last executing test programs: 20.96138556s ago: executing program 1 (id=453): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_genetlink_get_family_id$batadv(0x0, r5) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f000001ff80)=ANY=[@ANYBLOB="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"/2590], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 19.345184362s ago: executing program 1 (id=687): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 17.935768839s ago: executing program 1 (id=691): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) dup3(r3, r0, 0x0) 17.340980472s ago: executing program 1 (id=695): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) 16.878525895s ago: executing program 1 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 16.523905684s ago: executing program 1 (id=699): mkdir(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00'}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) 11.117484925s ago: executing program 4 (id=704): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x563040, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)={0x3, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}, {0x100000, 0x8b, &(0x7f0000000700)=""/139}, {0x3000, 0x38, &(0x7f0000000580)=""/56}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x4040, 0x40) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r5, 0x1, r2, 0x3, 0x80000}) accept4$inet6(r0, &(0x7f00000002c0), &(0x7f0000000600)=0x1c, 0x80000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x60000, 0x0) r7 = accept4$inet6(r6, &(0x7f0000000500)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000540)=0x1c, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)=r5) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000004900d96d28bd7000fedbdf250a003800", @ANYRES32=r6, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}}, 0x0) 9.98621586s ago: executing program 4 (id=706): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) pause() 9.879075945s ago: executing program 2 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, 0xffffffffffffffff, 0x4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 9.361928564s ago: executing program 0 (id=709): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 9.228510389s ago: executing program 2 (id=710): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x7, 0x40, 0x8, 0x6, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @multicast1}}}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="190000000400000008000000ff7f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 8.938570461s ago: executing program 0 (id=711): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 8.824581109s ago: executing program 4 (id=713): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x1a, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x9, 0x5, 0x5, 0x9, 0x100}, @printk={@lli}, @alu={0x7, 0x0, 0x2, 0xa, 0x3, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x3, 0xb, 0x80, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000052000100000000000000000002"], 0x1c}}, 0x0) socket(0x29, 0x800000003, 0x80000002) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000500), &(0x7f0000000580)=0x68) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x7ffd}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f00000002c0)=""/130, 0x82}) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f408, 0x0) 8.549215547s ago: executing program 0 (id=714): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 8.429857465s ago: executing program 2 (id=716): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0xb0, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}]}}}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e0059014fa0fe22b9a5af49321374494"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "810f813930bdcae5415f1d6bb298f1c7"}]}, @IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x66f, 0x1a7, 0x4}}]}, {0x4}, {0x4}, {0x4}]}]}, 0xb0}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x80) 8.022976875s ago: executing program 2 (id=717): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.614444093s ago: executing program 2 (id=718): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x6dc, 0x5, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0xd, @void, @value, @void, @value}, 0xffffffffffffff57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x100, 0x0, &(0x7f00000007c0)=[@increfs, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/58, 0x3a, 0x0, 0x2c}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@handle={0x73682a85, 0x1000, 0x2}, @flat=@handle, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/19, 0x13, 0x1, 0xb}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/110, 0x6e, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/207, 0xcf, 0x2, 0x1d}, @fda={0x66646185, 0x8, 0x1, 0x13}}, &(0x7f0000000780)={0x0, 0x28, 0x50}}}], 0x90, 0x0, &(0x7f00000008c0)="fbf70e95dc450a811eb90eef3178c094f8610c6ae788cc5e6455668e92a86141f553d1e59478f4e964dd10452a2fe99f605c97931164f3af3f71a1706dc2a63f02886ffb783b0349513fa3e45f0cda0ad74f925bcb38f421593811d561b6558e59785b3a0c9608840f7f3f3170d0af978ce232cfb5b88d692191559035407d378ebe550503222ef65c53dbc7a9582ef7"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x9, 0x16, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_nat_t_port={0x1, 0x15}, @sadb_x_nat_t_type={0x1}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x10000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}]}, 0xb0}, 0x1, 0x7}, 0x0) 7.238517395s ago: executing program 2 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x101}, 0x14}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 5.536117231s ago: executing program 4 (id=721): munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x8000000004a4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000e00851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000480000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 5.507230814s ago: executing program 3 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) personality(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) 5.210849352s ago: executing program 0 (id=723): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "14db65a2"}]}}, 0x0}, 0x0) 3.890489558s ago: executing program 3 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0'}, 0xb) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.545259826s ago: executing program 3 (id=725): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x2) 2.375237961s ago: executing program 3 (id=726): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}]}}}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000f40)={0x4a8, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xed0}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff, 0x7, 0x3, 0x5}, {0x5, 0x0, 0x3, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x67}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}]}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}}, 0xe8) 2.182558289s ago: executing program 4 (id=727): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000040)) 1.949420587s ago: executing program 0 (id=728): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 988.578889ms ago: executing program 3 (id=729): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000002640)=[{&(0x7f0000002600)="2614", 0x2}], 0x1) 330.594874ms ago: executing program 4 (id=730): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$getregset(0x4204, 0x0, 0x4a1ef906870c7c90, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 61.119393ms ago: executing program 0 (id=731): socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0xc0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000000c0), 0x5005) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000540)=@v1={0x0, @aes128, 0x1, @auto="7640aceca2062234"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x1}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) 0s ago: executing program 3 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000640)=""/30, 0x1001) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00), 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7a00, 0x0, 0x0) kernel console output (not intermixed with test programs): =system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 346.364431][ T29] audit: type=1400 audit(2000000164.980:444): avc: denied { ioctl } for pid=6845 comm="syz-executor" path="socket:[13476]" dev="sockfs" ino=13476 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.380591][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.417720][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.426989][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.456095][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 346.471235][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.480701][ T46] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 346.538007][ T29] audit: type=1400 audit(2000000165.190:445): avc: denied { mounton } for pid=6845 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 347.108784][ T46] usb 3-1: USB disconnect, device number 6 [ 348.572136][ T4615] Bluetooth: hci5: command tx timeout [ 352.019037][ T4615] Bluetooth: hci5: command tx timeout [ 352.615876][ T29] audit: type=1400 audit(2000000171.290:446): avc: denied { write } for pid=6887 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.731436][ T29] audit: type=1400 audit(2000000171.410:447): avc: denied { audit_write } for pid=6886 comm="syz.4.423" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 352.858404][ T29] audit: type=1107 audit(2000000171.410:448): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 353.412304][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 355.343116][ T6906] syz.1.427: attempt to access beyond end of device [ 355.343116][ T6906] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 355.412216][ T5234] Bluetooth: hci5: command tx timeout [ 356.068332][ T6737] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 356.178182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 356.188658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 356.433015][ T6737] usb 3-1: device descriptor read/all, error -71 [ 357.475740][ T5234] Bluetooth: hci5: command tx timeout [ 357.656083][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.745448][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.818661][ T6845] bridge_slave_0: entered allmulticast mode [ 357.870236][ T6845] bridge_slave_0: entered promiscuous mode [ 357.911944][ T29] audit: type=1400 audit(2000000176.590:449): avc: denied { read write } for pid=6924 comm="syz.3.435" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 357.980169][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.039485][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.085977][ T6845] bridge_slave_1: entered allmulticast mode [ 358.107319][ T29] audit: type=1400 audit(2000000176.590:450): avc: denied { open } for pid=6924 comm="syz.3.435" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 358.182029][ T6845] bridge_slave_1: entered promiscuous mode [ 358.216931][ T29] audit: type=1400 audit(2000000176.620:451): avc: denied { mounton } for pid=6924 comm="syz.3.435" path="/92/file0" dev="tmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 358.333583][ T29] audit: type=1400 audit(2000000177.010:452): avc: denied { unmount } for pid=5230 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 358.507824][ T29] audit: type=1400 audit(2000000177.070:453): avc: denied { connect } for pid=6931 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.631402][ T29] audit: type=1400 audit(2000000177.090:454): avc: denied { write } for pid=6931 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.732557][ T29] audit: type=1400 audit(2000000177.360:455): avc: denied { read } for pid=6934 comm="syz.2.439" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 359.278328][ T29] audit: type=1400 audit(2000000177.360:456): avc: denied { open } for pid=6934 comm="syz.2.439" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 359.853827][ T29] audit: type=1400 audit(2000000178.500:457): avc: denied { create } for pid=6938 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.199372][ T29] audit: type=1400 audit(2000000178.500:458): avc: denied { connect } for pid=6938 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.615981][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.141209][ T6960] usb usb8: usbfs: process 6960 (syz.2.445) did not claim interface 0 before use [ 361.228847][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.278611][ T6845] team0: Port device team_slave_0 added [ 363.352893][ T6845] team0: Port device team_slave_1 added [ 364.305952][ T6974] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 364.326493][ T6975] netlink: 'syz.3.447': attribute type 4 has an invalid length. [ 364.607808][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 364.607835][ T29] audit: type=1400 audit(2000000183.280:464): avc: denied { getopt } for pid=6971 comm="syz.4.448" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.690104][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.745617][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.876303][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.239270][ T29] audit: type=1400 audit(2000000184.710:465): avc: denied { create } for pid=6981 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.101000][ T29] audit: type=1400 audit(2000000184.710:466): avc: denied { write } for pid=6981 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.467882][ T29] audit: type=1400 audit(2000000184.710:467): avc: denied { nlmsg_write } for pid=6981 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.519360][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.587250][ T29] audit: type=1400 audit(2000000184.910:468): avc: denied { ioctl } for pid=6981 comm="syz.3.450" path="socket:[13255]" dev="sockfs" ino=13255 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 367.619112][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.690044][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.775909][ T29] audit: type=1400 audit(2000000186.450:469): avc: denied { write } for pid=6995 comm="syz.2.451" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 368.253788][ T2470] bridge_slave_1: left allmulticast mode [ 368.261912][ T2470] bridge_slave_1: left promiscuous mode [ 368.274468][ T2470] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.345118][ T2470] bridge_slave_0: left allmulticast mode [ 368.356348][ T2470] bridge_slave_0: left promiscuous mode [ 368.372556][ T2470] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.073116][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.111782][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.121619][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.135266][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.158070][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 371.170050][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.561868][ T2470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.574948][ T2470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.910674][ T2470] bond0 (unregistering): Released all slaves [ 372.389717][ T6845] hsr_slave_0: entered promiscuous mode [ 372.407167][ T6845] hsr_slave_1: entered promiscuous mode [ 372.469299][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.476980][ T6845] Cannot create hsr debugfs directory [ 373.421790][ T5234] Bluetooth: hci1: command tx timeout [ 375.077768][ T29] audit: type=1400 audit(2000000193.170:470): avc: denied { create } for pid=7042 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 375.345122][ T29] audit: type=1400 audit(2000000194.020:471): avc: denied { setopt } for pid=7046 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.448669][ T5234] Bluetooth: hci1: command tx timeout [ 377.528943][ T5234] Bluetooth: hci1: command tx timeout [ 379.090234][ T2470] hsr_slave_0: left promiscuous mode [ 379.130770][ T2470] hsr_slave_1: left promiscuous mode [ 379.148599][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.169375][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.248991][ T4615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.273863][ T4615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.299852][ T4615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.311485][ T4615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.321702][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 379.329561][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.609041][ T5234] Bluetooth: hci1: command tx timeout [ 379.950587][ T2470] team0 (unregistering): Port device team_slave_1 removed [ 380.027791][ T2470] team0 (unregistering): Port device team_slave_0 removed [ 380.842252][ T7052] veth1_macvtap: left promiscuous mode [ 380.854926][ T7053] veth1_macvtap: entered promiscuous mode [ 380.861143][ T7053] macsec0: entered allmulticast mode [ 380.866497][ T7053] veth1_macvtap: entered allmulticast mode [ 381.377882][ T5234] Bluetooth: hci4: command tx timeout [ 381.837779][ T6312] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 382.339576][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.404097][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.430286][ T6312] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 382.487425][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.650547][ T6312] usb 3-1: config 0 descriptor?? [ 383.389203][ T6312] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 383.448677][ T5234] Bluetooth: hci4: command tx timeout [ 383.487842][ T6312] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected [ 383.583610][ T6312] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 383.670675][ T6312] usb 3-1: USB disconnect, device number 9 [ 383.756270][ T6312] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected [ 384.419240][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.425696][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.773308][ T29] audit: type=1400 audit(2000000203.440:472): avc: denied { read } for pid=7097 comm="syz.2.469" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.796465][ T29] audit: type=1400 audit(2000000203.440:473): avc: denied { open } for pid=7097 comm="syz.2.469" path="/dev/ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.826136][ T29] audit: type=1400 audit(2000000203.440:474): avc: denied { ioctl } for pid=7097 comm="syz.2.469" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 385.537764][ T5234] Bluetooth: hci4: command tx timeout [ 387.368681][ T3036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.627793][ T5234] Bluetooth: hci4: command tx timeout [ 388.583821][ T3036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.944421][ T3036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.071449][ T3036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.403705][ T5284] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 390.770317][ T5284] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 390.845174][ T5284] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 391.058240][ T5284] usb 3-1: config 1 interface 0 has no altsetting 0 [ 391.072799][ T5284] usb 3-1: string descriptor 0 read error: -71 [ 391.092616][ T5284] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.40 [ 391.106376][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.142615][ T5284] usb 3-1: can't set config #1, error -71 [ 391.176263][ T5284] usb 3-1: USB disconnect, device number 10 [ 391.224067][ T3036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.251721][ T6845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.355362][ T6845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.375149][ T6845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.447305][ T3036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.684074][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 391.781364][ T7029] chnl_net:caif_netlink_parms(): no params data found [ 391.820807][ T6845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.995955][ T3036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.357418][ T3036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.174965][ T29] audit: type=1400 audit(2000000212.720:475): avc: denied { read } for pid=7152 comm="syz.4.480" name="rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 394.832421][ T29] audit: type=1400 audit(2000000212.720:476): avc: denied { open } for pid=7152 comm="syz.4.480" path="/dev/rtc0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 394.862454][ T29] audit: type=1400 audit(2000000212.770:477): avc: denied { ioctl } for pid=7152 comm="syz.4.480" path="/dev/rtc0" dev="devtmpfs" ino=838 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 394.923741][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.941829][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.962226][ T7062] bridge_slave_0: entered allmulticast mode [ 394.999572][ T7062] bridge_slave_0: entered promiscuous mode [ 395.034967][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.062732][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.077231][ T7062] bridge_slave_1: entered allmulticast mode [ 395.098766][ T7062] bridge_slave_1: entered promiscuous mode [ 395.546104][ T7169] netlink: 'syz.2.481': attribute type 27 has an invalid length. [ 396.719271][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.730918][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.857935][ T5283] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 397.047840][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 397.056982][ T5283] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.080600][ T5283] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 397.097710][ T5283] usb 5-1: config 1 interface 0 has no altsetting 0 [ 397.125685][ T5283] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 397.138730][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.147024][ T5283] usb 5-1: Product: syz [ 397.152529][ T5283] usb 5-1: Manufacturer: syz [ 397.157329][ T5283] usb 5-1: SerialNumber: syz [ 397.248812][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.295935][ T7169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.503744][ T7169] veth0_vlan: left allmulticast mode [ 397.598187][ T7169] veth1_macvtap: left allmulticast mode [ 397.615054][ T7169] macsec0: left allmulticast mode [ 397.655703][ T7169] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.670650][ T7169] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.691362][ T7169] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.712313][ T7169] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.944415][ T7029] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.957324][ T7029] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.985651][ T7029] bridge_slave_0: entered allmulticast mode [ 398.018775][ T7029] bridge_slave_0: entered promiscuous mode [ 398.066460][ T7029] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.088169][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.108174][ T7029] bridge_slave_1: entered allmulticast mode [ 398.155317][ T7029] bridge_slave_1: entered promiscuous mode [ 398.195078][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.215053][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.742324][ T5283] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 398.764564][ T4662] bcm5974 5-1:1.0: could not read