last executing test programs: 1m24.894780182s ago: executing program 3 (id=661): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904", @ANYRESDEC=0x0], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) close(r1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4040ae79, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r3, 0x0, 0x80, &(0x7f0000000140)="7d1d4f8c", 0x4) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, 0x0) sched_getparam(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000000)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000080)={'pimreg0\x00', {0x2, 0x0, @broadcast}}) 1m21.508548983s ago: executing program 2 (id=672): openat$tun(0xffffffffffffff9c, 0x0, 0x28600, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x1ff, 0x100008b}, 0x0) io_setup(0x6, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000002020207b0483ff00000000bfa100000000000001010000f8ffffffb702000005000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m21.431732317s ago: executing program 3 (id=673): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='f']) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = getpgrp(0xffffffffffffffff) sendmsg$netlink(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000280)={0x228, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x24, 0x0, 0x0, 0x1, [@typed={0x1f, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29"}]}, @nested={0x1e0, 0x6, 0x0, 0x1, [@typed={0x4, 0x124}, @generic="2872319549255e1a5d55c8d599a8b94002ff8ee64cdc2ebc63d1d0a6600eedbf6b8acc58fcf934e3cfc4388edf9912ae6769a7fa963fcbee39443113a9ca545e85c6ada1b4baf31c97b00b71f08ab0fced860872e35616fbc5d8aac0114262ed65591bfcf85aa9528f356a4495a37fbff759331a3efbb8543a731a83fccab1347ce670e2a55fed8762c8e8ac906fd9f3b97f21b1584f6c641ecfa9e28af42d496a9fc4d798a28973387683bffc77e7f330b2c48ae607d32dc68132732f3552af3e16791338c148ae5c4a047d146115aabbcdcfb07c22ddbdaafcf8959482142d3c90da830d", @typed={0xd, 0x1, 0x0, 0x0, @str=')\xe6.(!-(:\x00'}, @generic="2be09018a9b4bdd0e7f3766ad56a64bd3071cd0fda098b84f350a11b540f24ae2f338a87e465994b6cfadde69929062292f985b44cd1f35ecdde0930dd813b635861582188d5dbdf0670ed30532fbae93bcbbcde420049160e873c05d2291db8771eb7f1e3eac06f7b869669569a6a9f9a9dab1b4ef2850a73159acfe9f0d4cd7a7dba8ae195064f791cf37653c0b76c8e19948d06dc269800227cd61d55d8e93681203008bc7b8a8356e0db9261d4ecde8eb0fbcb72cf131600df3ae760b751a6b3f7a0f0e244cd62ad353b33f68ba72edd9a3a6d09d0ea4ac3f4", @typed={0x8, 0x13a, 0x0, 0x0, @pid=r5}]}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x228}], 0x1}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 1m18.894645982s ago: executing program 3 (id=680): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x8910, &(0x7f0000000080)={'sit0\x00', 0x0}) 1m18.61990554s ago: executing program 3 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ptrace$getregs(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000700)=""/49) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r2, 0x0) pwritev2(r2, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}, {0x0}], 0x2, 0x1000000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000230000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1m16.069556141s ago: executing program 3 (id=685): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x9, 0x5, 0x8, 0x3, 0xc0000000000}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) socket(0x0, 0x2, 0x800005) r1 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x114, 0x271d, 0x0, 0x20000000) ppoll(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 1m14.975099884s ago: executing program 2 (id=686): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1m14.222331948s ago: executing program 2 (id=690): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x0, 0x4}, {0xa, 0x100}}}}, 0x11) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9c"}]}], {0x14}}, 0x74}}, 0x0) r4 = socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x5, 0x6, 0x8, 0x8, 0x1}}}}, 0x17) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0xffe}}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r5, 0x6}, 0x8) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 1m11.523435613s ago: executing program 3 (id=698): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='geneve0\x00', 0x10) connect$phonet_pipe(r2, &(0x7f0000000200), 0x10) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000019340)) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) openat$ptp0(0xffffffffffffff9c, &(0x7f0000019380), 0x107000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={r7, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x202}, 0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000019300)={r7, 0x8a2}, &(0x7f0000000080)=0x8) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m9.030779608s ago: executing program 2 (id=703): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = dup(r1) close(r0) r3 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a1689}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x0) 1m1.04593881s ago: executing program 2 (id=711): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r1) 58.880339139s ago: executing program 2 (id=716): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000002e000000200000000000000000300050000000000020000007f0000010000000000000000080012"], 0x80}}, 0x0) 19.989766307s ago: executing program 1 (id=772): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "023a19f82c9b38d7", "b7584d0fc3daf69ab974689e508a7f07", "b01aea26", "fdae1e06439d207f"}, 0x28) 19.601482749s ago: executing program 1 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x170, 0x178, 0x178, 0x170, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x9, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000004408000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0], 0x80}, 0x2}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x490, 0x14, 0x8, 0x0, 0x25dfdbfe, {0x2, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "e88b4f58d3317b449b02e38f3af9e059460f1ab9ee91b2f6058f76a25d06231ce63818e72d25a03ce2d8db5247658f469c54760fcef74c493956c5699b71c834cd116f6b44812ead61f253ae36f3cc5a17e9d7c95ac5ca"}, @INET_DIAG_REQ_BYTECODE={0x41e, 0x1, "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"}]}, 0x490}}, 0x40004804) r5 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r5, 0xda90) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000080)={0x8000003, 0x0, "000097cba2760700000000000000000000000001390d3af6d74de96f48ff089c"}) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) timer_delete(0x0) accept4(r5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) unshare(0x20000400) 18.670601412s ago: executing program 1 (id=777): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 15.447849865s ago: executing program 1 (id=780): openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {}, 0x28, {0x2, 0x0, @empty}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'veth0\x00', {0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioperm(0x0, 0x8, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)={0x0, 'vxcan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 14.297029043s ago: executing program 1 (id=782): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "023a19f82c9b38d7", "b7584d0fc3daf69ab974689e508a7f07", "b01aea26", "fdae1e06439d207f"}, 0x28) 14.036447539s ago: executing program 1 (id=783): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) syz_emit_vhci(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x3800000}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), r4, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)) epoll_create1(0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 13.736517855s ago: executing program 4 (id=784): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x0) 13.441471164s ago: executing program 4 (id=785): socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904060000ff4f9b000904b000003a384600"], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000880)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000540)=""/26, 0x1a}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r4 = epoll_create1(0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "1f5d2ee7"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xc84}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000740)={0x40, 0xa, 0x4e, "cab6769a8e44696552e8fee6d11b1c7f01ad2c4df13d23c59c513be6fe8108f60bcd51e7916f623e8bf07ac1cbdabfa414d89204253cda1371d1d62545090ecb873b419dabeb23fd9f8c4fde5203"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x65}}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000700)={0x1a}) epoll_pwait(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001", @ANYRES64], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000010401010000000000000002000000000a0002"], 0x38}}, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0) 9.426296078s ago: executing program 4 (id=790): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0xc6, 0x65, 0xcf, 0x40, 0x8dd, 0x90ff, 0x5d5a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xf8, 0xf3}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.128816144s ago: executing program 0 (id=792): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[], 0xfe44, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61156c00000000006113500000000000bf5000000000000016000000080000003d03010000000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 8.115686197s ago: executing program 0 (id=793): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x0, 0x100, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 7.847387739s ago: executing program 0 (id=794): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000400000000000000007020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = getpid() syz_open_procfs$userns(r0, &(0x7f00000000c0)) kcmp(r2, r3, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$evdev(r1, &(0x7f0000000000), 0x100000008) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000000000000085000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) signalfd4(r6, &(0x7f0000000080), 0x8, 0x0) syz_emit_ethernet(0x11c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x80010, 0xffffffffffffffff, 0x7ff2d000) 2.759768872s ago: executing program 0 (id=796): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000580)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)=""/225, 0xe1}, {0x0}, {0x0}, {&(0x7f0000000800)=""/188, 0xbc}, {0x0}], 0x5, &(0x7f00000002c0)=""/30, 0x1e}}, {{0x0, 0x0, 0x0}}], 0x2, 0x77368f6b8f24eb75, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/124, 0x7c) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) 2.71076617s ago: executing program 4 (id=797): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x101, 0x34325241, 0x0, [r4], [0xeedb]}) 1.488401771s ago: executing program 4 (id=798): mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340), 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f00000014c0)={0x0, 0xfffffff9, 0x921, 0x0, 0x0, "076ac74d00"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000000)) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000080), 0x4) 1.473944609s ago: executing program 0 (id=799): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b0, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 1.106822877s ago: executing program 0 (id=800): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "023a19f82c9b38d7", "b7584d0fc3daf69ab974689e508a7f07", "b01aea26", "fdae1e06439d207f"}, 0x28) 0s ago: executing program 4 (id=801): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000840)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): er0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.200158][ T29] audit: type=1400 audit(1722331208.207:298): avc: denied { ioctl } for pid=6591 comm="syz.3.295" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 266.239092][ T29] audit: type=1400 audit(1722331208.327:299): avc: denied { create } for pid=6587 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 266.338225][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.359467][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.447680][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 266.503202][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.564613][ T9] usb 1-1: config 0 descriptor?? [ 266.591688][ T8] usb 3-1: USB disconnect, device number 6 [ 267.464734][ T9] prodikeys 0003:041E:2801.0004: invalid report_count 14592 [ 267.515560][ T9] prodikeys 0003:041E:2801.0004: item 0 2 1 9 parsing failed [ 267.538885][ T9] prodikeys 0003:041E:2801.0004: hid parse failed [ 267.571520][ T9] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 267.746460][ T5277] usb 1-1: USB disconnect, device number 4 [ 268.796154][ T5277] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 269.027221][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 269.162374][ T5277] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 269.176489][ T5277] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 269.213982][ T5277] usb 5-1: config 0 has no interface number 0 [ 269.237906][ T5277] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.260319][ T5277] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.296298][ T5277] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.317999][ T5277] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 269.341143][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.411113][ T5277] usb 5-1: config 0 descriptor?? [ 269.445031][ T6612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 269.950799][ C0] eth0: bad gso: type: 1, size: 1408 [ 270.170570][ T5277] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input7 [ 270.785565][ T29] audit: type=1400 audit(1722331212.857:300): avc: denied { ioctl } for pid=4656 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2384 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.899411][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 270.899415][ T5305] usb 5-1: USB disconnect, device number 4 [ 271.517218][ T5275] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 271.726673][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 271.768065][ T5275] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 271.815511][ T5275] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.855709][ T5275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.891659][ T5275] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.908637][ T5275] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.988669][ T29] audit: type=1400 audit(1722331214.077:301): avc: denied { setopt } for pid=6632 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 272.016162][ T5275] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.025269][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.216356][ T29] audit: type=1400 audit(1722331214.307:302): avc: denied { ioctl } for pid=6634 comm="syz.4.311" path="socket:[14536]" dev="sockfs" ino=14536 