][T18376] bridge_slave_0: left promiscuous mode [ 1392.633240][T13483] Bluetooth: hci6: command tx timeout [ 1392.639153][T18376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.070254][T20245] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1394.520073][T18376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.557231][T18376] bond0 (unregistering): Released all slaves [ 1394.605205][T20222] À: renamed from syztnl0 [ 1394.639452][T20139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.691877][T20139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1394.748587][T13483] Bluetooth: hci6: command tx timeout [ 1394.759742][T20139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.262372][T20139] hsr_slave_0: entered promiscuous mode [ 1395.288935][T20139] hsr_slave_1: entered promiscuous mode [ 1395.303233][T20139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1395.338007][T20139] Cannot create hsr debugfs directory [ 1396.141628][T18376] hsr_slave_0: left promiscuous mode [ 1396.157089][T18376] hsr_slave_1: left promiscuous mode [ 1396.165356][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1396.172893][T18376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1396.187360][T18376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.197024][T18376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.218994][ T29] audit: type=1400 audit(1723642981.783:2807): avc: denied { setopt } for pid=20291 comm="syz.2.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1396.329688][T18376] veth1_macvtap: left promiscuous mode [ 1396.342585][T18376] veth0_macvtap: left promiscuous mode [ 1396.353906][T18376] veth1_vlan: left promiscuous mode [ 1396.362569][T18376] veth0_vlan: left promiscuous mode [ 1396.772695][T13483] Bluetooth: hci6: command tx timeout [ 1398.131369][T18376] team0 (unregistering): Port device team_slave_1 removed [ 1398.261415][T18376] team0 (unregistering): Port device team_slave_0 removed [ 1399.493461][T20307] @: renamed from vlan0 (while UP) [ 1400.407064][T20336] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1402.028032][T20139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1402.081055][ T29] audit: type=1400 audit(1723642987.673:2808): avc: denied { map } for pid=20374 comm="syz.3.4287" path="/dev/dri/card0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1402.261343][T20139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1402.385172][T20391] netlink: 'syz.4.4291': attribute type 4 has an invalid length. [ 1402.394433][T20139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1402.450662][T20139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1402.454024][T20391] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4291'. [ 1403.239859][T20411] @: renamed from vlan0 (while UP) [ 1403.473950][T20139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.547920][T20426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1403.601282][T20426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1403.650678][T20139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.718987][ T2553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.726256][ T2553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.849301][ T2553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.856552][ T2553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.866957][ T6292] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1404.338853][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4303'. [ 1404.892574][T20139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.900434][T20453] 9pnet_fd: Insufficient options for proto=fd [ 1405.128029][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806c7a4800: rx timeout, send abort [ 1405.137382][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88806c7a4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1405.173176][T20139] veth0_vlan: entered promiscuous mode [ 1405.270462][T20139] veth1_vlan: entered promiscuous mode [ 1405.354006][T20139] veth0_macvtap: entered promiscuous mode [ 1405.385686][T20139] veth1_macvtap: entered promiscuous mode [ 1405.423774][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.465050][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.485287][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.506239][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.531550][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.551682][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.582965][T20472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1405.597100][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.626151][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.640151][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1405.659161][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.701819][T20139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1405.772123][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1405.914530][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1405.980417][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.016167][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.062755][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.117688][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.143927][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.180559][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.199960][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1407.228634][T20139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.280513][T20139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.333030][T20139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.468089][T20139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.501440][ T29] audit: type=1400 audit(1723642993.118:2809): avc: denied { getopt } for pid=20490 comm="syz.0.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1407.537909][T20139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.568155][T20139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.612199][T20139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.771890][T20496] 9pnet_fd: Insufficient options for proto=fd [ 1408.387060][ T2533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.432780][ T2533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.446020][T10490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.465790][T10490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.541128][T20518] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1413.988740][T20542] 9pnet_fd: Insufficient options for proto=fd [ 1415.035643][T20552] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1415.242806][T20556] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4332'. [ 1421.620571][T20579] netdevsim netdevsim2 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1421.649283][T20579] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 1422.145010][T20589] dlm: no local IP address has been set [ 1422.153562][T20589] dlm: cannot start dlm midcomms -107 [ 1422.846871][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4350'. [ 1422.975502][T20604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.645226][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.149079][T20619] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1424.950153][ T29] audit: type=1400 audit(1723643010.145:2810): avc: denied { ioctl } for pid=20615 comm="syz.3.4356" path="socket:[68564]" dev="sockfs" ino=68564 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1425.105556][T20624] [U] [ 1425.108278][T20624] [U] [ 1425.110959][T20624] [U] [ 1425.113642][T20624] [U] [ 1425.155818][T20624] [U] [ 1425.158668][T20624] [U] [ 1425.161401][T20624] [U] [ 1425.164145][T20624] [U] [ 1425.180142][T20624] [U] [ 1425.182909][T20624] [U] [ 1425.185640][T20624] [U] [ 1425.302586][T20618] [U] [ 1425.603495][T20634] dlm: no local IP address has been set [ 1425.609294][T20634] dlm: cannot start dlm midcomms -107 [ 1425.817166][ T3045] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1426.061093][T20645] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1426.075937][ T3045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.105705][ T3045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.142844][ T3045] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1426.223767][ T3045] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1426.304464][ T3045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.441588][ T3045] usb 2-1: config 0 descriptor?? [ 1426.917805][ T3045] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1426.961069][ T3045] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1427.023398][ T3045] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1427.216742][ T3045] usb 2-1: USB disconnect, device number 79 [ 1428.215438][T20662] netlink: 'syz.1.4369': attribute type 4 has an invalid length. [ 1428.234544][T20662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1428.820367][T20674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1429.621903][T20679] dlm: no local IP address has been set [ 1429.635853][T20679] dlm: cannot start dlm midcomms -107 [ 1430.144359][T20694] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1430.252945][ T9] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1430.410995][T20697] netlink: 'syz.0.4382': attribute type 4 has an invalid length. [ 1430.429390][T20697] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4382'. [ 