from device [ 398.783767][ T29] audit: type=1400 audit(2000000217.440:478): avc: denied { read } for pid=4662 comm="acpid" name="mouse1" dev="devtmpfs" ino=2445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.539233][ T4543] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.548440][ T29] audit: type=1400 audit(2000000217.440:479): avc: denied { open } for pid=4662 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 399.597317][ T4662] bcm5974 5-1:1.0: could not read from device [ 399.610417][ T4662] bcm5974 5-1:1.0: could not read from device [ 399.619990][ T5283] usb 5-1: USB disconnect, device number 4 [ 400.614054][ T7029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.927079][ T7062] team0: Port device team_slave_0 added [ 400.942009][ T7062] team0: Port device team_slave_1 added [ 401.074714][ T7029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.527923][ T5234] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 402.257282][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.315609][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.420780][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.584063][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.601366][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.638070][ T6738] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 402.645919][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.677976][ T3036] bridge_slave_1: left allmulticast mode [ 402.685123][ T3036] bridge_slave_1: left promiscuous mode [ 402.692043][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.703351][ T3036] bridge_slave_0: left allmulticast mode [ 402.710663][ T3036] bridge_slave_0: left promiscuous mode [ 402.716582][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.739737][ T3036] bridge_slave_1: left allmulticast mode [ 402.745476][ T3036] bridge_slave_1: left promiscuous mode [ 402.755804][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.775992][ T3036] bridge_slave_0: left allmulticast mode [ 402.794525][ T3036] bridge_slave_0: left promiscuous mode [ 402.802576][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.851519][ T6738] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 402.868486][ T6738] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 402.891363][ T6738] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 402.904793][ T6738] usb 3-1: config 0 interface 0 has no altsetting 0 [ 402.917660][ T6738] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 402.932538][ T6738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.943477][ T6738] usb 3-1: Product: syz [ 402.948105][ T6738] usb 3-1: Manufacturer: syz [ 402.952853][ T6738] usb 3-1: SerialNumber: syz [ 402.965763][ T6738] usb 3-1: config 0 descriptor?? [ 404.689803][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.714700][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.747479][ T3036] bond0 (unregistering): Released all slaves [ 404.941297][ T6738] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.953286][ T6738] usb 3-1: selecting invalid altsetting 0 [ 405.041771][ T6738] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 405.077187][ T6738] usb 3-1: USB disconnect, device number 11 [ 405.103328][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.117798][ T7190] udevd[7190]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.150282][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.180929][ T3036] bond0 (unregistering): Released all slaves [ 405.212868][ T7029] team0: Port device team_slave_0 added [ 405.451155][ T7029] team0: Port device team_slave_1 added [ 405.965586][ T29] audit: type=1400 audit(2000000224.640:480): avc: denied { setopt } for pid=7209 comm="syz.4.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 406.989272][ T29] audit: type=1400 audit(2000000225.650:481): avc: denied { bind } for pid=7213 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 407.085823][ T29] audit: type=1400 audit(2000000225.650:482): avc: denied { name_bind } for pid=7213 comm="syz.4.490" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 407.168031][ T29] audit: type=1400 audit(2000000225.650:483): avc: denied { node_bind } for pid=7213 comm="syz.4.490" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 407.211655][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.227764][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.257406][ T29] audit: type=1400 audit(2000000225.730:484): avc: denied { mount } for pid=7213 comm="syz.4.490" name="/" dev="ramfs" ino=14735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 407.292379][ T7029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.351467][ T7029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.361119][ T7029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.390032][ T7029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.445330][ T7062] hsr_slave_0: entered promiscuous mode [ 407.489168][ T7062] hsr_slave_1: entered promiscuous mode [ 408.006849][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.027968][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.038869][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.048322][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.061029][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.069425][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.901777][ T29] audit: type=1326 audit(2000000227.580:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 408.998211][ T29] audit: type=1326 audit(2000000227.620:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 409.127912][ T29] audit: type=1326 audit(2000000227.630:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 409.222521][ T29] audit: type=1326 audit(2000000227.630:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 409.345528][ T29] audit: type=1326 audit(2000000227.630:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7227 comm="syz.2.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 410.177045][ T4615] Bluetooth: hci0: command tx timeout [ 410.374269][ T7029] hsr_slave_0: entered promiscuous mode [ 410.427222][ T7029] hsr_slave_1: entered promiscuous mode [ 410.467764][ T7029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.531858][ T7029] Cannot create hsr debugfs directory [ 411.152007][ T29] audit: type=1400 audit(2000000229.770:490): avc: denied { bind } for pid=7241 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.233283][ T3036] hsr_slave_0: left promiscuous mode [ 412.305124][ T3036] hsr_slave_1: left promiscuous mode [ 412.311338][ T4615] Bluetooth: hci0: command tx timeout [ 412.582793][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.647281][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.771745][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.855567][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.061951][ T3036] hsr_slave_0: left promiscuous mode [ 413.124079][ T3036] hsr_slave_1: left promiscuous mode [ 413.152996][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.167947][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.195530][ T3036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.238654][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.455190][ T3036] veth1_macvtap: left allmulticast mode [ 413.482707][ T3036] veth1_macvtap: left promiscuous mode [ 413.494165][ T3036] veth0_macvtap: left promiscuous mode [ 413.505920][ T3036] veth1_vlan: left promiscuous mode [ 413.540447][ T3036] veth1_macvtap: left promiscuous mode [ 413.546151][ T3036] veth0_macvtap: left promiscuous mode [ 413.565775][ T3036] veth1_vlan: left promiscuous mode [ 414.327814][ T4615] Bluetooth: hci0: command tx timeout [ 416.417872][ T4615] Bluetooth: hci0: command tx timeout [ 417.024073][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 417.172221][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 418.702098][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 418.776603][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 419.623891][ T7262] bridge0: port 3(erspan0) entered blocking state [ 419.631358][ T7262] bridge0: port 3(erspan0) entered disabled state [ 419.638134][ T7262] erspan0: entered allmulticast mode [ 419.646054][ T7262] erspan0: entered promiscuous mode [ 421.962570][ T7223] chnl_net:caif_netlink_parms(): no params data found [ 422.066315][ T29] audit: type=1400 audit(2000000240.740:491): avc: denied { map } for pid=7307 comm="syz.4.507" path="socket:[14925]" dev="sockfs" ino=14925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 424.553725][ T7062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 424.709570][ T7062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.092664][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.118133][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.137453][ T7223] bridge_slave_0: entered allmulticast mode [ 425.172420][ T7223] bridge_slave_0: entered promiscuous mode [ 425.217369][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.246837][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.275894][ T7223] bridge_slave_1: entered allmulticast mode [ 425.302388][ T7223] bridge_slave_1: entered promiscuous mode [ 425.413829][ T7062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 425.436820][ T7062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 425.791742][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.166451][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.187382][ T7371] ŞŞŞŞŞŞ: renamed from vlan0 [ 426.966515][ T7223] team0: Port device team_slave_0 added [ 427.023021][ T7380] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.023571][ T7223] team0: Port device team_slave_1 added [ 428.025523][ T29] audit: type=1400 audit(2000000246.490:492): avc: denied { mounton } for pid=7386 comm="syz.4.520" path="/proc/431/task" dev="proc" ino=15163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 428.467134][ T29] audit: type=1400 audit(2000000246.510:493): avc: denied { mount } for pid=7386 comm="syz.4.520" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 428.653019][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.696232][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.763944][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.853202][ T29] audit: type=1400 audit(2000000247.540:494): avc: denied { setopt } for pid=7395 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.931121][ T29] audit: type=1400 audit(2000000247.540:495): avc: denied { write } for pid=7395 comm="syz.4.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 429.028088][ T29] audit: type=1400 audit(2000000247.590:496): avc: denied { create } for pid=7398 comm="syz.2.