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 273.315640][ T5275] usb 3-1: usb_control_msg returned -71 [ 273.321302][ T5275] usbtmc 3-1:16.0: can't read capabilities [ 273.344478][ T6645] netlink: 'syz.0.314': attribute type 10 has an invalid length. [ 273.401449][ T5275] usb 3-1: USB disconnect, device number 7 [ 273.418966][ T6645] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 273.466714][ T6645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.596799][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 273.667478][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 273.823092][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.872000][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.902413][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 273.925395][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.956729][ T8] usb 5-1: config 0 descriptor?? [ 274.559291][ T8] prodikeys 0003:041E:2801.0005: invalid report_count 14592 [ 274.644562][ T8] prodikeys 0003:041E:2801.0005: item 0 2 1 9 parsing failed [ 274.683451][ T8] prodikeys 0003:041E:2801.0005: hid parse failed [ 274.706813][ T8] prodikeys 0003:041E:2801.0005: probe with driver prodikeys failed with error -22 [ 274.765612][ T8] usb 5-1: USB disconnect, device number 5 [ 277.132054][ T6681] netlink: 'syz.0.327': attribute type 10 has an invalid length. [ 277.181784][ T6681] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 277.235548][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 277.243464][ T6681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.472282][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 277.608858][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 277.815099][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.881160][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.916224][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.925715][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.939161][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.955651][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.968917][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.981032][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.988511][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.997650][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.011163][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.018965][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.291378][ T29] audit: type=1400 audit(1722331220.377:303): avc: denied { name_bind } for pid=6692 comm="syz.4.330" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 278.313262][ T29] audit: type=1400 audit(1722331220.377:304): avc: denied { node_bind } for pid=6692 comm="syz.4.330" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 278.414679][ T29] audit: type=1400 audit(1722331220.487:305): avc: denied { write } for pid=6692 comm="syz.4.330" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.419204][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 278.513771][ T29] audit: type=1400 audit(1722331220.497:306): avc: denied { connect } for pid=6692 comm="syz.4.330" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.555843][ T9] usbtmc 4-1:16.0: can't read capabilities [ 278.616924][ T29] audit: type=1400 audit(1722331220.497:307): avc: denied { name_connect } for pid=6692 comm="syz.4.330" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 278.921440][ T6679] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 278.960136][ T6704] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 278.980497][ T5276] usb 4-1: USB disconnect, device number 3 [ 279.112393][ T6690] chnl_net:caif_netlink_parms(): no params data found [ 279.316916][ T6708] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.333'. [ 279.328836][ T29] audit: type=1400 audit(1722331221.397:308): avc: denied { getopt } for pid=6707 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 279.641975][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.719571][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.928670][ T6690] bridge_slave_0: entered allmulticast mode [ 280.155543][ T5229] Bluetooth: hci0: command tx timeout [ 280.474221][ T6690] bridge_slave_0: entered promiscuous mode [ 280.493710][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.507075][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.514342][ T6690] bridge_slave_1: entered allmulticast mode [ 280.555171][ T6690] bridge_slave_1: entered promiscuous mode [ 280.752215][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.838161][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 281.294476][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.322626][ T29] audit: type=1400 audit(1722331223.057:309): avc: denied { setopt } for pid=6720 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 281.408275][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.429280][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.519973][ T8] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 281.661130][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.770111][ T8] usb 5-1: config 0 descriptor?? [ 282.031437][ T29] audit: type=1400 audit(1722331223.067:310): avc: denied { write } for pid=6720 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.065452][ T29] audit: type=1400 audit(1722331223.067:311): avc: denied { nlmsg_write } for pid=6720 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.235511][ T5229] Bluetooth: hci0: command tx timeout [ 282.308625][ T8] prodikeys 0003:041E:2801.0006: invalid report_count 14592 [ 282.406089][ T8] prodikeys 0003:041E:2801.0006: item 0 2 1 9 parsing failed [ 282.414581][ T8] prodikeys 0003:041E:2801.0006: hid parse failed [ 282.418282][ T6690] team0: Port device team_slave_0 added [ 282.475206][ T6690] team0: Port device team_slave_1 added [ 282.496359][ T8] prodikeys 0003:041E:2801.0006: probe with driver prodikeys failed with error -22 [ 282.576013][ T8] usb 5-1: USB disconnect, device number 6 [ 283.676083][ T6726] netlink: 14 bytes leftover after parsing attributes in process `syz.2.339'. [ 283.923656][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.951403][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.348141][ T5229] Bluetooth: hci0: command tx timeout [ 284.455065][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.588353][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.665731][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.771725][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.213603][ T6690] hsr_slave_0: entered promiscuous mode [ 285.263471][ T6746] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.345'. [ 285.296038][ T6690] hsr_slave_1: entered promiscuous mode [ 285.322054][ T6690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.527274][ T6690] Cannot create hsr debugfs directory [ 286.311907][ T29] audit: type=1400 audit(1722331227.697:312): avc: denied { create } for pid=6747 comm="syz.4.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 286.412859][ T5229] Bluetooth: hci0: command tx timeout [ 286.419969][ T29] audit: type=1400 audit(1722331227.727:313): avc: denied { ioctl } for pid=6747 comm="syz.4.347" path="socket:[14735]" dev="sockfs" ino=14735 ioctlcmd=0x89ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 286.658357][ T6758] netlink: 'syz.4.348': attribute type 10 has an invalid length. [ 286.679598][ T6758] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 286.715227][ T6758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.845553][ T29] audit: type=1400 audit(1722331228.917:314): avc: denied { read } for pid=6748 comm="syz.3.346" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 287.005566][ T29] audit: type=1400 audit(1722331228.967:315): avc: denied { open } for pid=6748 comm="syz.3.346" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 287.419953][ T6690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.756745][ T6690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.198946][ T6690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.475464][ T29] audit: type=1400 audit(1722331230.557:316): avc: denied { write } for pid=6774 comm="syz.3.353" path="socket:[15373]" dev="sockfs" ino=15373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.516033][ T6690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.322316][ T6690] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.352842][ T6690] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.412740][ T6690] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.469700][ T6690] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.929626][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.054334][ T6690] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.063758][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.102559][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.125466][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.139489][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.148180][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 290.159998][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.309746][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.316918][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.406981][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.414104][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.020208][ T6786] netlink: 'syz.2.356': attribute type 3 has an invalid length. [ 291.336494][ T5303] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 291.555435][ T5303] usb 4-1: Using ep0 maxpacket: 16 [ 291.563053][ T5303] usb 4-1: config 0 has no interfaces? [ 291.570415][ T5303] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.581044][ T5303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.599664][ T5303] usb 4-1: config 0 descriptor?? [ 292.325506][ T5238] Bluetooth: hci6: command tx timeout [ 292.737760][ T8] usb 4-1: USB disconnect, device number 4 [ 292.911185][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.983781][ T6779] chnl_net:caif_netlink_parms(): no params data found [ 293.150298][ T6690] veth0_vlan: entered promiscuous mode [ 293.435390][ T6690] veth1_vlan: entered promiscuous mode [ 293.505380][ T29] audit: type=1400 audit(1722331235.567:317): avc: denied { read } for pid=6811 comm="syz.3.363" path="socket:[15535]" dev="sockfs" ino=15535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 293.782243][ T6690] veth0_macvtap: entered promiscuous mode [ 293.975558][ T6690] veth1_macvtap: entered promiscuous mode [ 294.375434][ T29] audit: type=1400 audit(1722331236.427:318): avc: denied { lock } for pid=6808 comm="syz.4.362" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 294.405781][ T5238] Bluetooth: hci6: command tx timeout [ 294.595242][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.675762][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.712024][ T6779] bridge_slave_0: entered allmulticast mode [ 294.757426][ T6779] bridge_slave_0: entered promiscuous mode [ 294.795470][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.814351][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.848177][ T6779] bridge_slave_1: entered allmulticast mode [ 294.886685][ T6779] bridge_slave_1: entered promiscuous mode [ 295.015542][ T12] bridge_slave_1: left allmulticast mode [ 295.021311][ T12] bridge_slave_1: left promiscuous mode [ 295.065707][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.131189][ T12] bridge_slave_0: left allmulticast mode [ 295.158688][ T12] bridge_slave_0: left promiscuous mode [ 295.164925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.476134][ T5238] Bluetooth: hci6: command tx timeout [ 297.016016][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.105901][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.157187][ T12] bond0 (unregistering): Released all slaves [ 297.506221][ T6832] netlink: 'syz.4.367': attribute type 3 has an invalid length. [ 297.716989][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.022336][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.105534][ T5275] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 298.143656][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.190884][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.223254][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.305703][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.339820][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.350423][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.365542][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.385503][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 298.385836][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.611926][ T5238] Bluetooth: hci6: command tx timeout [ 298.617952][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.629203][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.639606][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 298.651435][ T5275] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=7c.07 [ 298.664134][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.671907][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.681874][ T5275] usb 5-1: Product: syz [ 298.687147][ T5275] usb 5-1: Manufacturer: syz [ 298.691801][ T5275] usb 5-1: SerialNumber: syz [ 298.701116][ T5275] usb 5-1: config 0 descriptor?? [ 299.407159][ T5275] usb 5-1: USB disconnect, device number 7 [ 299.527987][ T6779] team0: Port device team_slave_0 added [ 299.650145][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.746788][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.757380][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.768285][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.805433][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.840392][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.871470][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.907638][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.926081][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.957743][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.987544][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.021789][ T6779] team0: Port device team_slave_1 added [ 300.135452][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 300.349350][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.365419][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.495196][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.534174][ T12] hsr_slave_0: left promiscuous mode [ 300.588410][ T12] hsr_slave_1: left promiscuous mode [ 300.630097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.655738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.695562][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.745755][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.853039][ T12] veth1_macvtap: left promiscuous mode [ 300.873258][ T12] veth0_macvtap: left promiscuous