1430.457069][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.507921][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.538361][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1430.566953][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1430.577146][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.632728][ T9] usb 4-1: config 0 descriptor?? [ 1431.118478][ T9] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 1431.136941][ T9] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 1431.157892][ T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1431.206199][ T5307] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1431.399953][ T5307] usb 5-1: Using ep0 maxpacket: 32 [ 1431.408282][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.441306][ T5307] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1431.458026][ T5307] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1431.469559][ T9] usb 4-1: USB disconnect, device number 107 [ 1431.483882][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.526919][ T5307] usb 5-1: config 0 descriptor?? [ 1431.556223][ T5307] hub 5-1:0.0: USB hub found [ 1431.984921][ T5307] hub 5-1:0.0: 1 port detected [ 1433.005238][T20718] dlm: no local IP address has been set [ 1433.019017][T20718] dlm: cannot start dlm midcomms -107 [ 1433.174972][T20723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1433.178265][T20724] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1433.490368][ T29] audit: type=1400 audit(1723643019.203:2811): avc: denied { getopt } for pid=20728 comm="syz.2.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1433.601920][T20732] netlink: 'syz.3.4396': attribute type 4 has an invalid length. [ 1433.611383][T20732] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4396'. [ 1433.668530][ T5307] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 1433.686599][ T5307] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 1433.733629][ T5307] usbhid 5-1:0.0: can't add hid device: -32 [ 1433.766044][ T5307] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1433.855362][ T5307] usb 5-1: USB disconnect, device number 95 [ 1435.815947][T20757] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1436.000454][T20765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1436.112845][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1436.321430][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.387391][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1436.416159][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1436.443966][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.457974][ T9] usb 5-1: config 0 descriptor?? [ 1437.446440][ T9] hid (null): bogus close delimiter [ 1437.579893][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4410'. [ 1437.620897][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 1438.484731][T20791] process 'syz.4.4406' launched './file0' with NULL argv: empty string added [ 1438.772189][ T29] audit: type=1400 audit(1723643024.237:2812): avc: denied { execute_no_trans } for pid=20762 comm="syz.4.4406" path="/187/file0" dev="tmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1438.846833][T20794] input: syz0 as /devices/virtual/input/input52 [ 1439.044019][ T9] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input53 [ 1439.092041][ T9] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input54 [ 1439.136891][ T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input55 [ 1439.188774][T20801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1439.211808][ T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input56 [ 1439.335586][ T9] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1439.373492][ T9] usb 5-1: USB disconnect, device number 96 [ 1444.361414][ T29] audit: type=1400 audit(1723643030.093:2813): avc: denied { getopt } for pid=20837 comm="syz.2.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1444.675642][ T29] audit: type=1326 audit(1723643030.424:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20843 comm="syz.3.4433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70f4d799f9 code=0x0 [ 1444.766972][T20854] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1444.790333][T20854] 0ªX¹¦À: renamed from caif0 [ 1444.873552][T20855] atomic_op ffff88805bcf6998 conn xmit_atomic 0000000000000000 [ 1444.959103][T20854] 0ªX¹¦À: entered allmulticast mode [ 1444.965704][T20854] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1445.446828][ T29] audit: type=1400 audit(1723643030.454:2815): avc: denied { sqpoll } for pid=20846 comm="syz.0.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1445.708611][T20864] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1446.993873][ T29] audit: type=1326 audit(1723643032.739:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20871 comm="syz.2.4443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf531799f9 code=0x0 [ 1447.001885][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1447.053404][T20878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1447.145036][T20877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1453.959459][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1454.648093][ T29] audit: type=1326 audit(1723643040.416:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.2.4452" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf531799f9 code=0x0 [ 1454.858388][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1454.898744][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1454.917384][T20925] sp0: Synchronizing with TNC [ 1454.923244][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1454.951026][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1454.965693][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.978078][T20912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1455.093469][ T29] audit: type=1326 audit(1723643040.857:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20926 comm="syz.1.4458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e817799f9 code=0x0 [ 1455.184018][T20929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1455.625688][T20938] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1455.752947][T20936] À: renamed from syztnl0 [ 1455.898666][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1455.952527][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input57 [ 1456.326807][T19166] Bluetooth: hci3: command 0x0406 tx timeout [ 1473.187511][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1473.279158][ T9] usb 4-1: USB disconnect, device number 108 [ 1475.498540][T19166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1475.521042][T19166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1475.530028][T19166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1475.540319][T19166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1475.559223][T19166] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1475.566861][T19166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1475.593981][T13483] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1475.605406][T13483] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1475.614379][T13483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1475.689211][T13483] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1475.702174][T13483] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1475.710100][T13483] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1475.718048][T13483] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1475.726567][T20957] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1475.742916][T18213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1475.754724][T20957] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1475.763264][T20957] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1475.771054][T20957] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1475.883371][T18213] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1475.900591][T20963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1475.911914][T20963] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1475.925865][T20963] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1475.952039][T19166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1475.978849][T20963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1475.990967][T20963] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1476.018414][T20957] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1476.028077][T20957] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1476.038518][T20957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1476.053358][T20957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1476.063430][T20957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1476.430555][ T2533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.655210][ T2533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.778300][ T2533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.957047][ T2533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.729221][T20957] Bluetooth: hci0: command tx timeout [ 1477.978715][T20957] Bluetooth: hci5: command tx timeout [ 1478.048891][T20957] Bluetooth: hci7: command tx timeout [ 1478.099785][ T2533] bridge_slave_1: left allmulticast mode [ 1478.105478][ T2533] bridge_slave_1: left promiscuous mode [ 1478.119684][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.130518][T18213] Bluetooth: hci8: command tx timeout [ 1478.130585][T20957] Bluetooth: hci3: command tx timeout [ 1478.161211][ T2533] bridge_slave_0: left allmulticast mode [ 1478.166871][ T2533] bridge_slave_0: left promiscuous mode [ 1478.189152][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.048331][ T2533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.074006][ T2533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.101229][ T2533] bond0 (unregistering): Released all slaves [ 1479.133827][T20961] chnl_net:caif_netlink_parms(): no params data found [ 1479.175490][T20956] chnl_net:caif_netlink_parms(): no params data found [ 1479.262625][T20959] chnl_net:caif_netlink_parms(): no params data found [ 1479.395984][T20954] chnl_net:caif_netlink_parms(): no params data found [ 1479.487537][T20952] chnl_net:caif_netlink_parms(): no params data found [ 1479.806794][T20957] Bluetooth: hci0: command tx timeout [ 1479.929606][ T2533] hsr_slave_0: left promiscuous mode [ 1479.944144][ T2533] hsr_slave_1: left promiscuous mode [ 1479.961739][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.976378][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.996463][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.003887][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.046840][T20957] Bluetooth: hci5: command tx timeout [ 1480.071354][ T2533] veth1_macvtap: left promiscuous mode [ 1480.081646][ T2533] veth0_macvtap: left promiscuous mode [ 1480.087724][ T2533] veth1_vlan: left promiscuous mode [ 1480.093259][ T2533] veth0_vlan: left promiscuous mode [ 1480.125767][T20957] Bluetooth: hci7: command tx timeout [ 1480.207568][T20957] Bluetooth: hci8: command tx timeout [ 1480.207601][T18213] Bluetooth: hci3: command tx timeout [ 1481.347978][ T2533] team0 (unregistering): Port device team_slave_1 removed [ 1481.476765][ T2533] team0 (unregistering): Port device team_slave_0 removed [ 1481.889752][T18213] Bluetooth: hci0: command tx timeout [ 1482.123296][T18213] Bluetooth: hci5: command tx timeout [ 1482.203469][T18213] Bluetooth: hci7: command tx timeout [ 1482.293529][T20957] Bluetooth: hci3: command tx timeout [ 1482.301410][T18213] Bluetooth: hci8: command tx timeout [ 1482.916821][T20956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.924796][T20956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.933915][T20956] bridge_slave_0: entered allmulticast mode [ 1482.958644][T20956] bridge_slave_0: entered promiscuous mode [ 1483.033977][T20961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.041268][T20961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.050444][T20961] bridge_slave_0: entered allmulticast mode [ 1483.064982][T20961] bridge_slave_0: entered promiscuous mode [ 1483.083868][T20961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.091076][T20961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.116624][T20961] bridge_slave_1: entered allmulticast mode [ 1483.143311][T20961] bridge_slave_1: entered promiscuous mode [ 1483.164302][T20956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.183891][T20956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.191272][T20956] bridge_slave_1: entered allmulticast mode [ 1483.199001][T20956] bridge_slave_1: entered promiscuous mode [ 1483.361466][T20954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.368622][T20954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.383270][T20954] bridge_slave_0: entered allmulticast mode [ 1483.396653][T20954] bridge_slave_0: entered promiscuous mode [ 1483.559562][T20959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.580824][T20959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.591200][T20959] bridge_slave_0: entered allmulticast mode [ 1483.602231][T20959] bridge_slave_0: entered promiscuous mode [ 1483.613375][T20954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.622808][T20954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.630211][T20954] bridge_slave_1: entered allmulticast mode [ 1483.639231][T20954] bridge_slave_1: entered promiscuous mode [ 1483.733167][T20961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.819261][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.827492][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.837399][T20952] bridge_slave_0: entered allmulticast mode [ 1483.859177][T20952] bridge_slave_0: entered promiscuous mode [ 1483.877182][T20959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.892390][T20959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.904730][T20959] bridge_slave_1: entered allmulticast mode [ 1483.913293][T20959] bridge_slave_1: entered promiscuous mode [ 1483.960575][T18213] Bluetooth: hci0: command tx timeout [ 1483.971492][T20961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.080462][T20956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.110116][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.117585][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.128552][T20952] bridge_slave_1: entered allmulticast mode [ 1484.149405][T20952] bridge_slave_1: entered promiscuous mode [ 1484.200664][T18213] Bluetooth: hci5: command tx timeout [ 1484.274748][T20954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.279906][T18213] Bluetooth: hci7: command tx timeout [ 1484.305537][T20954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.327328][T20961] team0: Port device team_slave_0 added [ 1484.341456][T20961] team0: Port device team_slave_1 added [ 1484.360137][T20957] Bluetooth: hci3: command tx timeout [ 1484.365651][T18213] Bluetooth: hci8: command tx timeout [ 1484.396562][T20956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.445727][T20959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.553337][T20954] team0: Port device team_slave_0 added [ 1484.615147][T20961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.622408][T20961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.651961][T20961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.724066][T20952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.750279][T20959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.766885][T20954] team0: Port device team_slave_1 added [ 1484.831797][T20961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.838882][T20961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1484.860409][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.894907][T20961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.993374][T20952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.220203][T20956] team0: Port device team_slave_0 added [ 1485.283084][T20952] team0: Port device team_slave_0 added [ 1485.543572][T20959] team0: Port device team_slave_0 added [ 1485.583848][T20954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.603243][T20954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.646482][T20954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.708607][T20954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.729648][T20954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.817690][T20954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.886880][T20956] team0: Port device team_slave_1 added [ 1485.940048][T20952] team0: Port device team_slave_1 added [ 1485.958032][T20959] team0: Port device team_slave_1 added [ 1486.310597][ T2533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.416034][T20961] hsr_slave_0: entered promiscuous mode [ 1486.431744][T20961] hsr_slave_1: entered promiscuous mode [ 1486.489015][T20956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.496001][T20956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.531411][T20956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.546274][T20952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.560031][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.586788][T20952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.622919][T20952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.630075][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.656134][T20952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.703982][T20959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.711770][T20959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.737936][T20959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1486.754320][T20959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.761576][T20959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.794365][T20959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.837713][ T2533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.941499][T20956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1486.950103][T20956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1486.976697][T20956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.102512][ T2533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.130027][T20954] hsr_slave_0: entered promiscuous mode [ 1487.137189][T20954] hsr_slave_1: entered promiscuous mode [ 1487.143989][T20954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1487.151979][T20954] Cannot create hsr debugfs directory [ 1487.318653][T20959] hsr_slave_0: entered promiscuous mode [ 1487.327110][T20959] hsr_slave_1: entered promiscuous mode [ 1487.336176][T20959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1487.343857][T20959] Cannot create hsr debugfs directory [ 1487.404358][ T2533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.736731][T20956] hsr_slave_0: entered promiscuous mode [ 1487.745594][T20956] hsr_slave_1: entered promiscuous mode [ 1487.756370][T20956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1487.776930][T20956] Cannot create hsr debugfs directory [ 1487.883366][T20952] hsr_slave_0: entered promiscuous mode [ 1487.899484][T20952] hsr_slave_1: entered promiscuous mode [ 1487.913720][T20952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1487.921718][T20952] Cannot create hsr debugfs directory [ 1489.009213][ T2533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.277891][ T2533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.431216][ T2533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.582869][ T2533] netdevsim netdevsim2 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.920606][ T2533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.116844][ T2533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.234216][ T2533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.348184][ T2533] bond0: (slave netdevsim0): Releasing backup interface [ 1490.371006][ T2533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.668328][ T2533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.880363][ T2533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.010621][ T2533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.103984][T20961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1491.153822][ T2533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.255406][T20961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1491.290787][T20961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1491.332009][T20961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1491.666459][ T2533] bridge_slave_1: left allmulticast mode [ 1491.672741][ T2533] bridge_slave_1: left promiscuous mode [ 1491.678651][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.695483][ T2533] bridge_slave_0: left allmulticast mode [ 1491.713931][ T2533] bridge_slave_0: left promiscuous mode [ 1491.724414][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.747561][ T2533] bridge_slave_1: left allmulticast mode [ 1491.753444][ T2533] bridge_slave_1: left promiscuous mode [ 1491.760192][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.783987][ T2533] bridge_slave_0: left allmulticast mode [ 1491.789673][ T2533] bridge_slave_0: left promiscuous mode [ 1491.799046][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.832256][ T2533] bridge_slave_1: left allmulticast mode [ 1491.838061][ T2533] bridge_slave_1: left promiscuous mode [ 1491.845323][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.877217][ T2533] bridge_slave_0: left allmulticast mode [ 1491.883091][ T2533] bridge_slave_0: left promiscuous mode [ 1491.889496][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.913273][ T2533] bridge_slave_1: left allmulticast mode [ 1491.918964][ T2533] bridge_slave_1: left promiscuous mode [ 1491.934605][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.956820][ T2533] bridge_slave_0: left allmulticast mode [ 1491.966081][ T2533] bridge_slave_0: left promiscuous mode [ 1491.972688][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.640816][ T2533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.668069][ T2533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.686656][ T2533] bond0 (unregistering): Released all slaves [ 1494.963824][ T2533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1494.980293][ T2533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.009019][ T2533] bond0 (unregistering): Released all slaves [ 1495.265269][ T2533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.287048][ T2533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.308668][ T2533] bond0 (unregistering): Released all slaves [ 1495.539345][ T2533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.557658][ T2533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.581617][ T2533] bond0 (unregistering): Released all slaves [ 1496.070278][T20959] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1496.111491][T20959] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1496.151133][ T2533] tipc: Left network mode [ 1496.240461][T20959] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1496.293810][T20959] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1496.391031][T20961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.667086][T20961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.960810][T20892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.968002][T20892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.992497][T20892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.999738][T20892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.674704][T20959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.961364][T20959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.267412][T20892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.274609][T20892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.348907][T20954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1498.447787][T20892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.454973][T20892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.509306][T20954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1498.538647][ T2533] hsr_slave_0: left promiscuous mode [ 1498.548615][ T2533] hsr_slave_1: left promiscuous mode [ 1498.555913][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.564194][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.573596][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.581602][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.615638][ T2533] hsr_slave_0: left promiscuous mode [ 1498.629345][ T2533] hsr_slave_1: left promiscuous mode [ 1498.638422][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.647046][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.664408][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.671840][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.719243][ T2533] hsr_slave_0: left promiscuous mode [ 1498.727071][ T2533] hsr_slave_1: left promiscuous mode [ 1498.733491][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.741334][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.750633][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.761079][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.778495][ T2533] hsr_slave_0: left promiscuous mode [ 1498.791604][ T2533] hsr_slave_1: left promiscuous mode [ 1498.800403][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.811412][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.821747][ T2533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.830369][ T2533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.950499][ T2533] veth1_macvtap: left promiscuous mode [ 1498.956254][ T2533] veth0_macvtap: left promiscuous mode [ 1498.962137][ T2533] veth1_vlan: left promiscuous mode [ 1498.967831][ T2533] veth0_vlan: left promiscuous mode [ 1498.979853][ T2533] veth1_macvtap: left promiscuous mode [ 1498.985929][ T2533] veth0_macvtap: left promiscuous mode [ 1498.991835][ T2533] veth1_vlan: left promiscuous mode [ 1498.997421][ T2533] veth0_vlan: left promiscuous mode [ 1499.007981][ T2533] veth1_macvtap: left promiscuous mode [ 1499.015192][ T2533] veth0_macvtap: left promiscuous mode [ 1499.021088][ T2533] veth1_vlan: left promiscuous mode [ 1499.026773][ T2533] veth0_vlan: left promiscuous mode [ 1499.036215][ T2533] veth1_macvtap: left promiscuous mode [ 1499.041761][ T2533] veth0_macvtap: left promiscuous mode [ 1499.047805][ T2533] veth1_vlan: left promiscuous mode [ 1499.053719][ T2533] veth0_vlan: left promiscuous mode [ 1501.175770][ T2533] team0 (unregistering): Port device team_slave_1 removed [ 1501.269841][ T2533] team0 (unregistering): Port device team_slave_0 removed [ 1503.248838][ T2533] team0 (unregistering): Port device team_slave_1 removed [ 1503.357375][ T2533] team0 (unregistering): Port device team_slave_0 removed [ 1504.446857][ T2533] pimreg (unregistering): left allmulticast mode [ 1505.312786][ T2533] team0 (unregistering): Port device team_slave_1 removed [ 1505.405971][ T2533] team0 (unregistering): Port device team_slave_0 removed [ 1507.237595][ T2533] team0 (unregistering): Port device team_slave_1 removed [ 1507.348733][ T2533] team0 (unregistering): Port device team_slave_0 removed [ 1508.381945][T20954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1508.455695][T20961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1508.510732][T20954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1508.667996][T20952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1508.786187][T20952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1508.815286][T20952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1508.837046][T20952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1508.981797][T20961] veth0_vlan: entered promiscuous mode [ 1509.233795][T20961] veth1_vlan: entered promiscuous mode [ 1509.245169][T20956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1509.317712][T20956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1509.366548][T20956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1509.427000][T20956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1509.736239][T20961] veth0_macvtap: entered promiscuous mode [ 1509.840815][T20961] veth1_macvtap: entered promiscuous mode [ 1509.958493][T20954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.154435][T20961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1510.172346][T20961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.216791][T20961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.239997][T20954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.305766][T20961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1510.318454][T20961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.344017][T20961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.426799][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.434083][T16009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.515364][T20959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.563856][T20961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.578276][T20961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.590196][T20961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.599092][T20961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.628333][T18376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.635530][T18376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.834754][T20952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.099584][T20956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.159684][T20952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.259819][T20959] veth0_vlan: entered promiscuous mode [ 1511.302819][T20892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.310061][T20892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.421329][T20956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.432757][T20892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.439898][T20892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.456424][T16009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.458518][T20959] veth1_vlan: entered promiscuous mode [ 1511.478063][T16009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.636685][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.643895][T16009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1511.698544][T16009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.705815][T16009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.836041][T10490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.844224][T10490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.048407][T20959] veth0_macvtap: entered promiscuous mode [ 1512.087035][T20954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.177973][T20959] veth1_macvtap: entered promiscuous mode [ 1512.416039][T20959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.427921][T20959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.445570][T20959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.456855][T20959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.489579][T20959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.573864][T20959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.606998][T20959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.632917][T20959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.674321][T20959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.719159][T20959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.794474][T20959] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.829994][T20959] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.838749][T20959] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.879354][T20959] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.956220][T20954] veth0_vlan: entered promiscuous mode [ 1513.076259][T20952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.188653][T20954] veth1_vlan: entered promiscuous mode [ 1513.426441][T20956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.485625][ T2533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.518827][ T2533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.624109][T20954] veth0_macvtap: entered promiscuous mode [ 1513.795733][T20954] veth1_macvtap: entered promiscuous mode [ 1513.862969][T16009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.920282][T16009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.037533][T20954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.062859][T20954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.128319][T20954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.148310][T20954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.158524][T20954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.179374][T20954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.230865][T20954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.314787][T20952] veth0_vlan: entered promiscuous mode [ 1514.335560][T20954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.353861][T20954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.366373][T20954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.387642][T20954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.412487][T20954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.434273][T20954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.446732][T20954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.463653][T20952] veth1_vlan: entered promiscuous mode [ 1514.505992][T20954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.522260][T20954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.533031][T20954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.545494][T20954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.627728][ T29] audit: type=1326 audit(1723643100.448:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21033 comm="syz.2.4471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcbb9799f9 code=0x0 [ 1514.862955][T20952] veth0_macvtap: entered promiscuous mode [ 1514.947073][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.955802][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.004808][T21041] sp0: Synchronizing with TNC [ 1515.066798][T20952] veth1_macvtap: entered promiscuous mode [ 1515.186647][ T2533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.188404][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.211443][ T2533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.242973][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.253393][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.264895][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.277963][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.318699][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.368943][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1515.407251][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.464012][T20952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1515.496570][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.508634][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.519147][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.532758][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.591909][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.637116][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.678568][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.681459][ T29] audit: type=1800 audit(1723643101.519:2820): pid=21047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.4473" name="bus" dev="overlay" ino=36 res=0 errno=0 [ 1515.742436][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.779079][T20952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.806128][T20952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.845876][T20952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.855081][T20952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.864350][T20952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.053701][T20956] veth0_vlan: entered promiscuous mode [ 1517.136948][T20956] veth1_vlan: entered promiscuous mode [ 1517.246229][T18651] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1517.399382][T18376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.444978][T18376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.710379][T18651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.893419][T18651] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.118882][T18651] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1518.145072][T18651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.153395][T18651] usb 1-1: Product: syz [ 1518.157775][T18651] usb 1-1: Manufacturer: syz [ 1518.176862][T18651] usb 1-1: SerialNumber: syz [ 1518.206285][T18651] usb 1-1: selecting invalid altsetting 1 [ 1518.224256][T20956] veth0_macvtap: entered promiscuous mode [ 1518.287221][ T2533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.298760][T20956] veth1_macvtap: entered promiscuous mode [ 1518.315279][ T2533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.779478][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.830542][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.859763][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.879550][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.894687][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.924028][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.965613][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.997877][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.038013][T18651] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 