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 429.120467][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.127504][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.228690][ T29] audit: type=1400 audit(2000000247.880:497): avc: denied { create } for pid=7404 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 429.278599][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.298025][ T29] audit: type=1400 audit(2000000247.920:498): avc: denied { create } for pid=7404 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 429.482355][ T7408] serio: Serial port ptm0 [ 429.637674][ T29] audit: type=1400 audit(2000000248.310:499): avc: denied { unmount } for pid=7404 comm="syz.4.523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 429.731832][ T7223] hsr_slave_0: entered promiscuous mode [ 429.771483][ T7223] hsr_slave_1: entered promiscuous mode [ 429.781318][ T7223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.820216][ T7223] Cannot create hsr debugfs directory [ 430.683775][ T3036] bridge_slave_1: left allmulticast mode [ 430.709895][ T3036] bridge_slave_1: left promiscuous mode [ 430.715890][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.754845][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.767876][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.823420][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.834653][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.843245][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.843573][ T3036] bridge_slave_0: left allmulticast mode [ 430.852764][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 430.891914][ T3036] bridge_slave_0: left promiscuous mode [ 430.898826][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.440258][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.511954][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.599990][ T29] audit: type=1400 audit(2000000251.280:500): avc: denied { create } for pid=7440 comm="syz.4.531" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 432.644020][ T3036] bond0 (unregistering): Released all slaves [ 432.645911][ T29] audit: type=1400 audit(2000000251.310:501): avc: denied { read } for pid=7440 comm="syz.4.531" name="file0" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 432.976527][ T5234] Bluetooth: hci1: command tx timeout [ 433.130075][ T3036] hsr_slave_0: left promiscuous mode [ 433.166121][ T3036] hsr_slave_1: left promiscuous mode [ 433.186142][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.200938][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.696604][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 433.794930][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 435.071775][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.100372][ T5234] Bluetooth: hci1: command tx timeout [ 435.335599][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 435.437378][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 435.437412][ T29] audit: type=1400 audit(2000000254.110:505): avc: denied { create } for pid=7466 comm="syz.4.540" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 435.477184][ T29] audit: type=1400 audit(2000000254.150:506): avc: denied { map } for pid=7466 comm="syz.4.540" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 435.479080][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.568400][ T29] audit: type=1400 audit(2000000254.150:507): avc: denied { read write } for pid=7466 comm="syz.4.540" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 435.659711][ T2470] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.666991][ T2470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.692257][ T2470] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.699649][ T2470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.809810][ T6314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 436.330330][ T6314] usb 5-1: Using ep0 maxpacket: 32 [ 437.041329][ T6314] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 437.079366][ T6314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.108276][ T6314] usb 5-1: Product: syz [ 437.125796][ T6314] usb 5-1: Manufacturer: syz [ 437.130728][ T5234] Bluetooth: hci1: command tx timeout [ 437.158152][ T6314] usb 5-1: SerialNumber: syz [ 437.190525][ T6314] usb 5-1: config 0 descriptor?? [ 437.319478][ T6314] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 438.076027][ T6314] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 438.098208][ T5283] usb 5-1: USB disconnect, device number 5 [ 438.298787][ T6314] usb 3-1: Using ep0 maxpacket: 8 [ 438.310524][ T6314] usb 3-1: unable to get BOS descriptor or descriptor too short [ 438.359552][ T6314] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 438.387809][ T6314] usb 3-1: config 1 interface 0 has no altsetting 0 [ 438.414709][ T7416] chnl_net:caif_netlink_parms(): no params data found [ 438.427928][ T6314] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 438.437068][ T6314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.461515][ T6314] usb 3-1: Product: syz [ 438.465781][ T6314] usb 3-1: Manufacturer: syz [ 438.471837][ T6314] usb 3-1: SerialNumber: syz [ 438.710966][ T6314] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 438.726334][ T4662] bcm5974 3-1:1.0: could not read from device [ 438.757899][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.766223][ T7223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.778400][ T4662] bcm5974 3-1:1.0: could not read from device [ 438.851420][ T6314] usb 3-1: USB disconnect, device number 12 [ 438.863076][ T4662] bcm5974 3-1:1.0: could not read from device [ 438.900567][ T7223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 439.019855][ T7223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 439.064373][ T7223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 439.208470][ T5234] Bluetooth: hci1: command tx timeout [ 439.595817][ T7509] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 439.714006][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.730003][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.737422][ T7416] bridge_slave_0: entered allmulticast mode [ 439.790557][ T7416] bridge_slave_0: entered promiscuous mode [ 439.829487][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.849200][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.857078][ T7416] bridge_slave_1: entered allmulticast mode [ 439.913579][ T4615] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.936572][ T7416] bridge_slave_1: entered promiscuous mode [ 439.941017][ T4615] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.952067][ T4615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.965042][ T4615] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.996512][ T4615] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 440.006403][ T4615] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 441.001263][ T3036] bridge_slave_1: left allmulticast mode [ 441.050622][ T3036] bridge_slave_1: left promiscuous mode [ 441.102005][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.223563][ T3036] bridge_slave_0: left allmulticast mode [ 441.229528][ T3036] bridge_slave_0: left promiscuous mode [ 441.236543][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.301080][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 441.443859][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.457373][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.475496][ T3036] bond0 (unregistering): Released all slaves [ 441.504960][ T7416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.520365][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.551534][ T7416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.565878][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.613003][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 441.624190][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 441.633306][ T9] usb 3-1: SerialNumber: syz [ 441.731158][ T3036] hsr_slave_0: left promiscuous mode [ 441.748620][ T3036] hsr_slave_1: left promiscuous mode [ 441.755518][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.765319][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.915436][ T9] usb 3-1: 0:2 : does not exist [ 441.933039][ T9] usb 3-1: unit 255 not found! [ 441.958929][ T9] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 442.026856][ T9] usb 3-1: USB disconnect, device number 13 [ 442.090542][ T5234] Bluetooth: hci5: command tx timeout [ 442.147270][ T7190] udevd[7190]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.322432][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 442.387434][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 442.853249][ T7416] team0: Port device team_slave_0 added [ 442.925174][ T7416] team0: Port device team_slave_1 added [ 442.997201][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.004559][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.058457][ T7416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.105313][ T7416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.126401][ T7416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.220410][ T7416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.167786][ T5234] Bluetooth: hci5: command tx timeout [ 444.242690][ T7416] hsr_slave_0: entered promiscuous mode [ 444.258751][ T7416] hsr_slave_1: entered promiscuous mode [ 444.277860][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 444.480278][ T7534] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 444.971516][ T7416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.988678][ T7416] Cannot create hsr debugfs directory [ 445.133009][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.144433][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.170449][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 445.191137][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.229586][ T25] usb 5-1: config 0 descriptor?? [ 445.674033][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.704967][ T25] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 445.854132][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.861107][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.908073][ T29] audit: type=1400 audit(2000000264.500:508): avc: denied { ioctl } for pid=7537 comm="syz.2.550" path="socket:[17422]" dev="sockfs" ino=17422 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 446.248430][ T5234] Bluetooth: hci5: command tx timeout [ 446.597716][ T25] arvo 0003:1E7D:30D4.0012: unknown main item tag 0x0 [ 446.611634][ T25] arvo 0003:1E7D:30D4.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 446.624535][ T25] arvo 0003:1E7D:30D4.0012: couldn't init struct arvo_device [ 446.634470][ T25] arvo 0003:1E7D:30D4.0012: couldn't install keyboard [ 446.645600][ T25] arvo 0003:1E7D:30D4.0012: probe with driver arvo failed with error -5 [ 446.913363][ T6739] usb 5-1: USB disconnect, device number 6 [ 447.166785][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.558196][ T6739] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 447.744152][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.751517][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.788210][ T6739] usb 3-1: Using ep0 maxpacket: 8 [ 447.801658][ T6739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.849578][ T6739] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 447.909682][ T6739] usb 3-1: config 1 interface 0 has no altsetting 0 [ 447.939727][ T7510] chnl_net:caif_netlink_parms(): no params data found [ 447.950779][ T6739] usb 3-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 448.002996][ T6739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.046377][ T6739] usb 3-1: Product: syz [ 448.082800][ T6739] usb 3-1: Manufacturer: syz [ 448.378094][ T5234] Bluetooth: hci5: command tx timeout [ 448.806973][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.814398][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.989447][ T6739] usb 3-1: SerialNumber: syz [ 450.370478][ T6739] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 450.502521][ T4662] bcm5974 3-1:1.0: could not read from device [ 450.714020][ T6739] usb 3-1: USB disconnect, device number 14 [ 450.774044][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.798516][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.818114][ T7510] bridge_slave_0: entered allmulticast mode [ 450.847820][ T7510] bridge_slave_0: entered promiscuous mode [ 451.271029][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.332952][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.342661][ T7510] bridge_slave_1: entered allmulticast mode [ 451.353358][ T7510] bridge_slave_1: entered promiscuous mode [ 452.396680][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.508410][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.519427][ T3036] bridge_slave_1: left allmulticast mode [ 452.526052][ T3036] bridge_slave_1: left promiscuous mode [ 452.533243][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.545897][ T3036] bridge_slave_0: left allmulticast mode [ 452.552898][ T3036] bridge_slave_0: left promiscuous mode [ 452.593332][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.353956][ T7592] syz.2.557[7592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.354249][ T7592] syz.2.557[7592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.228501][ T7596] random: crng reseeded on system resumption [ 454.758499][ T29] audit: type=1400 audit(2000000272.900:509): avc: denied { write } for pid=7593 comm="syz.2.558" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 454.877022][ T29] audit: type=1400 audit(2000000272.900:510): avc: denied { open } for pid=7593 comm="syz.2.558" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 455.428999][ T3036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.443272][ T3036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.459197][ T3036] bond0 (unregistering): Released all slaves [ 456.999043][ T29] audit: type=1400 audit(2000000274.440:511): avc: denied { create } for pid=7598 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 458.008177][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 458.559605][ T3036] hsr_slave_0: left promiscuous mode [ 458.937507][ T3036] hsr_slave_1: left promiscuous mode [ 458.943439][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 458.966536][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.989245][ T3036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.998097][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.018766][ T8] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 459.051807][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 459.083000][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 459.113432][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.146064][ T8] usb 5-1: Product: syz [ 459.161871][ T8] usb 5-1: Manufacturer: syz [ 459.181885][ T8] usb 5-1: SerialNumber: syz [ 459.698580][ T3036] team0 (unregistering): Port device team_slave_1 removed [ 459.793197][ T3036] team0 (unregistering): Port device team_slave_0 removed [ 460.629398][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15 [ 460.650969][ T4662] bcm5974 5-1:1.0: could not read from device [ 460.848297][ T8] usb 5-1: USB disconnect, device number 7 [ 461.786008][ T7510] team0: Port device team_slave_0 added [ 461.853782][ T7510] team0: Port device team_slave_1 added [ 461.946908][ T7416] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.344478][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.367643][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.452524][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.515698][ T7416] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.649852][ T7416] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.844486][ T7416] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.337371][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.384686][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 463.401555][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.457689][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.591596][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.623319][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.648424][ T8] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 463.669135][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.692649][ T8] usb 5-1: config 0 descriptor?? [ 463.799160][ T7510] hsr_slave_0: entered promiscuous mode [ 463.816709][ T7510] hsr_slave_1: entered promiscuous mode [ 464.007214][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.220590][ T8] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 464.245644][ T8] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 464.268966][ T8] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 464.284438][ T8] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 464.304362][ T8] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 464.339717][ T8] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 464.410050][ T8] usb 5-1: USB disconnect, device number 8 [ 464.946274][ T7223] veth0_vlan: entered promiscuous mode [ 465.018643][ T7223] veth1_vlan: entered promiscuous mode [ 465.195822][ T7416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.320774][ T7416] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.425214][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.432589][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.447902][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 465.610813][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.618307][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.708772][ T8] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 465.725403][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.776556][ T8] usb 5-1: config 0 descriptor?? [ 466.345955][ T29] audit: type=1400 audit(2000000284.850:512): avc: denied { set_context_mgr } for pid=7655 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 467.161467][ T7510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 467.238489][ T7510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 467.382766][ T7510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 467.413939][ T29] audit: type=1400 audit(2000000286.090:513): avc: denied { listen } for pid=7649 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.449352][ T7510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 467.512869][ T29] audit: type=1400 audit(2000000286.130:514): avc: denied { accept } for pid=7649 comm="syz.4.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.933858][ T4615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.967962][ T4615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.978041][ T4615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.000553][ T4615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.022264][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 468.036119][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.903952][ T8] usb 5-1: Cannot set autoneg [ 469.913849][ T8] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 470.089997][ T4615] Bluetooth: hci4: command tx timeout [ 470.611846][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.772430][ T7699] syz.4.574[7699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.772740][ T7699] syz.4.574[7699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.798030][ T8] usb 5-1: USB disconnect, device number 9 [ 470.985102][ T29] audit: type=1400 audit(2000000289.660:515): avc: denied { watch watch_reads } for pid=7700 comm="syz.2.575" path="/164/control" dev="tmpfs" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 471.117463][ T7701] Â: renamed from pim6reg1 [ 471.177492][ T7416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.349247][ T7510] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.169398][ T4615] Bluetooth: hci4: command tx timeout [ 472.295702][ T2470] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.303041][ T2470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.355039][ T4554] bridge_slave_1: left allmulticast mode [ 472.374869][ T4554] bridge_slave_1: left promiscuous mode [ 472.386161][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.440104][ T4554] bridge_slave_0: left allmulticast mode [ 472.456370][ T4554] bridge_slave_0: left promiscuous mode [ 472.466262][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.980893][ T4554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.995299][ T4554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.014783][ T4554] bond0 (unregistering): Released all slaves [ 474.157393][ T7416] veth0_vlan: entered promiscuous mode [ 474.257716][ T4615] Bluetooth: hci4: command tx timeout [ 474.271154][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.278606][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.396423][ T4554] hsr_slave_0: left promiscuous mode [ 474.412852][ T4554] hsr_slave_1: left promiscuous mode [ 474.427021][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.438052][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.485855][ T4554] veth1_vlan: left promiscuous mode [ 474.491783][ T4554] veth0_vlan: left promiscuous mode [ 474.942568][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 475.292346][ T29] audit: type=1400 audit(2000000293.810:516): avc: denied { read } for pid=7715 comm="syz.2.579" name="loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 475.343253][ T29] audit: type=1400 audit(2000000293.820:517): avc: denied { open } for pid=7715 comm="syz.2.579" path="/dev/loop-control" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 475.407898][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.842081][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.873328][ T29] audit: type=1400 audit(2000000293.920:518): avc: denied { ioctl } for pid=7715 comm="syz.2.579" path="/dev/loop-control" dev="devtmpfs" ino=648 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 475.903082][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 476.073749][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.100376][ T25] usb 5-1: config 0 descriptor?? [ 476.347667][ T4615] Bluetooth: hci4: command tx timeout [ 476.504615][ T4554] team0 (unregistering): Port device team_slave_1 removed [ 477.075404][ T4554] team0 (unregistering): Port device team_slave_0 removed [ 477.129243][ T25] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 477.447745][ T25] usb 5-1: USB disconnect, device number 10 [ 478.851745][ T7416] veth1_vlan: entered promiscuous mode [ 479.484079][ T7674] chnl_net:caif_netlink_parms(): no params data found [ 479.534414][ T7416] veth0_macvtap: entered promiscuous mode [ 479.694766][ T7416] veth1_macvtap: entered promiscuous mode [ 479.932997][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.944691][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.959259][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.091560][ T7416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.179449][ T7416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.245818][ T7416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.400122][ T29] audit: type=1400 audit(2000000299.060:519): avc: denied { create } for pid=7753 comm="syz.2.