mode [ 300.886023][ T12] veth1_vlan: left promiscuous mode [ 300.898115][ T12] veth0_vlan: left promiscuous mode [ 302.496592][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.515826][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.524615][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.556374][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.568817][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 302.576828][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.385448][ T12] team0 (unregistering): Port device team_slave_1 removed [ 303.695878][ T12] team0 (unregistering): Port device team_slave_0 removed [ 303.856279][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.879051][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.896476][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.916085][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.924354][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.941065][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.635626][ T5229] Bluetooth: hci2: command tx timeout [ 304.653697][ T6690] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.667355][ T6690] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.676310][ T6690] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.684987][ T6690] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.750428][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.780060][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.863532][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.138474][ T6779] hsr_slave_0: entered promiscuous mode [ 305.154222][ T6779] hsr_slave_1: entered promiscuous mode [ 305.170481][ T6779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.183853][ T6779] Cannot create hsr debugfs directory [ 305.582017][ T2528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.591020][ T2528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.995721][ T5229] Bluetooth: hci3: command tx timeout [ 306.274483][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.315952][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.431369][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 306.713462][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.724746][ T5229] Bluetooth: hci2: command tx timeout [ 308.083851][ T5229] Bluetooth: hci3: command tx timeout [ 308.757807][ T6883] netlink: 'syz.4.381': attribute type 3 has an invalid length. [ 308.796794][ T5229] Bluetooth: hci2: command tx timeout [ 308.959777][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.218046][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.385428][ T5303] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 309.477088][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.484414][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.494040][ T29] audit: type=1400 audit(1722331251.577:319): avc: denied { read } for pid=6891 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 309.522554][ T6856] bridge_slave_0: entered allmulticast mode [ 309.540782][ T6856] bridge_slave_0: entered promiscuous mode [ 309.607231][ T5303] usb 2-1: Using ep0 maxpacket: 32 [ 309.626326][ T5303] usb 2-1: config 0 has no interfaces? [ 309.642488][ T5303] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 309.642680][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.659566][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.681317][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 309.688193][ T5303] usb 2-1: Product: syz [ 309.692343][ T5303] usb 2-1: Manufacturer: syz [ 309.704446][ T5303] usb 2-1: SerialNumber: syz [ 309.706737][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.726886][ T5303] usb 2-1: config 0 descriptor?? [ 309.732447][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.755635][ T6856] bridge_slave_1: entered allmulticast mode [ 309.763748][ T6856] bridge_slave_1: entered promiscuous mode [ 309.884810][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.905866][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.092603][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.110641][ T6900] cgroup: noprefix used incorrectly [ 310.124743][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.141821][ T6853] bridge_slave_0: entered allmulticast mode [ 310.157041][ T5229] Bluetooth: hci3: command tx timeout [ 310.167578][ T6853] bridge_slave_0: entered promiscuous mode [ 310.184611][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.198511][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.214945][ T6853] bridge_slave_1: entered allmulticast mode [ 310.229340][ T6853] bridge_slave_1: entered promiscuous mode [ 310.290769][ T6856] team0: Port device team_slave_0 added [ 310.328533][ T5305] usb 2-1: USB disconnect, device number 3 [ 310.368686][ T6856] team0: Port device team_slave_1 added [ 310.548476][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.595883][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.619201][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.655489][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.764427][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.807374][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.824615][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.865571][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.876413][ T5229] Bluetooth: hci2: command tx timeout [ 311.068334][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.349935][ T29] audit: type=1400 audit(1722331253.437:320): avc: denied { write } for pid=6903 comm="syz.1.387" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 311.493176][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.550373][ T6853] team0: Port device team_slave_0 added [ 311.691216][ T6856] hsr_slave_0: entered promiscuous mode [ 311.708018][ T6856] hsr_slave_1: entered promiscuous mode [ 311.725280][ T6856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.735374][ T6856] Cannot create hsr debugfs directory [ 311.749236][ T6853] team0: Port device team_slave_1 added [ 311.819681][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.006392][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.073233][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.097036][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.123078][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.223213][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.236477][ T5229] Bluetooth: hci3: command tx timeout [ 312.243805][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.276093][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.430697][ T6853] hsr_slave_0: entered promiscuous mode [ 312.450341][ T6853] hsr_slave_1: entered promiscuous mode [ 312.464178][ T6853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.503750][ T6853] Cannot create hsr debugfs directory [ 313.234151][ T29] audit: type=1400 audit(1722331255.217:321): avc: denied { listen } for pid=6914 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.528410][ T29] audit: type=1400 audit(1722331255.227:322): avc: denied { accept } for pid=6914 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.613414][ T29] audit: type=1400 audit(1722331255.307:323): avc: denied { shutdown } for pid=6914 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 313.849876][ T6929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.924623][ T6779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.103227][ T6856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.238919][ T5229] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 314.248132][ T5229] Bluetooth: hci1: Injecting HCI hardware error event [ 314.258083][ T5229] Bluetooth: hci1: hardware error 0x00 [ 314.342122][ T6779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.372441][ T12] bridge_slave_1: left allmulticast mode [ 314.394225][ T12] bridge_slave_1: left promiscuous mode [ 314.416146][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.442750][ T12] bridge_slave_0: left allmulticast mode [ 314.453722][ T12] bridge_slave_0: left promiscuous mode [ 314.468897][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.502573][ T12] bridge_slave_1: left allmulticast mode [ 314.555102][ T12] bridge_slave_1: left promiscuous mode [ 314.577131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.771950][ T12] bridge_slave_0: left allmulticast mode [ 314.778364][ T12] bridge_slave_0: left promiscuous mode [ 314.784081][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.379430][ T5229] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 316.540754][ T6958] Bluetooth: MGMT ver 1.23 [ 316.546013][ T6958] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 317.321724][ T29] audit: type=1400 audit(1722331259.407:324): avc: denied { mount } for pid=6961 comm="syz.4.406" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 317.472873][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.484571][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.496017][ T12] bond0 (unregistering): Released all slaves [ 317.603649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.620522][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.631839][ T12] bond0 (unregistering): Released all slaves [ 317.700950][ T6856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.733603][ T6779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.762638][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.763138][ T6779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.769187][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.824957][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 317.947174][ T6856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.092941][ T6856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.491164][ T29] audit: type=1400 audit(1722331260.577:325): avc: denied { read } for pid=6975 comm="syz.1.409" name="event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 318.520578][ T29] audit: type=1400 audit(1722331260.607:326): avc: denied { open } for pid=6975 comm="syz.1.409" path="/dev/input/event0" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 318.776561][ T29] audit: type=1400 audit(1722331260.857:327): avc: denied { ioctl } for pid=6975 comm="syz.1.409" path="/dev/input/event0" dev="devtmpfs" ino=835 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 318.801995][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.643322][ T12] hsr_slave_0: left promiscuous mode [ 319.667410][ T29] audit: type=1400 audit(1722331261.757:328): avc: denied { search } for pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.690673][ T12] hsr_slave_1: left promiscuous mode [ 319.805959][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.813577][ T29] audit: type=1400 audit(1722331261.887:329): avc: denied { unmount } for pid=6017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 319.872258][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.926711][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.934183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.014389][ T12] hsr_slave_0: left promiscuous mode [ 320.804650][ T12] hsr_slave_1: left promiscuous mode [ 320.836947][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.869063][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.917033][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.925138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.029264][ T12] veth1_macvtap: left promiscuous mode [ 321.034873][ T12] veth0_macvtap: left promiscuous mode [ 321.055700][ T12] veth1_vlan: left promiscuous mode [ 321.061120][ T12] veth0_vlan: left promiscuous mode [ 321.078321][ T12] veth1_macvtap: left promiscuous mode [ 321.083920][ T12] veth0_macvtap: left promiscuous mode [ 321.094044][ T12] veth1_vlan: left promiscuous mode [ 321.101331][ T29] audit: type=1400 audit(1722331263.187:330): avc: denied { setopt } for pid=6998 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 321.122026][ T12] veth0_vlan: left promiscuous mode [ 321.654760][ T29] audit: type=1400 audit(1722331263.587:331): avc: denied { setopt } for pid=6998 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 321.819174][ T29] audit: type=1400 audit(1722331263.667:332): avc: denied { bind } for pid=6998 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.076488][ T29] audit: type=1400 audit(1722331263.667:333): avc: denied { getopt } for pid=6998 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 322.604038][ T12] team0 (unregistering): Port device team_slave_1 removed [ 322.649119][ T12] team0 (unregistering): Port device team_slave_0 removed [ 323.488803][ T12] team0 (unregistering): Port device team_slave_1 removed [ 323.539304][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.016163][ T6993] netem: change failed [ 324.220060][ T6856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.278618][ T6856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.346278][ T6856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.455875][ T6856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.945502][ T7034] Bluetooth: MGMT ver 1.23 [ 325.016273][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.045097][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.164781][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.172203][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.392691][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.400257][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.107016][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.192161][ T6779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.240607][ T6853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.273975][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.301227][ T6853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.355096][ T6853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.399728][ T6853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.488347][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.495621][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.540899][ T12] bridge_slave_1: left allmulticast mode [ 326.557110][ T12] bridge_slave_1: left promiscuous mode [ 326.563189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.584638][ T12] bridge_slave_0: left allmulticast mode [ 326.591083][ T12] bridge_slave_0: left promiscuous mode [ 326.598560][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.283545][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.295211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.310060][ T12] bond0 (unregistering): Released all slaves [ 327.620204][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.627460][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.681498][ T7104] netem: change failed [ 327.962516][ T12] hsr_slave_0: left promiscuous mode [ 327.972394][ T12] hsr_slave_1: left promiscuous mode [ 