1525.096092][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.115985][T18651] cdc_ncm 1-1:1.0: bind() failure [ 1525.160330][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.202287][T18651] usb 1-1: USB disconnect, device number 86 [ 1525.214060][T20956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.265852][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.301897][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.337188][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.357030][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.373080][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.384219][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.395537][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.409151][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.429327][T21069] netlink: 'syz.3.4479': attribute type 4 has an invalid length. [ 1525.437555][T20956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.454592][T21069] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1525.464076][T20956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.491286][T20956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.537235][T20956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.563050][T20956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.587498][T20956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.618791][T20956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.611838][ T29] audit: type=1800 audit(1723643112.467:2821): pid=21075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4482" name="bus" dev="overlay" ino=30 res=0 errno=0 [ 1526.903840][ T2533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.943559][ T2533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.103791][T20892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.145352][T20892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.146147][ T29] audit: type=1326 audit(1723643112.998:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21086 comm="syz.3.4484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc3f799f9 code=0x0 [ 1527.225391][T21083] À: renamed from syztnl0 [ 1528.167243][T21095] sp0: Synchronizing with TNC [ 1535.786119][T21124] netlink: 'syz.0.4492': attribute type 4 has an invalid length. [ 1536.642473][T21124] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1537.142230][ T29] audit: type=1400 audit(1723643123.004:2823): avc: denied { setopt } for pid=21140 comm="syz.0.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1537.210833][ T29] audit: type=1400 audit(1723643123.044:2824): avc: denied { write } for pid=21140 comm="syz.0.4501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1537.705130][T21155] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 1538.632502][ T29] audit: type=1400 audit(1723643123.584:2825): avc: denied { relabelto } for pid=21140 comm="syz.0.4501" name="memory.events" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 1538.679122][ T29] audit: type=1400 audit(1723643123.584:2826): avc: denied { associate } for pid=21140 comm="syz.0.4501" name="memory.events" dev="tmpfs" ino=68 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 1538.828839][ T29] audit: type=1400 audit(1723643124.685:2827): avc: denied { unlink } for pid=20959 comm="syz-executor" name="memory.events" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 1538.871325][T18651] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1539.388302][T18651] usb 5-1: Using ep0 maxpacket: 16 [ 1539.432716][T18651] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1539.467213][T18651] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1539.518089][T18651] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1539.551095][T18651] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1539.598597][T18651] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1539.630084][T18651] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1539.671079][T18651] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1539.716141][T18651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.761597][T18651] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1539.922084][ T29] audit: type=1326 audit(1723643125.786:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21162 comm="syz.0.4505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6d65799f9 code=0x0 [ 1540.051449][T18651] scsi host1: usb-storage 5-1:1.0 [ 1540.167011][T21178] sp0: Synchronizing with TNC [ 1540.461165][T18651] usb 5-1: USB disconnect, device number 97 [ 1540.688009][T21184] netlink: 'syz.2.4511': attribute type 4 has an invalid length. [ 1540.723836][T21184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4511'. [ 1541.302136][ T29] audit: type=1326 audit(1723643127.156:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21189 comm="syz.3.4514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc3f799f9 code=0x0 [ 1541.341706][T21195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1541.463467][ T29] audit: type=1400 audit(1723643127.337:2830): avc: denied { append } for pid=21197 comm="syz.1.4516" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1541.768006][T21208] netlink: 'syz.4.4522': attribute type 4 has an invalid length. [ 1541.803225][T21208] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4522'. [ 1542.115707][T21220] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1542.262606][T21220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.270806][T21220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.231021][ T29] audit: type=1400 audit(1723643128.917:2831): avc: denied { setattr } for pid=21232 comm="syz.0.4529" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1543.581422][T21243] netlink: 'syz.3.4533': attribute type 4 has an invalid length. [ 1543.590719][T21243] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4533'. [ 1543.647700][T21245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4535'. [ 1543.733382][T21246] netlink: 'syz.1.4534': attribute type 12 has an invalid length. [ 1543.862413][ T29] audit: type=1400 audit(1723643129.738:2832): avc: denied { unmount } for pid=20954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1543.883213][T21255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1544.951216][ T5306] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1545.108790][ T5306] usb 5-1: device descriptor read/64, error -71 [ 1545.417888][ T5306] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1545.485942][T21287] netlink: 'syz.2.4547': attribute type 4 has an invalid length. [ 1545.497965][T21287] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4547'. [ 1545.609000][ T5306] usb 5-1: device descriptor read/64, error -71 [ 1545.636150][T21284] À: renamed from syztnl0 [ 1545.748826][ T5306] usb usb5-port1: attempt power cycle [ 1545.947494][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4549'. [ 1546.177473][ T5306] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1546.235487][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.238381][ T5306] usb 5-1: device descriptor read/8, error -71 [ 1546.427341][ T5275] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1546.537254][ T5306] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1546.587803][ T5306] usb 5-1: device descriptor read/8, error -71 [ 1546.687086][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 1546.696441][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1546.720498][ T5306] usb usb5-port1: unable to enumerate USB device [ 1546.752895][ T5275] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1546.827306][ T29] audit: type=1326 audit(1723643132.689:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21310 comm="syz.0.4557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6d65799f9 code=0x0 [ 1546.850447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.861692][ T5275] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1546.927096][ T5275] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1547.009678][T21321] sp0: Synchronizing with TNC [ 1547.024581][ T5275] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1547.096848][ T5275] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1547.236804][ T5275] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1547.245995][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.335377][ T5275] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1547.736649][ T5275] scsi host1: usb-storage 4-1:1.0 [ 1548.134059][ T5307] usb 4-1: USB disconnect, device number 109 [ 1548.392962][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4565'. [ 1548.996917][ T29] audit: type=1400 audit(1723643134.870:2834): avc: denied { setopt } for pid=21352 comm="syz.1.