327.979723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.993485][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.002724][ T7125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7125 comm=syz.1.423 [ 328.019221][ T29] audit: type=1400 audit(1722331270.107:334): avc: denied { read } for pid=7119 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 328.023468][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.072844][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.113873][ T12] veth1_macvtap: left promiscuous mode [ 328.119667][ T12] veth0_macvtap: left promiscuous mode [ 328.126238][ T12] veth1_vlan: left promiscuous mode [ 328.131784][ T12] veth0_vlan: left promiscuous mode [ 328.854247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 328.899665][ T12] team0 (unregistering): Port device team_slave_0 removed [ 329.393837][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 329.511636][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.862216][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.308516][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.781014][ T6779] veth0_vlan: entered promiscuous mode [ 330.837162][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.844330][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.880365][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.887645][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.113034][ T6779] veth1_vlan: entered promiscuous mode [ 332.004249][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.168579][ T6779] veth0_macvtap: entered promiscuous mode [ 332.259566][ T6779] veth1_macvtap: entered promiscuous mode [ 332.480205][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.505744][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.516518][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.532531][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.537354][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.562478][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.563855][ T29] audit: type=1400 audit(1722331274.647:335): avc: denied { create } for pid=7181 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.582532][ T7191] netem: change failed [ 332.607219][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.617486][ T7184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.429'. [ 332.631719][ T29] audit: type=1400 audit(1722331274.677:336): avc: denied { connect } for pid=7181 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 332.661274][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.701568][ T6779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.722478][ T6779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.757556][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.862405][ T6856] veth0_vlan: entered promiscuous mode [ 332.883003][ T6779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.903165][ T6779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.929383][ T6779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.950307][ T6779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.072552][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.109120][ T6856] veth1_vlan: entered promiscuous mode [ 333.475755][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.538702][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.574133][ T6856] veth0_macvtap: entered promiscuous mode [ 333.641411][ T6853] veth0_vlan: entered promiscuous mode [ 333.653439][ T7221] syz.1.432(7221): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 333.732307][ T7221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7221 comm=syz.1.432 [ 333.764953][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.784164][ T6856] veth1_macvtap: entered promiscuous mode [ 333.799139][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.849124][ T7221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'. [ 333.962206][ T6853] veth1_vlan: entered promiscuous mode [ 334.106105][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.154025][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.189233][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.236558][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.281228][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.325503][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.339387][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.354484][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.503243][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.681430][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.865861][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.928577][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.000270][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.054502][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.129541][ T6856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.146494][ T6856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.167575][ T6856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.180903][ T6856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.385881][ T6853] veth0_macvtap: entered promiscuous mode [ 335.502929][ T6853] veth1_macvtap: entered promiscuous mode [ 335.506376][ T7260] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.436'. [ 335.726871][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.757166][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.780479][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.810648][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.826905][ T29] audit: type=1400 audit(1722331277.897:337): avc: denied { name_connect } for pid=7268 comm="syz.0.438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 335.875439][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.917080][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.933187][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.964787][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.013279][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.851889][ T29] audit: type=1400 audit(1722331278.487:338): avc: denied { create } for pid=7282 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 336.933938][ T7282] delete_channel: no stack [ 337.079752][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.107334][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.134704][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.201286][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.227985][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.267064][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.290979][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.305681][ T29] audit: type=1400 audit(1722331279.377:339): avc: denied { ioctl } for pid=7272 comm="syz.1.439" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.340924][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.393078][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.544544][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.579256][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.619076][ T6853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.734550][ T6853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.772143][ T6853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.796217][ T6853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.958651][ T29] audit: type=1400 audit(1722331280.027:340): avc: denied { getopt } for pid=7313 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 338.068054][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.096500][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.431790][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.480720][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.678887][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.729358][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.918912][ T29] audit: type=1400 audit(1722331281.007:341): avc: denied { accept } for pid=7341 comm="syz.4.444" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 340.274008][ T7360] netlink: 121244 bytes leftover after parsing attributes in process `syz.4.446'. [ 341.025546][ T5303] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 341.573785][ T7373] delete_channel: no stack [ 341.716261][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 341.760846][ T5303] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 341.787083][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 341.805148][ T5303] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 341.814807][ T5303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.884578][ T5303] usb 1-1: config 0 descriptor?? [ 341.914003][ T5303] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 341.943334][ T5303] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 342.128206][ T5276] usb 1-1: USB disconnect, device number 5 [ 342.860638][ T29] audit: type=1400 audit(1722331284.947:342): avc: denied { create } for pid=7416 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.913036][ T7420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7420 comm=syz.0.456 [ 342.967451][ T29] audit: type=1400 audit(1722331285.027:343): avc: denied { bind } for pid=7416 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.077457][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 343.112762][ T29] audit: type=1400 audit(1722331285.037:344): avc: denied { setopt } for pid=7416 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.179050][ T7422] process 'syz.2.455' launched './file0' with NULL argv: empty string added [ 343.229552][ T29] audit: type=1400 audit(1722331285.087:345): avc: denied { accept } for pid=7416 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.305417][ T29] audit: type=1400 audit(1722331285.297:346): avc: denied { execute_no_trans } for pid=7416 comm="syz.2.455" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.402392][ T7422] trusted_key: syz.2.455 sent an empty control message without MSG_MORE. [ 343.525242][ T29] audit: type=1400 audit(1722331285.607:347): avc: denied { read } for pid=7416 comm="syz.2.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.721872][ T29] audit: type=1400 audit(1722331285.807:348): avc: denied { setopt } for pid=7434 comm="syz.0.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 343.821343][ T29] audit: type=1400 audit(1722331285.857:349): avc: denied { map } for pid=7429 comm="syz.1.458" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 343.917941][ T7438] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.460'. [ 344.137964][ T7431] netlink: 100 bytes leftover after parsing attributes in process `syz.1.458'. [ 344.164286][ T7443] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 344.203275][ T7443] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.462'. [ 344.311509][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.510124][ T7441] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'. [ 345.746601][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 345.874447][ T29] audit: type=1400 audit(1722331287.957:350): avc: denied { create } for pid=7471 comm="syz.3.468" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 345.902968][ T7472] UBIFS error (pid: 7472): cannot open "./file0", error -22 [ 345.982748][ T29] audit: type=1400 audit(1722331287.987:351): avc: denied { mounton } for pid=7471 comm="syz.3.468" path="/4/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 346.545486][ T5266] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 346.759516][ T5266] usb 4-1: Using ep0 maxpacket: 16 [ 346.772665][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 346.783377][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 346.814755][ T5266] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06 [ 346.829037][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.868945][ T5266] usb 4-1: Product: syz [ 346.887895][ T5266] usb 4-1: Manufacturer: syz [ 346.909162][ T5266] usb 4-1: SerialNumber: syz [ 346.951625][ T5266] usb 4-1: config 0 descriptor?? [ 346.964134][ T7498] netlink: 121244 bytes leftover after parsing attributes in process `syz.0.473'. [ 347.004063][ T5266] HFC-S_USB 4-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 347.143363][ T7503] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 347.162320][ T7503] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.474'. [ 348.236887][ T5275] usb 4-1: USB disconnect, device number 5 [ 348.370612][ T5303] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 348.523026][ T29] audit: type=1400 audit(1722331290.577:352): avc: denied { bind } for pid=7519 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.285855][ T5303] usb 3-1: Using ep0 maxpacket: 32 [ 349.296699][ T5303] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 349.312744][ T5303] usb 3-1: config 0 has no interface number 0 [ 349.374048][ T5303] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 349.406244][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.437857][ T5303] usb 3-1: Product: syz [ 349.442148][ T5303] usb 3-1: Manufacturer: syz [ 349.452837][ T5303] usb 3-1: SerialNumber: syz [ 349.488472][ T5303] usb 3-1: config 0 descriptor?? [ 349.611224][ T29] audit: type=1400 audit(1722331291.697:353): avc: denied { write } for pid=7546 comm="syz.0.482" lport=58948 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 350.800884][ T29] audit: type=1400 audit(1722331291.697:354): avc: denied { setopt } for pid=7546 comm="syz.0.482" lport=58948 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 350.947095][ T5303] ftdi_sio 3-1:0.8: FTDI USB Serial Device converter detected [ 350.963969][ T7548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7548 comm=syz.3.480 [ 351.005272][ T29] audit: type=1400 audit(1722331293.087:355): avc: denied { create } for pid=7553 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 351.043148][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 351.047737][ T5303] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 351.124440][ T5303] usb 3-1: USB disconnect, device number 8 [ 351.133087][ T29] audit: type=1400 audit(1722331293.087:356): avc: denied { write } for pid=7553 comm="syz.4.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 351.178127][ T5303] ftdi_sio 3-1:0.8: device disconnected [ 351.384997][ T7576] netlink: 100 bytes leftover after parsing attributes in process `syz.2.485'. [ 353.433338][ T7610] CUSE: info not properly terminated [ 353.925627][ T7623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 354.265530][ T7626] hub 9-0:1.0: USB hub found [ 354.275274][ T7626] hub 9-0:1.0: 8 ports detected [ 354.727239][ T5275] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 354.766513][ T29] audit: type=1400 audit(1722331296.107:357): avc: denied { append } for pid=7619 comm="syz.4.493" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 354.995421][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 355.003285][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 355.050858][ T29] audit: type=1400 audit(1722331297.137:358): avc: denied { getopt } for pid=7630 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.070357][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 355.111153][ T5275] usb 4-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06 [ 355.126775][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.137259][ T5275] usb 4-1: Product: syz [ 355.141821][ T5275] usb 4-1: Manufacturer: syz [ 355.174420][ T5275] usb 4-1: SerialNumber: syz [ 355.208706][ T5275] usb 4-1: config 0 descriptor?? [ 355.231752][ T5275] HFC-S_USB 4-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 355.341865][ T29] audit: type=1400 audit(1722331297.427:359): avc: denied { write } for pid=7649 comm="syz.2.500" name="uinput" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 355.455514][ T46] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 355.671241][ T46] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 355.702534][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.714837][ T5275] usb 4-1: USB disconnect, device number 6 [ 355.755835][ T46] usb 1-1: config 0 descriptor?? [ 355.926181][ T5229] Bluetooth: Unexpected continuation frame (len 18) [ 356.015423][ T29] audit: type=1400 audit(1722331298.037:360): avc: denied { ioctl } for pid=7649 comm="syz.2.500" path="socket:[19178]" dev="sockfs" ino=19178 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.110064][ T7651] input: syz0 as /devices/virtual/input/input8 [ 356.268655][ T46] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 356.513091][ T7681] netlink: 14 bytes leftover after parsing attributes in process `syz.2.502'. [ 356.591761][ T7681] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 356.611611][ T7681] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 357.323979][ T46] usb 1-1: USB disconnect, device number 6 [ 357.552388][ T7703] CUSE: info not properly terminated [ 357.675606][ T5229] Bluetooth: hci3: command tx timeout [ 358.342095][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.507'. [ 359.631946][ T7717] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 361.281247][ T7735] delete_channel: no stack [ 362.652643][ T5266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 362.882188][ T5266] usb 2-1: Using ep0 maxpacket: 8 [ 363.138463][ T5266] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.392556][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 363.403535][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 363.431095][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 363.433749][ T5238] Bluetooth: Unexpected continuation frame (len 18) [ 363.468595][ T5266] usb 2-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 363.495398][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.534516][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 363.546686][ T5266] usb 2-1: Product: syz [ 363.551022][ T5266] usb 2-1: Manufacturer: syz [ 363.604527][ T5266] usb 2-1: SerialNumber: syz [ 363.626642][ T7747] input: syz0 as /devices/virtual/input/input9 [ 363.644463][ T5266] usb 2-1: config 0 descriptor?? [ 364.102368][ T5266] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 364.121653][ T5266] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 364.223740][ T7789] sp0: Synchronizing with TNC [ 364.303014][ T5266] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 364.343935][ T5266] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 364.460913][ T5266] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 364.491387][ T5266] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 364.676863][ T5275] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 364.885439][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 364.902866][ T5275] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 364.941883][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 364.985185][ T5266] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 364.993397][ T5275] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 365.012188][ T5275] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 365.041259][ T5275] usb 4-1: Product: syz [ 365.062600][ T5266] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 365.067581][ T5275] usb 4-1: Manufacturer: syz [ 365.086581][ T5275] usb 4-1: SerialNumber: syz [ 365.118092][ T5238] Bluetooth: hci6: command tx timeout [ 365.141812][ T5266] usb 2-1: USB disconnect, device number 4 [ 365.256266][ T5275] usb 4-1: config 0 descriptor?? [ 365.291753][ T5275] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 365.339562][ T5275] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 365.802875][ T8] usb 4-1: USB disconnect, device number 7 [ 365.802935][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 365.880969][ T8] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 366.005551][ T5238] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.014936][ T5238] Bluetooth: hci2: Injecting HCI hardware error event [ 366.025493][ T5229] Bluetooth: hci2: hardware error 0x00 [ 366.055968][ T7804] ldusb: No device or device unplugged -19 [ 367.220520][ T29] audit: type=1400 audit(1722331309.307:361): avc: denied { setopt } for pid=7902 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 367.336142][ T7896] vivid-004: disconnect [ 367.477893][ T7880] vivid-004: reconnect [ 367.555274][ T7909] netlink: 'syz.0.533': attribute type 2 has an invalid length. [ 367.648507][ T7910] vivid-002: disconnect [ 368.077075][ T7902] vivid-002: reconnect [ 368.195860][ T5229] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 368.518751][ T29] audit: type=1400 audit(1722331310.597:362): avc: denied { bind } for pid=7917 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 369.175503][ T29] audit: type=1400 audit(1722331311.197:363): avc: denied { setopt } for pid=7920 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.247157][ T29] audit: type=1400 audit(1722331311.227:364): avc: denied { ioctl } for pid=7912 comm="syz.1.534" path="/dev/ptp0" dev="devtmpfs" ino=1075 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 369.818892][ T29] audit: type=1400 audit(1722331311.907:365): avc: denied { set_context_mgr } for pid=7950 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 369.925467][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 370.125515][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 370.189340][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 370.216826][ T8] usb 4-1: config 0 has no interface number 0 [ 370.570899][ T5229] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 370.579959][ T5229] Bluetooth: hci0: Injecting HCI hardware error event [ 370.590838][ T5229] Bluetooth: hci0: hardware error 0x00 [ 371.061370][ T8] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 371.100220][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.195603][ T8] usb 4-1: Product: syz [ 371.199834][ T8] usb 4-1: Manufacturer: syz [ 371.204549][ T8] usb 4-1: SerialNumber: syz [ 371.253412][ T8] usb 4-1: config 0 descriptor?? [ 371.439549][ T7980] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.547'. [ 371.449067][ T7980] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 371.496464][ T7981] vivid-004: disconnect [ 371.535514][ T5266] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 371.551735][ T8] ftdi_sio 4-1:0.8: FTDI USB Serial Device converter detected [ 371.584186][ T8] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 371.599081][ T8] usb 4-1: USB disconnect, device number 8 [ 371.607497][ T8] ftdi_sio 4-1:0.8: device disconnected [ 371.665466][ T942] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 371.735408][ T5266] usb 2-1: Using ep0 maxpacket: 16 [ 371.747435][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 371.765661][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 371.800772][ T5266] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=ec.06 [ 371.815669][ T5266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.823716][ T5266] usb 2-1: Product: syz [ 371.828027][ T5266] usb 2-1: Manufacturer: syz [ 371.832649][ T5266] usb 2-1: SerialNumber: syz [ 371.843559][ T5266] usb 2-1: config 0 descriptor?? [ 371.859173][ T5266] HFC-S_USB 2-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 371.889476][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 371.910063][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 371.934457][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 371.955716][ T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 371.977367][ T942] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 371.989084][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.989534][ T29] audit: type=1400 audit(1722331314.077:366): avc: denied { bind } for pid=8008 comm="syz.4.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.997202][ T942] usb 1-1: Product: syz [ 371.997229][ T942] usb 1-1: Manufacturer: syz [ 371.997251][ T942] usb 1-1: SerialNumber: syz [ 372.000528][ T942] usb 1-1: config 0 descriptor?? [ 372.163960][ T7965] vivid-004: reconnect [ 372.232100][ T5275] usb 2-1: USB disconnect, device number 5 [ 372.291527][ T942] usb 1-1: USB disconnect, device number 7 [ 373.195798][ T5229] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 373.543348][ T8042] overlay: Unknown parameter '/' [ 373.548805][ T29] audit: type=1400 audit(1722331315.627:367): avc: denied { mount } for pid=8035 comm="syz.2.556" name="/" dev="pstore" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 374.212117][ T29] audit: type=1400 audit(1722331316.297:368): avc: denied { unmount } for pid=6856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 374.484763][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 374.828478][ T8098] vivid-006: disconnect [ 374.862040][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 374.895532][ T5266] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 375.085459][ T5266] usb 3-1: Using ep0 maxpacket: 32 [ 375.093032][ T5266] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 375.104608][ T5266] usb 3-1: config 0 has no interface number 0 [ 375.117622][ T5266] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 375.128391][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.136575][ T5266] usb 3-1: Product: syz [ 375.141078][ T5266] usb 3-1: Manufacturer: syz [ 375.145887][ T5266] usb 3-1: SerialNumber: syz [ 375.173066][ T5266] usb 3-1: config 0 descriptor?? [ 375.207811][ T8081] vivid-006: reconnect [ 376.164900][ T5266] ftdi_sio 3-1:0.8: FTDI USB Serial Device converter detected [ 376.174546][ T5266] ftdi_sio ttyUSB0: unknown device type: 0x2043 [ 376.190054][ T5266] usb 3-1: USB disconnect, device number 9 [ 376.198164][ T5266] ftdi_sio 3-1:0.8: device disconnected [ 376.385493][ T5275] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 376.563501][ T29] audit: type=1400 audit(1722331318.647:369): avc: denied { relabelfrom } for pid=8129 comm="syz.0.570" name="" dev="pipefs" ino=20544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 379.270108][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.276610][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.459990][ T5275] usb 4-1: device not accepting address 9, error -71 [ 380.548761][ T29] audit: type=1400 audit(1722331322.597:370): avc: denied { read } for pid=8140 comm="syz.0.572" path="socket:[20364]" dev="sockfs" ino=20364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 382.642500][ T8157] overlay: Unknown parameter '/' [ 383.718478][ T8173] sp0: Synchronizing with TNC [ 384.127540][ T8197] ERROR: device name not specified. [ 384.184548][ T29] audit: type=1400 audit(1722331326.247:371): avc: denied { read } for pid=8195 comm="syz.1.581" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 384.224888][ T8197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.581'. [ 384.284992][ T29] audit: type=1400 audit(1722331326.247:372): avc: denied { open } for pid=8195 comm="syz.1.581" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 384.361975][ T8197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54833 sclass=netlink_route_socket pid=8197 comm=syz.1.581 [ 384.618681][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 384.654498][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 385.365591][ T942] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 385.585491][ T942] usb 2-1: Using ep0 maxpacket: 32 [ 385.603368][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.629522][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.645013][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 385.666197][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.683277][ T942] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 385.715420][ T942] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 385.737896][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.771530][ T942] usb 2-1: config 0 descriptor?? [ 387.336942][ T942] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 387.355821][ T942] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 387.362877][ T942] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 387.383841][ T942] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 387.415519][ T942] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 387.486753][ T942] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 391.471325][ T942] usb 2-1: USB disconnect, device number 6 [ 392.190749][ T8269] overlay: Unknown parameter '/' [ 394.209469][ T8302] vivid-002: disconnect [ 394.742660][ T8297] vivid-002: reconnect [ 394.919828][ T8283] input: syz0 as /devices/virtual/input/input11 [ 396.258582][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.275423][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.311373][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.367355][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.395814][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 396.405413][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.313483][ C0] eth0: bad gso: type: 1, size: 1408 [ 397.341289][ T8338] kvm: emulating exchange as write [ 397.980010][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 398.715590][ T5238] Bluetooth: hci4: command tx timeout [ 398.762632][ T29] audit: type=1400 audit(1722331340.847:373): avc: denied { ioctl } for pid=8498 comm="syz.1.604" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 398.807789][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.862656][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.112763][ T8334] bridge_slave_0: entered allmulticast mode [ 399.193720][ T8334] bridge_slave_0: entered promiscuous mode [ 399.236322][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.264962][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.300311][ T8334] bridge_slave_1: entered allmulticast mode [ 399.335789][ T8334] bridge_slave_1: entered promiscuous mode [ 399.622320][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.640543][ T29] audit: type=1400 audit(1722331341.727:374): avc: denied { bind } for pid=8519 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.757856][ T29] audit: type=1400 audit(1722331341.757:375): avc: denied { setopt } for pid=8519 comm="syz.1.