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1549.016620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1550.925171][ T5307] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1551.115077][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 1551.132894][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1551.159165][ T5307] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1551.192516][ T5307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1551.212143][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.223023][ T5307] usb 3-1: Product: syz [ 1551.230431][ T5307] usb 3-1: Manufacturer: syz [ 1551.236025][ T5307] usb 3-1: SerialNumber: syz [ 1551.463803][ T5307] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1551.801545][T18651] usb 3-1: USB disconnect, device number 87 [ 1551.844234][T18651] usblp0: removed [ 1551.867502][ T5307] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1552.106892][ T5307] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.174891][ T5307] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1552.203593][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.245933][ T5307] usb 1-1: config 0 descriptor?? [ 1552.376966][T21439] À: renamed from syztnl0 [ 1552.806116][ T5307] ath6kl: Failed to read usb control message: -71 [ 1552.838133][ T5307] ath6kl: Unable to read the bmi data from the device: -71 [ 1552.857378][ T5307] ath6kl: Unable to recv target info: -71 [ 1552.875565][ T5307] ath6kl: Failed to init ath6kl core: -71 [ 1552.910938][ T5307] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1552.956127][ T5307] usb 1-1: USB disconnect, device number 87 [ 1554.047389][ T29] audit: type=1326 audit(1723643139.923:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21468 comm="syz.3.4617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc3f799f9 code=0x0 [ 1555.157205][ T29] audit: type=1326 audit(1723643141.003:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21508 comm="syz.3.4629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc3f799f9 code=0x0 [ 1555.248015][T21514] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1556.332643][ T29] audit: type=1400 audit(1723643142.204:2837): avc: denied { create } for pid=21521 comm="syz.3.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1556.568736][ T29] audit: type=1400 audit(1723643142.444:2838): avc: denied { setopt } for pid=21521 comm="syz.3.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1557.652848][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4641'. [ 1557.855342][ T29] audit: type=1326 audit(1723643143.734:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21549 comm="syz.4.4643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26feb799f9 code=0x0 [ 1557.955406][T21555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1558.208979][ T29] audit: type=1400 audit(1723643144.084:2840): avc: denied { ioctl } for pid=21558 comm="syz.1.4646" path="/dev/nullb0" dev="devtmpfs" ino=682 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1558.642753][T21564] netlink: 'syz.1.4647': attribute type 4 has an invalid length. [ 1558.650583][T21564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1561.232469][ T29] audit: type=1326 audit(1723643146.245:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21591 comm="syz.2.4657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcbb9799f9 code=0x0 [ 1561.370894][T21607] sp0: Synchronizing with TNC [ 1561.505624][ T29] audit: type=1326 audit(1723643147.386:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21612 comm="syz.3.4662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc3f799f9 code=0x0 [ 1561.608390][T21615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1562.241280][T18162] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1562.300709][ T3045] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1562.430260][T18162] usb 3-1: device descriptor read/64, error -71 [ 1562.530629][ T3045] usb 2-1: Using ep0 maxpacket: 8 [ 1562.545996][ T3045] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1562.582881][ T3045] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1562.594406][ T3045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.602760][ T3045] usb 2-1: Product: syz [ 1562.611832][ T3045] usb 2-1: Manufacturer: syz [ 1562.616678][ T3045] usb 2-1: SerialNumber: syz [ 1562.720235][T18162] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1563.132423][T18162] usb 3-1: device descriptor read/64, error -71 [ 1563.257492][T18162] usb usb3-port1: attempt power cycle [ 1564.070970][ T29] audit: type=1400 audit(1723643149.947:2843): avc: denied { read } for pid=21649 comm="syz.3.4675" name="mouse0" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1564.094259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1564.420149][T18162] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1564.597635][T18162] usb 3-1: device descriptor read/8, error -71 [ 1564.906028][T18162] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1569.745954][ T3045] cdc_ncm 2-1:1.0: bind() failure [ 1569.756214][ T3045] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1569.773521][ T3045] cdc_ncm 2-1:1.1: bind() failure [ 1569.801293][ T3045] usb 2-1: USB disconnect, device number 80 [ 1569.814200][T18162] usb 3-1: device descriptor read/8, error -71 [ 1569.977973][T18162] usb usb3-port1: unable to enumerate USB device [ 1570.243421][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1570.253058][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1570.262560][T21667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4676'. [ 1571.678510][ T29] audit: type=1326 audit(1723643157.549:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21672 comm="syz.0.4681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6d65799f9 code=0x0 [ 1571.781152][T21674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1572.054640][T21685] ptrace attach of "./syz-executor exec"[20961] was attempted by "./syz-executor exec"[21685] [ 1572.308383][ T29] audit: type=1400 audit(1723643157.800:2845): avc: denied { append } for pid=21681 comm="syz.2.4685" name="nbd2" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1573.277334][ T5277] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1573.357185][ T47] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1573.476633][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 1573.485025][ T5277] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.506577][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1573.515862][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.524182][ T5277] usb 1-1: Product: syz [ 1573.528623][ T5277] usb 1-1: Manufacturer: syz [ 1573.533404][ T5277] usb 1-1: SerialNumber: syz [ 1573.546405][ T47] usb 3-1: device descriptor read/64, error -71 [ 1573.853479][ T47] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1574.026756][ T47] usb 3-1: device descriptor read/64, error -71 [ 1574.156474][ T47] usb usb3-port1: attempt power cycle [ 1574.636247][ T47] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1574.641756][ T5277] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1574.653137][ T5277] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1574.790457][ T47] usb 3-1: device descriptor read/8, error -71 [ 1575.166085][ T47] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1575.276217][ T47] usb 3-1: device descriptor read/8, error -71 [ 1575.445938][ T47] usb usb3-port1: unable to enumerate USB device [ 1575.484207][T20957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1575.500332][T20957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1575.511237][T20957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1575.552840][T20957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1575.569851][T20957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1575.587457][T20957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1577.667027][T18213] Bluetooth: hci2: command tx timeout [ 1577.886980][T18162] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1578.894654][T18162] usb 3-1: Using ep0 maxpacket: 8 [ 1578.927837][T18162] usb 3-1: config index 0 descriptor too short (expected 7382, got 27) [ 1578.947670][T18162] usb 3-1: config 195 has 1 interface, different from the descriptor's value: 23 [ 1578.958610][T18162] usb 3-1: config 195 interface 0 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 1578.984802][T18162] usb 3-1: config 195 interface 0 has no altsetting 0 [ 1579.039157][T18162] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1579.055947][T18162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.065957][T18162] usb 3-1: Product: syz [ 1579.070169][T18162] usb 3-1: Manufacturer: syz [ 1579.079792][T18162] usb 3-1: SerialNumber: syz [ 1579.126825][T18162] hub 3-1:195.0: bad descriptor, ignoring hub [ 1579.138553][T18162] hub 3-1:195.0: probe with driver hub failed with error -5 [ 1579.158583][T18162] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1579.337284][T18162] gspca_zc3xx: reg_w_i err -71 [ 1579.606619][T21684] netlink: 'syz.4.4686': attribute type 27 has an invalid length. [ 1579.734813][T18213] Bluetooth: hci2: command tx timeout [ 1579.809916][T21684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.823907][T21684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.967926][T18162] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1579.987036][T18162] gspca_zc3xx 3-1:195.0: probe with driver gspca_zc3xx failed with error -71 [ 1580.191979][T21684] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.203162][T21684] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.215127][T21684] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.224134][T21684] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.260135][T18162] usb 3-1: reset high-speed USB device number 96 using dummy_hcd [ 1580.308569][T21688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.317824][T21688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.327515][T21688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1580.431931][ T5277] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1580.499151][ T5277] usb 1-1: USB disconnect, device number 88 [ 1580.548225][ T5277] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1580.945172][ T5277] ------------[ cut here ]------------ [ 1580.950834][ T5277] ODEBUG: free active (active state 0) object: ffff88805fe4d1a0 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xde0 [ 1581.136398][T18162] usb 3-1: device descriptor read/all, error -71 [ 1581.260192][ T5277] WARNING: CPU: 0 PID: 5277 at lib/debugobjects.c:515 debug_print_object+0x1a3/0x2b0 [ 1581.270204][ T5277] Modules linked in: [ 1581.274233][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: kworker/0:4 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 1581.285075][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1581.295245][ T5277] Workqueue: usb_hub_wq hub_event [ 1581.300406][ T5277] RIP: 0010:debug_print_object+0x1a3/0x2b0 [ 1581.306284][ T5277] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd c0 a0 b0 8b 41 56 4c 89 e6 48 c7 c7 20 94 b0 8b e8 6e 6e c3 fc 90 <0f> 0b 90 90 58 83 05 35 bb 89 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1581.325983][ T5277] RSP: 0018:ffffc90004237468 EFLAGS: 00010286 [ 1581.332321][ T5277] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc900133ff000 [ 1581.341420][ T5277] RDX: 0000000000100000 RSI: ffffffff814cc3e6 RDI: 0000000000000001 [ 1581.350264][ T5277] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1581.358308][ T5277] R10: 0000000000000001 R11: 00000000000053c0 R12: ffffffff8bb09ac0 [ 1581.366445][ T5277] R13: ffffffff8b4bdc80 R14: ffffffff86aec0e0 R15: ffffc90004237578 [ 1581.374450][ T5277] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1581.383520][ T5277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1581.390234][ T5277] CR2: 00007fbcbbae6678 CR3: 000000006accc000 CR4: 00000000003506f0 [ 1581.398251][ T5277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1581.406299][ T5277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1581.414659][ T5277] Call Trace: [ 1581.417936][ T5277] [ 1581.420854][ T5277] ? show_regs+0x8c/0xa0 [ 1581.425370][ T5277] ? __warn+0xe5/0x3c0 [ 1581.429453][ T5277] ? debug_print_object+0x1a3/0x2b0 [ 1581.434688][ T5277] ? report_bug+0x3c0/0x580 [ 1581.439194][ T5277] ? handle_bug+0x3d/0x70 [ 1581.444437][ T5277] ? exc_invalid_op+0x17/0x50 [ 1581.449165][ T5277] ? asm_exc_invalid_op+0x1a/0x20 [ 1581.454943][ T5277] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1581.460846][ T5277] ? __warn_printk+0x1a6/0x350 [ 1581.465671][ T5277] ? debug_print_object+0x1a3/0x2b0 [ 1581.470906][ T5277] ? debug_print_object+0x1a2/0x2b0 [ 1581.476234][ T5277] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1581.482188][ T5277] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1581.488166][ T5277] debug_check_no_obj_freed+0x4b8/0x600 [ 1581.494003][ T5277] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1581.500142][ T5277] kfree+0x284/0x3b0 [ 1581.504116][ T5277] ? rcu_is_watching+0x12/0xc0 [ 1581.509008][ T5277] ? kvfree+0x47/0x50 [ 1581.513148][ T5277] kvfree+0x47/0x50 [ 1581.517152][ T5277] ? __pfx_netdev_release+0x10/0x10 [ 1581.522366][ T5277] device_release+0xa1/0x240 [ 1581.527093][ T5277] kobject_put+0x1fa/0x5b0 [ 1581.531533][ T5277] put_device+0x1f/0x30 [ 1581.535758][ T5277] free_netdev+0x449/0x5f0 [ 1581.540176][ T5277] usbnet_disconnect+0x240/0x500 [ 1581.546022][ T5277] usb_unbind_interface+0x1e8/0x970 [ 1581.551375][ T5277] ? kernfs_find_ns+0x2ee/0x3f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1581.556932][ T5277] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1581.562674][ T5277] device_remove+0x122/0x170 [ 1581.567449][ T5277] device_release_driver_internal+0x44a/0x610 [ 1581.573575][ T5277] bus_remove_device+0x22f/0x420 [ 1581.578670][ T5277] device_del+0x396/0x9f0 [ 1581.583013][ T5277] ? __pfx_device_del+0x10/0x10 [ 1581.587910][ T5277] ? kobject_put+0x226/0x5b0 [ 1581.592593][ T5277] usb_disable_device+0x36c/0x7f0 [ 1581.597670][ T5277] usb_disconnect+0x2e1/0x920 [ 1581.602379][ T5277] hub_event+0x1dbb/0x4e20 [ 1581.606928][ T5277] ? __pfx_hub_event+0x10/0x10 [ 1581.611695][ T5277] ? __pfx_lock_acquire+0x10/0x10 [ 1581.616762][ T5277] ? __pfx_lock_release+0x10/0x10 [ 1581.621784][ T5277] process_one_work+0x9c5/0x1b40 [ 1581.626808][ T5277] ? __pfx_hub_event+0x10/0x10 [ 1581.631593][ T5277] ? __pfx_process_one_work+0x10/0x10 [ 1581.637083][ T5277] ? assign_work+0x1a0/0x250 [ 1581.641689][ T5277] worker_thread+0x6c8/0xf20 [ 1581.647173][ T5277] ? __pfx_worker_thread+0x10/0x10 [ 1581.652294][ T5277] kthread+0x2c1/0x3a0 [ 1581.657111][ T5277] ? _raw_spin_unlock_irq+0x23/0x50 [ 1581.662311][ T5277] ? __pfx_kthread+0x10/0x10 [ 1581.666923][ T5277] ret_from_fork+0x45/0x80 [ 1581.671339][ T5277] ? __pfx_kthread+0x10/0x10 [ 1581.675966][ T5277] ret_from_fork_asm+0x1a/0x30 [ 1581.680738][ T5277] [ 1581.683742][ T29] audit: type=1400 audit(1723643167.362:2846): avc: denied { write } for pid=5207 comm="syz-executor" path="pipe:[3591]" dev="pipefs" ino=3591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1581.707143][ T5277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1581.714534][ T5277] CPU: 0 UID: 0 PID: 5277 Comm: kworker/0:4 Not tainted 6.11.0-rc3-syzkaller-00013-g6b0f8db921ab #0 [ 1581.725278][ T5277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1581.735339][ T5277] Workqueue: usb_hub_wq hub_event [ 1581.740389][ T5277] Call Trace: [ 1581.743662][ T5277] [ 1581.746580][ T5277] dump_stack_lvl+0x3d/0x1f0 [ 1581.751203][ T5277] panic+0x6f5/0x7a0 [ 1581.755092][ T5277] ? __pfx_panic+0x10/0x10 [ 1581.759496][ T5277] ? show_trace_log_lvl+0x363/0x500 [ 1581.764781][ T5277] ? debug_print_object+0x1a3/0x2b0 [ 1581.770077][ T5277] check_panic_on_warn+0xab/0xb0 [ 1581.775003][ T5277] __warn+0xf1/0x3c0 [ 1581.778996][ T5277] ? debug_print_object+0x1a3/0x2b0 [ 1581.784216][ T5277] report_bug+0x3c0/0x580 [ 1581.788551][ T5277] handle_bug+0x3d/0x70 [ 1581.792804][ T5277] exc_invalid_op+0x17/0x50 [ 1581.797318][ T5277] asm_exc_invalid_op+0x1a/0x20 [ 1581.802180][ T5277] RIP: 0010:debug_print_object+0x1a3/0x2b0 [ 1581.808002][ T5277] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd c0 a0 b0 8b 41 56 4c 89 e6 48 c7 c7 20 94 b0 8b e8 6e 6e c3 fc 90 <0f> 0b 90 90 58 83 05 35 bb 89 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1581.827626][ T5277] RSP: 0018:ffffc90004237468 EFLAGS: 00010286 [ 1581.833686][ T5277] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc900133ff000 [ 1581.841644][ T5277] RDX: 0000000000100000 RSI: ffffffff814cc3e6 RDI: 0000000000000001 [ 1581.849612][ T5277] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1581.857590][ T5277] R10: 0000000000000001 R11: 00000000000053c0 R12: ffffffff8bb09ac0 [ 1581.865554][ T5277] R13: ffffffff8b4bdc80 R14: ffffffff86aec0e0 R15: ffffc90004237578 [ 1581.873529][ T5277] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1581.879438][ T5277] ? __warn_printk+0x1a6/0x350 [ 1581.884301][ T5277] ? debug_print_object+0x1a2/0x2b0 [ 1581.889578][ T5277] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1581.895614][ T5277] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1581.901441][ T5277] debug_check_no_obj_freed+0x4b8/0x600 [ 1581.906996][ T5277] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1581.913058][ T5277] kfree+0x284/0x3b0 [ 1581.916943][ T5277] ? rcu_is_watching+0x12/0xc0 [ 1581.921698][ T5277] ? kvfree+0x47/0x50 [ 1581.925670][ T5277] kvfree+0x47/0x50 [ 1581.929492][ T5277] ? __pfx_netdev_release+0x10/0x10 [ 1581.934779][ T5277] device_release+0xa1/0x240 [ 1581.939377][ T5277] kobject_put+0x1fa/0x5b0 [ 1581.943822][ T5277] put_device+0x1f/0x30 [ 1581.947977][ T5277] free_netdev+0x449/0x5f0 [ 1581.952408][ T5277] usbnet_disconnect+0x240/0x500 [ 1581.957346][ T5277] usb_unbind_interface+0x1e8/0x970 [ 1581.962706][ T5277] ? kernfs_find_ns+0x2ee/0x3f0 [ 1581.967548][ T5277] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1581.973253][ T5277] device_remove+0x122/0x170 [ 1581.977837][ T5277] device_release_driver_internal+0x44a/0x610 [ 1581.983894][ T5277] bus_remove_device+0x22f/0x420 [ 1581.988828][ T5277] device_del+0x396/0x9f0 [ 1581.993144][ T5277] ? __pfx_device_del+0x10/0x10 [ 1581.998079][ T5277] ? kobject_put+0x226/0x5b0 [ 1582.002671][ T5277] usb_disable_device+0x36c/0x7f0 [ 1582.008153][ T5277] usb_disconnect+0x2e1/0x920 [ 1582.012832][ T5277] hub_event+0x1dbb/0x4e20 [ 1582.017251][ T5277] ? __pfx_hub_event+0x10/0x10 [ 1582.022099][ T5277] ? __pfx_lock_acquire+0x10/0x10 [ 1582.027116][ T5277] ? __pfx_lock_release+0x10/0x10 [ 1582.032220][ T5277] process_one_work+0x9c5/0x1b40 [ 1582.037159][ T5277] ? __pfx_hub_event+0x10/0x10 [ 1582.041922][ T5277] ? __pfx_process_one_work+0x10/0x10 [ 1582.047291][ T5277] ? assign_work+0x1a0/0x250 [ 1582.051867][ T5277] worker_thread+0x6c8/0xf20 [ 1582.056456][ T5277] ? __pfx_worker_thread+0x10/0x10 [ 1582.061562][ T5277] kthread+0x2c1/0x3a0 [ 1582.065621][ T5277] ? _raw_spin_unlock_irq+0x23/0x50 [ 1582.070813][ T5277] ? __pfx_kthread+0x10/0x10 [ 1582.075390][ T5277] ret_from_fork+0x45/0x80 [ 1582.079800][ T5277] ? __pfx_kthread+0x10/0x10 [ 1582.084376][ T5277] ret_from_fork_asm+0x1a/0x30 [ 1582.089136][ T5277] [ 1582.092383][ T5277] Kernel Offset: disabled [ 1582.096786][ T5277] Rebooting in 86400 seconds..