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.913322][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.109325][ T29] audit: type=1400 audit(1722331342.197:376): avc: denied { create } for pid=8456 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.249374][ T8334] team0: Port device team_slave_0 added [ 400.308906][ T8334] team0: Port device team_slave_1 added [ 400.374779][ T29] audit: type=1400 audit(1722331342.247:377): avc: denied { block_suspend } for pid=8519 comm="syz.1.606" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.430538][ T29] audit: type=1400 audit(1722331342.427:378): avc: denied { connect } for pid=8456 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.795497][ T5238] Bluetooth: hci4: command tx timeout [ 400.826923][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.871686][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.081961][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.104600][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.166452][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.356285][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.599504][ T29] audit: type=1400 audit(1722331343.827:379): avc: denied { setopt } for pid=8627 comm="syz.1.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 402.880449][ T5238] Bluetooth: hci4: command tx timeout [ 402.979471][ T8334] hsr_slave_0: entered promiscuous mode [ 403.069815][ T8334] hsr_slave_1: entered promiscuous mode [ 403.113540][ T8334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.164209][ T8334] Cannot create hsr debugfs directory [ 405.036390][ T5238] Bluetooth: hci4: command tx timeout [ 405.349900][ T29] audit: type=1400 audit(1722331346.127:380): avc: denied { read write } for pid=8714 comm="syz.0.618" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 406.557442][ T29] audit: type=1400 audit(1722331346.137:381): avc: denied { open } for pid=8714 comm="syz.0.618" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 406.991193][ T8334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.337310][ T8334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.719296][ T8334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.046919][ T8334] bond0: (slave netdevsim0): Releasing backup interface [ 410.164247][ T8334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.326192][ T29] audit: type=1400 audit(1722331352.397:382): avc: denied { bind } for pid=8797 comm="syz.3.629" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.582439][ T29] audit: type=1400 audit(1722331352.397:383): avc: denied { node_bind } for pid=8797 comm="syz.3.629" saddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 411.446146][ T29] audit: type=1400 audit(1722331353.527:384): avc: denied { getopt } for pid=8814 comm="syz.4.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 411.704993][ T8334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.741044][ T8334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.875601][ T8334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 411.993785][ T8334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.548804][ T8861] pimreg: entered allmulticast mode [ 413.888307][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.874792][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.963186][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.970368][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.108629][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.115860][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.608520][ T8905] overlayfs: failed to resolve './file1': -2 [ 416.789465][ T8893] sp0: Synchronizing with TNC [ 417.116051][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 417.431568][ T29] audit: type=1400 audit(1722331359.517:385): avc: denied { setopt } for pid=8902 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.023122][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.258604][ T8334] veth0_vlan: entered promiscuous mode [ 418.313948][ T8334] veth1_vlan: entered promiscuous mode [ 418.509360][ T8334] veth0_macvtap: entered promiscuous mode [ 418.651668][ T8334] veth1_macvtap: entered promiscuous mode [ 418.731800][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.808766][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.855501][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.943017][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.010560][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.145585][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.157738][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.174770][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.201862][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.225947][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.263928][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.412391][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.533915][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.565505][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.616209][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.652089][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.671944][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.701144][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.736935][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.788443][ T8334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.846981][ T8334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.916686][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.955677][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 420.001574][ T8334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.031165][ T8334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.052901][ T8334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.063755][ T8334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.185503][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 420.198406][ T9] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 420.224087][ T9] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 420.326061][ T9] usb 4-1: config 0 has no interface number 0 [ 420.333393][ T9] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 420.364268][ T9] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 420.382402][ T9] usb 4-1: config 0 interface 48 has no altsetting 0 [ 420.391605][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 420.408711][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.444639][ T9] usb 4-1: config 0 descriptor?? [ 420.782399][ T2528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.874583][ T2528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.090060][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.099844][ T2528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.203125][ T29] audit: type=1400 audit(1722331363.287:386): avc: denied { setopt } for pid=8967 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 421.286834][ T2528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.358633][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.372781][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.383519][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.425977][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.468279][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.481402][ T29] audit: type=1400 audit(1722331363.567:387): avc: denied { create } for pid=8967 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 421.515436][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.537338][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.547830][ T29] audit: type=1400 audit(1722331363.577:388): avc: denied { ioctl } for pid=8967 comm="syz.3.661" path="socket:[22456]" dev="sockfs" ino=22456 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 421.579664][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.595480][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.614137][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.672578][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.720919][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.781333][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.826372][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.897446][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.938523][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 421.995402][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.019202][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.036611][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.072523][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.107594][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.142400][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.203452][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.221886][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.280478][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.342052][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.396655][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.412968][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 422.422195][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.438702][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.472057][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 422.492788][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.529564][ T942] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 422.689387][ T942] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 422.885560][ T9] usb 4-1: string descriptor 0 read error: -71 [ 422.937053][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 422.964474][ T9] gspca_vc032x: reg_r err -71 [ 422.979117][ T9] vc032x 4-1:0.48: probe with driver vc032x failed with error -71 [ 423.035082][ T9] usb 4-1: USB disconnect, device number 11 [ 423.387149][ T29] audit: type=1400 audit(1722331365.477:389): avc: denied { map } for pid=9048 comm="syz.3.673" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.075611][ T29] audit: type=1400 audit(1722331365.487:390): avc: denied { execute } for pid=9048 comm="syz.3.673" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 424.199926][ T9055] unsupported nlmsg_type 40 [ 425.263292][ T9060] sp0: Synchronizing with TNC [ 425.647799][ T9080] pimreg: entered allmulticast mode [ 426.700606][ T5275] IPVS: starting estimator thread 0... [ 426.987354][ T9111] overlay: Unknown parameter '/' [ 427.099813][ T9109] IPVS: using max 30 ests per chain, 72000 per kthread [ 427.355456][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 427.570392][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 427.986253][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 428.040469][ T5879] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 428.093227][ T5879] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 428.195342][ T5879] usb 1-1: config 0 has no interface number 0 [ 428.207104][ T5879] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 428.270027][ T5879] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 428.317086][ T5879] usb 1-1: config 0 interface 48 has no altsetting 0 [ 428.332037][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 428.346980][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.363067][ T5879] usb 1-1: config 0 descriptor?? [ 428.637364][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.658226][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.674445][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.746583][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.760918][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.772966][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.792114][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.816915][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.816987][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817007][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817026][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817045][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817063][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817082][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817115][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817134][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817153][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817172][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817190][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817209][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817228][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817261][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817280][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817299][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817317][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817336][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817355][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817403][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817422][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817441][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817459][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.817478][ T942] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.839004][ T942] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 429.670614][ T9143] capability: warning: `syz.2.686' uses deprecated v2 capabilities in a way that may be insecure [ 430.546817][ T5879] usb 1-1: string descriptor 0 read error: -71 [ 430.587467][ T5879] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 430.612974][ T5879] gspca_vc032x: reg_r err -71 [ 430.648661][ T5879] vc032x 1-1:0.48: probe with driver vc032x failed with error -71 [ 430.686676][ T29] audit: type=1400 audit(1722331372.777:391): avc: denied { connect } for pid=9169 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.712878][ T5879] usb 1-1: USB disconnect, device number 8 [ 432.454094][ T9193] capability: warning: `syz.0.695' uses 32-bit capabilities (legacy support in use) [ 432.869463][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 433.130950][ T29] audit: type=1400 audit(1722331375.217:392): avc: denied { name_bind } for pid=9204 comm="syz.4.697" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 433.221058][ T5879] usb 2-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 433.232162][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.244569][ T5879] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.260463][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.281446][ T5879] usb 2-1: SerialNumber: syz [ 433.516833][ T5238] Bluetooth: Unexpected continuation frame (len 18) [ 433.532583][ T29] audit: type=1400 audit(1722331375.617:393): avc: denied { compute_member } for pid=9192 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 433.703162][ T5879] usb 2-1: 0:2 : does not exist [ 433.735963][ T9179] input: syz0 as /devices/virtual/input/input12 [ 433.887406][ T5879] usb 2-1: USB disconnect, device number 7 [ 434.210564][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.756662][ T9249] overlay: Unknown parameter '/' [ 434.875799][ T5238] Bluetooth: hci4: command tx timeout [ 436.138477][ T29] audit: type=1400 audit(1722331377.837:394): avc: denied { ioctl } for pid=9257 comm="syz.0.701" path="/dev/vhost-net" dev="devtmpfs" ino=1085 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 442.853224][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.859794][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.694292][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 443.704652][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 443.720444][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 443.733351][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 443.741526][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 443.749321][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 444.931302][ T9361] overlay: Unknown parameter '/' [ 445.748682][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 445.835592][ T5229] Bluetooth: hci5: command tx timeout [ 448.934368][ T5229] Bluetooth: hci5: command tx timeout [ 449.057179][ T29] audit: type=1400 audit(1722331390.027:395): avc: denied { create } for pid=9428 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 449.140097][ T29] audit: type=1400 audit(1722331390.037:396): avc: denied { sys_admin } for pid=9428 comm="syz.0.715" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 454.197117][ T5229] Bluetooth: hci5: command tx timeout [ 455.637085][ T9479] netlink: 3 bytes leftover after parsing attributes in process `syz.1.721'. [ 456.088372][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 456.295834][ T9500] overlay: Unknown parameter '/' [ 456.615338][ T5238] Bluetooth: hci5: command tx timeout [ 456.831780][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 456.866929][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.881960][ T9] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 456.892212][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.904186][ T9] usb 2-1: config 0 descriptor?? [ 457.202841][ T9] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 457.223642][ T9] usb 2-1: Detected SIO [ 457.515715][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 457.836985][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.837132][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.837368][ T9300] bridge_slave_0: entered allmulticast mode [ 457.839355][ T9300] bridge_slave_0: entered promiscuous mode [ 457.842840][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.842983][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.843174][ T9300] bridge_slave_1: entered allmulticast mode [ 457.845144][ T9300] bridge_slave_1: entered promiscuous mode [ 459.223824][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.225812][ T9557] netlink: 132 bytes leftover after parsing attributes in process `syz.0.726'. [ 459.487178][ T9] usb 2-1: USB disconnect, device number 8 [ 459.526871][ T81] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.542504][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.640075][ T9] ftdi_sio 2-1:0.0: device disconnected [ 460.726802][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.739743][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.748678][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.758499][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.771242][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.779664][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.136434][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.528740][ T81] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.974241][ T9300] team0: Port device team_slave_0 added [ 462.291894][ T81] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.341192][ T9621] netlink: 100 bytes leftover after parsing attributes in process `syz.1.731'. [ 462.567398][ T9300] team0: Port device team_slave_1 added [ 462.878631][ T5229] Bluetooth: hci2: command tx timeout [ 462.927399][ T81] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.427191][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.434172][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.476635][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.603704][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.690261][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.798950][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.418326][ T9300] hsr_slave_0: entered promiscuous mode [ 464.513013][ T9300] hsr_slave_1: entered promiscuous mode [ 464.552468][ T9300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.561470][ T29] audit: type=1400 audit(1722331406.637:397): avc: denied { bind } for pid=9765 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 464.595393][ T9300] Cannot create hsr debugfs directory [ 464.815413][ T942] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 464.846278][ T29] audit: type=1400 audit(1722331406.927:398): avc: denied { write } for pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.955884][ T5229] Bluetooth: hci2: command tx timeout [ 465.140587][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 465.154270][ T29] audit: type=1400 audit(1722331406.927:399): avc: denied { remove_name } for pid=4653 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.181148][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 465.191928][ T9796] netlink: 3 bytes leftover after parsing attributes in process `syz.1.740'. [ 465.212880][ T29] audit: type=1400 audit(1722331406.927:400): avc: denied { add_name } for pid=4653 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.218545][ T942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.317166][ T942] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.395359][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.398666][ T29] audit: type=1400 audit(1722331407.477:401): avc: denied { setopt } for pid=9785 comm="syz.0.739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 465.420810][ T942] usb 5-1: config 0 descriptor?? [ 465.545950][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 465.547512][ T9761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 466.325408][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 466.374037][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 466.485673][ T46] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 466.525769][ T81] bridge_slave_1: left allmulticast mode [ 466.528260][ T942] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 466.531438][ T81] bridge_slave_1: left promiscuous mode [ 466.544462][ T942] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 466.750901][ T942] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 466.772840][ T942] usb 5-1: USB disconnect, device number 8 [ 466.788973][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.799099][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.850572][ T81] bridge_slave_0: left allmulticast mode [ 466.861814][ T81] bridge_slave_0: left promiscuous mode [ 466.862630][ T46] usb 2-1: config 0 descriptor?? [ 466.872513][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.036089][ T5229] Bluetooth: hci2: command tx timeout [ 467.158434][ T46] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 467.189097][ T46] usb 2-1: Detected SIO [ 467.218546][ T46] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 467.909717][ T9] usb 2-1: USB disconnect, device number 9 [ 467.986108][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 468.000352][ T9897] input: syz1 as /devices/virtual/input/input14 [ 468.021190][ T9] ftdi_sio 2-1:0.0: device disconnected [ 469.395054][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.417328][ T5229] Bluetooth: hci2: command tx timeout [ 469.510258][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.528061][ T81] bond0 (unregistering): Released all slaves [ 469.727258][ T9] kernel write not supported for file /vbi5 (pid: 9 comm: kworker/0:1) [ 470.943423][ T9616] chnl_net:caif_netlink_parms(): no params data found [ 471.294636][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 471.915378][ T5276] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 472.169222][ T5276] usb 5-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 472.216244][ T5276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.259853][ T5276] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.293642][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.364212][ T5276] usb 5-1: SerialNumber: syz [ 472.592733][ T81] hsr_slave_0: left promiscuous mode [ 472.601934][ T81] hsr_slave_1: left promiscuous mode [ 472.619238][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.648588][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.661654][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.706055][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.907904][ T5276] usb 5-1: 0:2 : does not exist [ 472.913185][ T81] veth1_macvtap: left promiscuous mode [ 472.929800][ T81] veth0_macvtap: left promiscuous mode [ 472.944410][ T81] veth1_vlan: left promiscuous mode [ 472.966201][ T81] veth0_vlan: left promiscuous mode [ 473.231350][ T5276] usb 5-1: USB disconnect, device number 9 [ 473.597339][ T5879] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 473.658349][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.835575][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 473.870279][ T5879] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 473.893774][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.916267][ T5879] usb 1-1: Product: syz [ 473.920503][ T5879] usb 1-1: Manufacturer: syz [ 473.940204][ T5879] usb 1-1: SerialNumber: syz [ 473.991913][ T5879] usb 1-1: config 0 descriptor?? [ 474.005019][ T5879] appledisplay 1-1:0.0: Could not find int-in endpoint [ 474.020486][ T5879] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 474.468180][ T5879] usb 1-1: USB disconnect, device number 9 [ 476.252835][ T81] team0 (unregistering): Port device team_slave_1 removed [ 476.417300][ T29] audit: type=1400 audit(1722331418.497:402): avc: denied { create } for pid=10144 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 477.288476][ T81] team0 (unregistering): Port device team_slave_0 removed [ 477.579666][ T5879] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 477.775427][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 477.790070][ T5879] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 477.805420][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.845990][ T5879] usb 2-1: Product: syz [ 477.850222][ T5879] usb 2-1: Manufacturer: syz [ 477.854868][ T5879] usb 2-1: SerialNumber: syz [ 477.879892][ T5879] usb 2-1: config 0 descriptor?? [ 477.888150][ T5879] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 478.412197][ T5266] usb 2-1: USB disconnect, device number 10 [ 478.531271][ T29] audit: type=1400 audit(1722331420.607:403): avc: denied { getopt } for pid=10144 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 478.994932][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.022003][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.045202][ T9616] bridge_slave_0: entered allmulticast mode [ 479.054689][ T9616] bridge_slave_0: entered promiscuous mode [ 479.125742][ T5277] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 479.284192][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.345456][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.352793][ T9616] bridge_slave_1: entered allmulticast mode [ 479.355419][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 479.367264][ T5277] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.419440][ T9616] bridge_slave_1: entered promiscuous mode [ 479.434536][ T5277] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.474842][ T5277] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.498007][ T5277] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.555550][ T5277] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.578844][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.741005][ T9616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.810102][ T9616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.894417][ T5277] usb 1-1: usb_control_msg returned -32 [ 479.906573][ T5277] usbtmc 1-1:16.0: can't read capabilities [ 480.039469][ T9616] team0: Port device team_slave_0 added [ 480.136702][ T9616] team0: Port device team_slave_1 added [ 480.225470][ T5266] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 480.380412][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.424594][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.468218][ T9616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.511414][ T5266] usb 2-1: config 1 has an invalid descriptor of length 80, skipping remainder of the config [ 480.548397][ T5266] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.567851][ T5266] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.586166][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.594869][ T5266] usb 2-1: SerialNumber: syz [ 480.671010][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.689085][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.731990][ T9616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.099859][ T5266] usb 2-1: 0:2 : does not exist [ 481.151648][ T5266] usb 2-1: USB disconnect, device number 11 [ 481.328209][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.469823][ T9616] hsr_slave_0: entered promiscuous mode [ 481.483038][ T9616] hsr_slave_1: entered promiscuous mode [ 481.534647][ T9616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.546891][ T9616] Cannot create hsr debugfs directory [ 481.743719][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.859252][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.891954][ T5879] usb 1-1: USB disconnect, device number 10 [ 482.133780][ T9300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 482.245190][ T5275] kernel write not supported for file /vbi1 (pid: 5275 comm: kworker/1:5) [ 482.287862][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.426172][ T9300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 482.564988][T10393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'. [ 482.600047][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.718585][ T9300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 482.810729][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 482.944821][ T9300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.488417][ T29] audit: type=1400 audit(1722331426.577:404): avc: denied { read } for pid=10459 comm="syz.4.771" name="mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 484.591322][ T29] audit: type=1400 audit(1722331426.597:405): avc: denied { open } for pid=10459 comm="syz.4.771" path="/dev/input/mice" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 484.630404][ T29] audit: type=1400 audit(1722331426.627:406): avc: denied { listen } for pid=10463 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.631522][ T81] bridge_slave_1: left allmulticast mode [ 484.713664][ T81] bridge_slave_1: left promiscuous mode [ 484.727673][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.787555][ T81] bridge_slave_0: left allmulticast mode [ 484.793251][ T81] bridge_slave_0: left promiscuous mode [ 484.822224][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.967568][T10477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.309046][ T29] audit: type=1400 audit(1722331427.399:407): avc: denied { write } for pid=10488 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 487.812635][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.893693][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.977531][ T81] bond0 (unregistering): Released all slaves [ 488.985443][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 490.323846][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.513993][ T81] hsr_slave_0: left promiscuous mode [ 490.526896][ T81] hsr_slave_1: left promiscuous mode [ 490.573653][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.601582][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.638913][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.671871][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.811445][ T81] veth1_macvtap: left promiscuous mode [ 490.822832][ T81] veth0_macvtap: left promiscuous mode [ 490.838218][ T81] veth1_vlan: left promiscuous mode [ 490.844512][ T81] veth0_vlan: left promiscuous mode [ 491.385479][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 491.635046][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 491.664282][ T46] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 491.694585][ T46] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 491.710918][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.739660][ T46] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 491.759988][ T46] usb 5-1: config 0 has no interface number 0 [ 491.770130][ T46] usb 5-1: config 0 has no interface number 1 [ 491.805613][ T46] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 491.832957][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.912385][ T46] usb 5-1: config 0 descriptor?? [ 491.940869][ T46] usb 5-1: unknown number of interfaces: 2 [ 492.464109][T10588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.492688][T10588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.654672][T10592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.787'. [ 492.668744][ T29] audit: type=1400 audit(1722331434.739:408): avc: denied { nlmsg_read } for pid=10589 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 493.421395][ T81] team0 (unregistering): Port device team_slave_1 removed [ 493.562434][ T81] team0 (unregistering): Port device team_slave_0 removed [ 494.834996][ T46] usb 5-1: USB disconnect, device number 10 [ 494.981981][ T29] audit: type=1400 audit(1722331437.069:409): avc: denied { name_bind } for pid=10607 comm="syz.0.789" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 495.555876][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 496.402504][ T46] usb 5-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=5d.5a [ 496.420209][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.436666][ T46] usb 5-1: Product: syz [ 496.445628][ T46] usb 5-1: Manufacturer: syz [ 496.450904][ T46] usb 5-1: SerialNumber: syz [ 496.489662][ T46] usb 5-1: config 0 descriptor?? [ 501.579283][ T46] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 501.611270][ T46] asix 5-1:0.0: probe with driver asix failed with error -71 [ 501.725925][ T46] usb 5-1: USB disconnect, device number 11 [ 502.109961][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.122251][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.120017][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.211557][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.218903][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.219038][ T29] audit: type=1400 audit(1722331445.639:410): avc: denied { setopt } for pid=10652 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 504.617422][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.628095][T10673] ------------[ cut here ]------------ [ 504.633924][T10673] WARNING: CPU: 1 PID: 10673 at include/net/mac80211.h:6993 minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 504.645589][T10673] Modules linked in: [ 504.649489][T10673] CPU: 1 UID: 0 PID: 10673 Comm: syz.4.801 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.660185][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 504.670293][T10673] RIP: 0010:minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 504.677803][T10673] Code: 03 0f 8e 49 07 00 00 44 89 f6 89 df 45 8b 6c 24 10 e8 ca b2 e8 f6 44 39 f3 0f 8c dc f3 ff ff 4c 8b 64 24 10 e8 77 b8 e8 f6 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 [ 504.697508][T10673] RSP: 0018:ffffc900036f71b0 EFLAGS: 00010287 [ 504.703654][T10673] RAX: 00000000000049a3 RBX: 000000000000000c RCX: ffffc9000c3ce000 [ 504.711763][T10673] RDX: 0000000000040000 RSI: ffffffff8aa1c2b9 RDI: 0000000000000004 [ 504.719805][T10673] RBP: dffffc0000000000 R08: 0000000000000004 R09: 000000000000000c [ 504.727907][T10673] R10: 000000000000000c R11: 0000000000000000 R12: ffff88801ec9dc38 [ 504.735895][T10673] R13: 0000000000000000 R14: 000000000000000c R15: ffffed1003d9361c [ 504.743953][T10673] FS: 00007f3644f9e6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 504.752900][T10673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.759503][T10673] CR2: 00007f9d04dffd00 CR3: 0000000011c2c000 CR4: 00000000003506f0 [ 504.767491][T10673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.775474][T10673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 504.783436][T10673] Call Trace: [ 504.786729][T10673] [ 504.789654][T10673] ? show_regs+0x8c/0xa0 [ 504.793923][T10673] ? __warn+0xe5/0x3c0 [ 504.798029][T10673] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 504.804797][T10673] ? report_bug+0x3c0/0x580 [ 504.809315][T10673] ? handle_bug+0x3d/0x70 [ 504.813637][T10673] ? exc_invalid_op+0x17/0x50 [ 504.818328][T10673] ? asm_exc_invalid_op+0x1a/0x20 [ 504.823351][T10673] ? minstrel_ht_update_caps.constprop.0+0xff9/0x1a90 [ 504.830149][T10673] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 504.836968][T10673] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 504.842341][T10673] rate_control_rate_init+0x2fa/0x690 [ 504.847734][T10673] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 504.853972][T10673] sta_apply_parameters+0xb6e/0x1740 [ 504.859278][T10673] ieee80211_add_station+0x3fa/0x6c0 [ 504.864558][T10673] nl80211_new_station+0x146d/0x1bf0 [ 504.869864][T10673] ? __rtnl_unlock+0x68/0xf0 [ 504.874452][T10673] ? __pfx_nl80211_new_station+0x10/0x10 [ 504.880108][T10673] ? ref_tracker_alloc+0x2ef/0x5b0 [ 504.885261][T10673] ? nl80211_pre_doit+0x1b0/0xb10 [ 504.890306][T10673] genl_family_rcv_msg_doit+0x202/0x2f0 [ 504.895901][T10673] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.902026][T10673] ? ns_capable+0xd7/0x110 [ 504.906472][T10673] genl_rcv_msg+0x565/0x800 [ 504.910993][T10673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.916058][T10673] ? __pfx___lock_acquire+0x10/0x10 [ 504.921262][T10673] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 504.926686][T10673] ? __pfx_nl80211_new_station+0x10/0x10 [ 504.932319][T10673] ? __pfx_nl80211_post_doit+0x10/0x10 [ 504.937795][T10673] netlink_rcv_skb+0x16b/0x440 [ 504.942557][T10673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.947623][T10673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.952900][T10673] ? down_read+0xc9/0x330 [ 504.957245][T10673] ? __pfx_down_read+0x10/0x10 [ 504.962089][T10673] ? netlink_deliver_tap+0x1ae/0xd90 [ 504.967556][T10673] genl_rcv+0x28/0x40 [ 504.971547][T10673] netlink_unicast+0x544/0x830 [ 504.976330][T10673] ? __pfx_netlink_unicast+0x10/0x10 [ 504.981639][T10673] netlink_sendmsg+0x8b8/0xd70 [ 504.986425][T10673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.991710][T10673] ? __import_iovec+0x1fd/0x6e0 [ 504.996689][T10673] ____sys_sendmsg+0xab5/0xc90 [ 505.001472][T10673] ? copy_msghdr_from_user+0x10b/0x160 [ 505.006976][T10673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.012261][T10673] ? __pfx___futex_wait+0x10/0x10 [ 505.017312][T10673] ? __pfx___lock_acquire+0x10/0x10 [ 505.022513][T10673] ___sys_sendmsg+0x135/0x1e0 [ 505.027212][T10673] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.032416][T10673] ? __fget_light+0x173/0x210 [ 505.037122][T10673] __sys_sendmsg+0x117/0x1f0 [ 505.041715][T10673] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.046845][T10673] ? __x64_sys_futex+0x1e1/0x4c0 [ 505.051779][T10673] do_syscall_64+0xcd/0x250 [ 505.056299][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.062190][T10673] RIP: 0033:0x7f3644177299 [ 505.066651][T10673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.086626][T10673] RSP: 002b:00007f3644f9e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.095038][T10673] RAX: ffffffffffffffda RBX: 00007f3644306058 RCX: 00007f3644177299 [ 505.103057][T10673] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 505.111060][T10673] RBP: 00007f36441e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 505.119059][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.127047][T10673] R13: 000000000000006e R14: 00007f3644306058 R15: 00007fff92d34688 [ 505.135101][T10673] [ 505.138131][T10673] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 505.145409][T10673] CPU: 1 UID: 0 PID: 10673 Comm: syz.4.801 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 505.156097][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 505.166141][T10673] Call Trace: [ 505.169421][T10673] [ 505.172346][T10673] dump_stack_lvl+0x3d/0x1f0 [ 505.176938][T10673] panic+0x6f5/0x7a0 [ 505.180850][T10673] ? __pfx_panic+0x10/0x10 [ 505.185265][T10673] ? show_trace_log_lvl+0x363/0x500 [ 505.190486][T10673] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 505.197249][T10673] check_panic_on_warn+0xab/0xb0 [ 505.202198][T10673] __warn+0xf1/0x3c0 [ 505.206120][T10673] ? minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 505.212902][T10673] report_bug+0x3c0/0x580 [ 505.217228][T10673] handle_bug+0x3d/0x70 [ 505.221378][T10673] exc_invalid_op+0x17/0x50 [ 505.225873][T10673] asm_exc_invalid_op+0x1a/0x20 [ 505.230717][T10673] RIP: 0010:minstrel_ht_update_caps.constprop.0+0xffa/0x1a90 [ 505.238089][T10673] Code: 03 0f 8e 49 07 00 00 44 89 f6 89 df 45 8b 6c 24 10 e8 ca b2 e8 f6 44 39 f3 0f 8c dc f3 ff ff 4c 8b 64 24 10 e8 77 b8 e8 f6 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 [ 505.257690][T10673] RSP: 0018:ffffc900036f71b0 EFLAGS: 00010287 [ 505.263750][T10673] RAX: 00000000000049a3 RBX: 000000000000000c RCX: ffffc9000c3ce000 [ 505.271725][T10673] RDX: 0000000000040000 RSI: ffffffff8aa1c2b9 RDI: 0000000000000004 [ 505.279796][T10673] RBP: dffffc0000000000 R08: 0000000000000004 R09: 000000000000000c [ 505.287760][T10673] R10: 000000000000000c R11: 0000000000000000 R12: ffff88801ec9dc38 [ 505.295721][T10673] R13: 0000000000000000 R14: 000000000000000c R15: ffffed1003d9361c [ 505.303702][T10673] ? minstrel_ht_update_caps.constprop.0+0xff9/0x1a90 [ 505.310474][T10673] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 505.315858][T10673] rate_control_rate_init+0x2fa/0x690 [ 505.321227][T10673] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 505.327462][T10673] sta_apply_parameters+0xb6e/0x1740 [ 505.332744][T10673] ieee80211_add_station+0x3fa/0x6c0 [ 505.338026][T10673] nl80211_new_station+0x146d/0x1bf0 [ 505.343309][T10673] ? __rtnl_unlock+0x68/0xf0 [ 505.347896][T10673] ? __pfx_nl80211_new_station+0x10/0x10 [ 505.353523][T10673] ? ref_tracker_alloc+0x2ef/0x5b0 [ 505.358637][T10673] ? nl80211_pre_doit+0x1b0/0xb10 [ 505.363655][T10673] genl_family_rcv_msg_doit+0x202/0x2f0 [ 505.369196][T10673] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 505.375266][T10673] ? ns_capable+0xd7/0x110 [ 505.379704][T10673] genl_rcv_msg+0x565/0x800 [ 505.384201][T10673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.389214][T10673] ? __pfx___lock_acquire+0x10/0x10 [ 505.394409][T10673] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 505.399779][T10673] ? __pfx_nl80211_new_station+0x10/0x10 [ 505.405503][T10673] ? __pfx_nl80211_post_doit+0x10/0x10 [ 505.410958][T10673] netlink_rcv_skb+0x16b/0x440 [ 505.415720][T10673] ? __pfx_genl_rcv_msg+0x10/0x10 [ 505.420738][T10673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.426016][T10673] ? down_read+0xc9/0x330 [ 505.430337][T10673] ? __pfx_down_read+0x10/0x10 [ 505.435090][T10673] ? netlink_deliver_tap+0x1ae/0xd90 [ 505.440375][T10673] genl_rcv+0x28/0x40 [ 505.444350][T10673] netlink_unicast+0x544/0x830 [ 505.449103][T10673] ? __pfx_netlink_unicast+0x10/0x10 [ 505.454379][T10673] netlink_sendmsg+0x8b8/0xd70 [ 505.459142][T10673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.464449][T10673] ? __import_iovec+0x1fd/0x6e0 [ 505.469299][T10673] ____sys_sendmsg+0xab5/0xc90 [ 505.474087][T10673] ? copy_msghdr_from_user+0x10b/0x160 [ 505.479556][T10673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.484835][T10673] ? __pfx___futex_wait+0x10/0x10 [ 505.489861][T10673] ? __pfx___lock_acquire+0x10/0x10 [ 505.495057][T10673] ___sys_sendmsg+0x135/0x1e0 [ 505.499733][T10673] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.504932][T10673] ? __fget_light+0x173/0x210 [ 505.509620][T10673] __sys_sendmsg+0x117/0x1f0 [ 505.514249][T10673] ? __pfx___sys_sendmsg+0x10/0x10 [ 505.519397][T10673] ? __x64_sys_futex+0x1e1/0x4c0 [ 505.524345][T10673] do_syscall_64+0xcd/0x250 [ 505.528845][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.534732][T10673] RIP: 0033:0x7f3644177299 [ 505.539137][T10673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.558998][T10673] RSP: 002b:00007f3644f9e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.567407][T10673] RAX: ffffffffffffffda RBX: 00007f3644306058 RCX: 00007f3644177299 [ 505.575375][T10673] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 505.583450][T10673] RBP: 00007f36441e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 505.591415][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.599377][T10673] R13: 000000000000006e R14: 00007f3644306058 R15: 00007fff92d34688 [ 505.607346][T10673] [ 505.610602][T10673] Kernel Offset: disabled [ 505.615033][T10673] Rebooting in 86400 seconds..