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 481.284150][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.301408][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.319119][ T7674] bridge_slave_0: entered allmulticast mode [ 481.330396][ T7674] bridge_slave_0: entered promiscuous mode [ 481.466549][ T7416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.521278][ T7416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.569373][ T7416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.617121][ T7416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.678166][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.692106][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.699649][ T7674] bridge_slave_1: entered allmulticast mode [ 481.708018][ T7674] bridge_slave_1: entered promiscuous mode [ 482.345481][ T7674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.435365][ T7674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.713985][ T7674] team0: Port device team_slave_0 added [ 482.848548][ T7674] team0: Port device team_slave_1 added [ 482.992680][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.000380][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.027269][ T7674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.918601][ T7674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.949311][ T7674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.027813][ T7674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.243298][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.542624][ T7674] hsr_slave_0: entered promiscuous mode [ 484.566389][ T7674] hsr_slave_1: entered promiscuous mode [ 484.581897][ T29] audit: type=1326 audit(2000000303.260:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 484.593262][ T7674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.624128][ T7787] syz.2.593[7787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.624420][ T7787] syz.2.593[7787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.636287][ T29] audit: type=1326 audit(2000000303.260:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 484.641312][ T7674] Cannot create hsr debugfs directory [ 484.657792][ T29] audit: type=1326 audit(2000000303.260:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 484.713454][ T29] audit: type=1326 audit(2000000303.260:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 484.776091][ T29] audit: type=1326 audit(2000000303.260:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 484.910451][ T29] audit: type=1326 audit(2000000303.260:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 485.024102][ T29] audit: type=1326 audit(2000000303.260:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 485.422095][ T29] audit: type=1326 audit(2000000303.260:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 485.916909][ T7794] xt_CT: No such helper "netbios-ns" [ 486.019423][ T29] audit: type=1326 audit(2000000303.260:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.130937][ T29] audit: type=1326 audit(2000000303.260:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.155291][ T29] audit: type=1326 audit(2000000303.260:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.218531][ T29] audit: type=1326 audit(2000000303.260:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.290689][ T29] audit: type=1326 audit(2000000303.260:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.347189][ T29] audit: type=1326 audit(2000000303.260:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.374822][ T3036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.422466][ T3036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.560880][ T29] audit: type=1326 audit(2000000303.260:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.751961][ T29] audit: type=1326 audit(2000000303.260:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 486.777242][ T29] audit: type=1326 audit(2000000303.260:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 488.850085][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.875881][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.325904][ T7510] veth0_vlan: entered promiscuous mode [ 490.438815][ T7510] veth1_vlan: entered promiscuous mode [ 491.262573][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.308934][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.319096][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.329479][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.353327][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 491.368366][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.382260][ T7510] veth0_macvtap: entered promiscuous mode [ 491.662147][ T7510] veth1_macvtap: entered promiscuous mode [ 492.114922][ T1121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.702478][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.765585][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.804413][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.853615][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.889133][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.126956][ T1121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.312431][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.377756][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.387824][ T7510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.404747][ T7510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.562719][ T5234] Bluetooth: hci0: command tx timeout [ 493.577783][ T7510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.176500][ T1121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.289381][ T7510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.315230][ T7510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.338801][ T7510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.355457][ T7510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.463943][ T1121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.253383][ T7674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.295148][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.312720][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.383791][ T7674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.472749][ T1121] bridge_slave_1: left allmulticast mode [ 495.479833][ T1121] bridge_slave_1: left promiscuous mode [ 495.485874][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.503522][ T1121] bridge_slave_0: left allmulticast mode [ 495.510501][ T1121] bridge_slave_0: left promiscuous mode [ 495.516366][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.557793][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 495.608078][ T5234] Bluetooth: hci0: command tx timeout [ 495.749569][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 495.772251][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 495.786298][ T25] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 495.798522][ T25] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 495.808469][ T25] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 495.821020][ T25] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 495.831472][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 495.839162][ T25] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 495.849179][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.899829][ T25] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 496.155766][ T25] scsi host1: usb-storage 5-1:1.0 [ 496.457204][ T6739] usb 5-1: USB disconnect, device number 11 [ 496.841324][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 496.841377][ T29] audit: type=1326 audit(2000000315.510:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7879 comm="syz.2.609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x0 [ 497.690489][ T5234] Bluetooth: hci0: command tx timeout [ 497.716285][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.756875][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.778574][ T1121] bond0 (unregistering): Released all slaves [ 497.807193][ T7674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.049820][ T7674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.197017][ T5865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.228308][ T5865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.491489][ T7841] chnl_net:caif_netlink_parms(): no params data found [ 498.540428][ T29] audit: type=1400 audit(2000000317.220:544): avc: denied { unmount } for pid=7510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 498.598099][ T29] audit: type=1400 audit(2000000317.270:545): avc: denied { mounton } for pid=7510 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 498.647410][ T29] audit: type=1400 audit(2000000317.270:546): avc: denied { mount } for pid=7510 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 498.881455][ T1121] hsr_slave_0: left promiscuous mode [ 498.947947][ T1121] hsr_slave_1: left promiscuous mode [ 499.027944][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.035565][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.314690][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.477720][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.920996][ T1121] veth1_macvtap: left promiscuous mode [ 499.926688][ T1121] veth0_macvtap: left promiscuous mode [ 499.932675][ T5234] Bluetooth: hci0: command tx timeout [ 499.996652][ T1121] veth1_vlan: left promiscuous mode [ 500.014972][ T1121] veth0_vlan: left promiscuous mode [ 500.962036][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 500.979290][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.012163][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.041490][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.064816][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 501.077749][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.904167][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 503.000730][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 503.212006][ T5234] Bluetooth: hci1: command tx timeout [ 503.952151][ T7914] erspan0: left allmulticast mode [ 503.966909][ T7914] erspan0: left promiscuous mode [ 503.978575][ T7914] bridge0: port 3(erspan0) entered disabled state [ 504.002219][ T7914] bridge_slave_1: left allmulticast mode [ 504.009361][ T7914] bridge_slave_1: left promiscuous mode [ 504.016674][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.032574][ T7914] bridge_slave_0: left allmulticast mode [ 504.038386][ T7914] bridge_slave_0: left promiscuous mode [ 504.044592][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.869603][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.898064][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.951333][ T7841] bridge_slave_0: entered allmulticast mode [ 505.028971][ T7841] bridge_slave_0: entered promiscuous mode [ 505.288009][ T4615] Bluetooth: hci1: command tx timeout [ 505.647320][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.747953][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.777873][ T7841] bridge_slave_1: entered allmulticast mode [ 505.797962][ T7841] bridge_slave_1: entered promiscuous mode [ 506.549740][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.615682][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.982760][ T7841] team0: Port device team_slave_0 added [ 507.010824][ T7841] team0: Port device team_slave_1 added [ 507.144015][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.163236][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.210198][ T5234] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 507.281109][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.298562][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.308272][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.369525][ T5234] Bluetooth: hci1: command tx timeout [ 507.702344][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.739408][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.781577][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.666265][ T1121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.722775][ T7920] chnl_net:caif_netlink_parms(): no params data found [ 508.908058][ T1121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.168041][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.254712][ T1121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.431909][ T7841] hsr_slave_0: entered promiscuous mode [ 509.456407][ T7841] hsr_slave_1: entered promiscuous mode [ 509.458523][ T5234] Bluetooth: hci1: command tx timeout [ 509.475563][ T7841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.484065][ T7841] Cannot create hsr debugfs directory [ 509.591456][ T1121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.761619][ T7674] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.873380][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.880742][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.941933][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.949430][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.893771][ T7674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.952672][ T7674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.987846][ T5283] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 511.137376][ T7920] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.170116][ T7920] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.197219][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 511.206945][ T7920] bridge_slave_0: entered allmulticast mode [ 511.211105][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.224080][ T7920] bridge_slave_0: entered promiscuous mode [ 511.235951][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.249997][ T7920] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.271392][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.272878][ T7920] bridge_slave_1: entered allmulticast mode [ 511.293345][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.318875][ T7920] bridge_slave_1: entered promiscuous mode [ 511.327748][ T5283] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 511.354746][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.374398][ T5283] usb 3-1: config 0 descriptor?? [ 511.827342][ T7920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.073542][ T5283] wacom 0003:056A:5000.0015: unbalanced delimiter at end of report description [ 512.230985][ T7920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.259184][ T5283] wacom 0003:056A:5000.0015: parse failed [ 512.285810][ T5283] wacom 0003:056A:5000.0015: probe with driver wacom failed with error -22 [ 512.382048][ T5283] usb 3-1: USB disconnect, device number 15 [ 513.070524][ T7920] team0: Port device team_slave_0 added [ 513.088443][ T29] audit: type=1326 audit(2000000331.770:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 513.120871][ T7920] team0: Port device team_slave_1 added [ 513.166478][ T29] audit: type=1326 audit(2000000331.790:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 513.264597][ T29] audit: type=1326 audit(2000000331.790:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 513.325589][ T29] audit: type=1326 audit(2000000331.790:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8012 comm="syz.2.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d4697def9 code=0x7ffc0000 [ 513.427996][ T1121] bridge_slave_1: left allmulticast mode [ 513.437395][ T1121] bridge_slave_1: left promiscuous mode [ 513.444588][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.459069][ T1121] bridge_slave_0: left allmulticast mode [ 513.464792][ T1121] bridge_slave_0: left promiscuous mode [ 513.472793][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.253979][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.267466][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.284141][ T1121] bond0 (unregistering): Released all slaves [ 515.414747][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.425699][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.464561][ T7920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.542351][ T8023] netlink: 9 bytes leftover after parsing attributes in process `syz.4.636'. [ 515.568534][ T8023] gretap0: entered promiscuous mode [ 515.619678][ T7920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.626711][ T7920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.638443][ T29] audit: type=1400 audit(2000000334.320:551): avc: denied { ioctl } for pid=8025 comm="syz.2.637" path="socket:[19294]" dev="sockfs" ino=19294 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 515.679874][ T7920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.843866][ T8029] tmpfs: Unknown parameter 'nolazytime˙˙' [ 516.052133][ T7674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.787075][ T7920] hsr_slave_0: entered promiscuous mode [ 517.830031][ T7920] hsr_slave_1: entered promiscuous mode [ 517.844838][ T7920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.854916][ T7920] Cannot create hsr debugfs directory [ 517.886617][ T8039] bridge0: port 3(erspan0) entered blocking state [ 517.894129][ T8039] bridge0: port 3(erspan0) entered disabled state [ 517.901324][ T8039] erspan0: entered allmulticast mode [ 517.909248][ T8039] erspan0: entered promiscuous mode [ 517.915676][ T8039] bridge0: port 3(erspan0) entered blocking state [ 517.922479][ T8039] bridge0: port 3(erspan0) entered forwarding state [ 518.043936][ T1121] hsr_slave_0: left promiscuous mode [ 518.066561][ T1121] hsr_slave_1: left promiscuous mode [ 518.091590][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.113652][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.123583][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.132311][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.169074][ T1121] veth1_macvtap: left promiscuous mode [ 518.174895][ T1121] veth0_macvtap: left promiscuous mode [ 518.181094][ T1121] veth1_vlan: left promiscuous mode [ 518.186696][ T1121] veth0_vlan: left promiscuous mode [ 518.860516][ T29] audit: type=1400 audit(2000000337.480:552): avc: denied { listen } for pid=8045 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 519.785361][ T29] audit: type=1326 audit(2000000338.460:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 519.830397][ T29] audit: type=1326 audit(2000000338.460:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 519.857244][ T29] audit: type=1326 audit(2000000338.460:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 519.884730][ T29] audit: type=1326 audit(2000000338.460:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 519.910414][ T29] audit: type=1326 audit(2000000338.460:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 520.028368][ T29] audit: type=1326 audit(2000000338.460:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 520.053633][ T29] audit: type=1326 audit(2000000338.460:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 520.078136][ T29] audit: type=1326 audit(2000000338.460:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 520.123470][ T29] audit: type=1326 audit(2000000338.460:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8052 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 520.843899][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 520.933906][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 521.961917][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.645'. [ 523.353398][ T7674] veth0_vlan: entered promiscuous mode [ 523.713507][ T7674] veth1_vlan: entered promiscuous mode [ 524.303652][ T8067] EXT4-fs warning (device sda1): __ext4_ioctl:1257: Setting inode version is not supported with metadata_csum enabled. [ 524.372046][ T8069] random: crng reseeded on system resumption [ 524.928624][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 524.928649][ T29] audit: type=1400 audit(2000000343.050:565): avc: denied { setopt } for pid=8065 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 525.038387][ T7841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.087357][ T7841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.241578][ T7841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 525.358986][ T7841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 525.781908][ T7674] veth0_macvtap: entered promiscuous mode [ 525.838535][ T7674] veth1_macvtap: entered promiscuous mode [ 526.329846][ T7920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.369514][ T7920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 526.403967][ T7920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 526.484660][ T7920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.552442][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.668573][ T7841] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.735875][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.743284][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.857236][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.864615][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.699712][ T4615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 527.714335][ T4615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 527.741926][ T4615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 527.786814][ T4615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 527.802708][ T4615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 527.812426][ T4615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.047391][ T7920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.986441][ T7920] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.069339][ T5381] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 529.225409][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.232918][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.282764][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.298545][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.351523][ T5381] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 529.368831][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.376082][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.384478][ T5381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.426986][ T5381] usb 3-1: config 0 descriptor?? [ 529.478381][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 529.540733][ T1121] bridge_slave_1: left allmulticast mode [ 529.546622][ T1121] bridge_slave_1: left promiscuous mode [ 529.553764][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.574944][ T1121] bridge_slave_0: left allmulticast mode [ 529.580788][ T1121] bridge_slave_0: left promiscuous mode [ 529.586959][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.678524][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.704652][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.715653][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 529.725180][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.739475][ T25] usb 5-1: config 0 descriptor?? [ 529.884851][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.905766][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.939242][ T5234] Bluetooth: hci4: command tx timeout [ 530.018344][ T5381] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 530.025811][ T5381] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 530.036190][ T5381] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 530.044646][ T5381] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 530.061416][ T5381] samsung 0003:0419:0600.0016: unknown main item tag 0x0 [ 530.077108][ T5381] samsung 0003:0419:0600.0016: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 530.198713][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.207205][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.223821][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.234375][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.242331][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.252733][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.260411][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.270052][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.277095][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.284781][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.292979][ T25] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 530.307933][ T25] lg-g15 0003:046D:C222.0017: hidraw1: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 530.418446][ T25] usb 5-1: USB disconnect, device number 12 [ 530.571174][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.585099][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.601490][ T1121] bond0 (unregistering): Released all slaves [ 530.665113][ T6739] usb 3-1: USB disconnect, device number 16 [ 530.774934][ T7841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.917282][ T1121] hsr_slave_0: left promiscuous mode [ 530.925279][ T1121] hsr_slave_1: left promiscuous mode [ 530.937342][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.946628][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.000812][ T1121] veth1_macvtap: left promiscuous mode [ 531.011147][ T1121] veth0_macvtap: left promiscuous mode [ 531.027247][ T1121] veth1_vlan: left promiscuous mode [ 531.049552][ T1121] veth0_vlan: left promiscuous mode [ 531.628319][ T5381] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 531.913770][ T5381] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.994146][ T5381] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 532.013071][ T5234] Bluetooth: hci4: command tx timeout [ 532.155820][ T5381] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.206371][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 532.286412][ T5381] usb 5-1: SerialNumber: syz [ 532.319748][ T5381] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 532.361224][ T5381] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 532.385256][ T5381] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 533.809852][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 533.894674][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 534.087876][ T5234] Bluetooth: hci4: command tx timeout [ 534.779833][ T6739] usb 5-1: USB disconnect, device number 13 [ 534.988062][ T8086] chnl_net:caif_netlink_parms(): no params data found [ 535.228748][ T8123] netlink: 76 bytes leftover after parsing attributes in process `syz.4.665'. [ 535.238740][ T8123] netlink: 32 bytes leftover after parsing attributes in process `syz.4.665'. [ 536.838348][ T5234] Bluetooth: hci4: command tx timeout [ 537.490125][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.525995][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.549150][ T8086] bridge_slave_0: entered allmulticast mode [ 537.623189][ T8086] bridge_slave_0: entered promiscuous mode [ 537.674186][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.691981][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.706809][ T8086] bridge_slave_1: entered allmulticast mode [ 537.727958][ T8086] bridge_slave_1: entered promiscuous mode [ 537.990572][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.016774][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.331318][ T29] audit: type=1400 audit(2000000356.830:566): avc: denied { mount } for pid=8137 comm="syz.2.667" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 539.114606][ T29] audit: type=1400 audit(2000000357.750:567): avc: denied { unmount } for pid=5239 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 539.156071][ T7920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.263113][ T29] audit: type=1326 audit(2000000357.940:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 539.327740][ T29] audit: type=1326 audit(2000000357.980:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 539.377106][ T29] audit: type=1326 audit(2000000357.980:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 539.447955][ T7841] veth0_vlan: entered promiscuous mode [ 539.451129][ T29] audit: type=1326 audit(2000000357.980:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 539.529494][ T29] audit: type=1326 audit(2000000357.980:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.4.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 539.560694][ T8086] team0: Port device team_slave_0 added [ 539.585238][ T8086] team0: Port device team_slave_1 added [ 540.702953][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.733809][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.760497][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.898792][ T8154] capability: warning: `syz.2.672' uses deprecated v2 capabilities in a way that may be insecure [ 541.091720][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.105123][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.131927][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.279888][ T7841] veth1_vlan: entered promiscuous mode [ 541.420058][ T8086] hsr_slave_0: entered promiscuous mode [ 541.442168][ T8086] hsr_slave_1: entered promiscuous mode [ 541.798457][ T8174] netlink: 76 bytes leftover after parsing attributes in process `syz.4.675'. [ 541.807433][ T8174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.675'. [ 542.853966][ T8178] hub 6-0:1.0: USB hub found [ 542.861114][ T8178] hub 6-0:1.0: 1 port detected [ 543.488802][ T7920] veth0_vlan: entered promiscuous mode [ 543.716759][ T7841] veth0_macvtap: entered promiscuous mode [ 543.748937][ T7920] veth1_vlan: entered promiscuous mode [ 543.777935][ T5381] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 543.815538][ T7841] veth1_macvtap: entered promiscuous mode [ 543.968041][ T5381] usb 3-1: Using ep0 maxpacket: 32 [ 543.974453][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.986042][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.000151][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.022219][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.029714][ T5381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.051729][ T5381] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 544.063129][ T5381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.076905][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.092512][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.104170][ T5381] usb 3-1: config 0 descriptor?? [ 544.117041][ T5381] hub 3-1:0.0: USB hub found [ 544.125146][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.198618][ T7841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.215450][ T7841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.237666][ T7841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.246540][ T7841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.296185][ T7920] veth0_macvtap: entered promiscuous mode [ 544.348534][ T7920] veth1_macvtap: entered promiscuous mode [ 544.406940][ T5381] hub 3-1:0.0: 16 ports detected [ 544.433826][ T5381] hub 3-1:0.0: insufficient power available to use all downstream ports [ 544.637858][ T5381] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 544.659687][ T5381] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 544.695654][ T5381] usbhid 3-1:0.0: can't add hid device: -71 [ 544.718781][ T5381] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 544.774543][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.797260][ T5381] usb 3-1: USB disconnect, device number 17 [ 544.826233][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.900665][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.937602][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.969468][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.100283][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.118506][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.130540][ T7920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.148149][ T7920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.171418][ T7920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.190401][ T8086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 545.263573][ T7920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.297723][ T7920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.306529][ T7920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.322508][ T7920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.353479][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.369991][ T8086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 545.401228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.414367][ T8086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 545.615909][ T8086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 545.889773][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.955444][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.285433][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 546.336858][ T29] audit: type=1400 audit(2000000365.010:573): avc: denied { bind } for pid=8218 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 546.407989][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.429643][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.947833][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.955788][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.149430][ T8086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.158530][ T29] audit: type=1400 audit(2000000367.830:574): avc: denied { name_bind } for pid=8241 comm="syz.2.689" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 549.380164][ T8086] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.444595][ T29] audit: type=1400 audit(2000000368.110:575): avc: denied { read } for pid=8245 comm="syz.3.463" path="socket:[22614]" dev="sockfs" ino=22614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 549.475176][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.482547][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.534587][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.541977][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.554919][ T29] audit: type=1326 audit(2000000368.200:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 549.627132][ T29] audit: type=1326 audit(2000000368.210:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 549.713709][ T29] audit: type=1400 audit(2000000368.280:578): avc: denied { bind } for pid=8250 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.756792][ T29] audit: type=1400 audit(2000000368.290:579): avc: denied { listen } for pid=8250 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.903577][ T29] audit: type=1400 audit(2000000368.290:580): avc: denied { connect } for pid=8250 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 549.983878][ T29] audit: type=1326 audit(2000000368.330:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 550.047069][ T29] audit: type=1326 audit(2000000368.330:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8248 comm="syz.4.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7ffc0000 [ 550.109778][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 550.648020][ T8259] netlink: 44 bytes leftover after parsing attributes in process `syz.2.694'. [ 550.995260][ T8283] input: syz0 as /devices/virtual/input/input16 [ 551.788764][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 551.840076][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 552.004448][ T8] usb 3-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 552.045772][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.047795][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 552.067811][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 552.104624][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 552.113080][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 552.116942][ T25] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 552.125242][ T8086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.147736][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 552.163343][ T8] usb 3-1: SerialNumber: syz [ 552.171739][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 552.187692][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.199169][ T25] usb 4-1: Product: syz [ 552.205025][ T25] usb 4-1: Manufacturer: syz [ 552.231102][ T25] usb 4-1: SerialNumber: syz [ 552.482608][ T8086] veth0_vlan: entered promiscuous mode [ 552.521554][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.574079][ T8086] veth1_vlan: entered promiscuous mode [ 552.581300][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.693080][ T8] usb 3-1: 0:2 : does not exist [ 552.725813][ T8] usb 3-1: unit 48 not found! [ 552.867091][ T8086] veth0_macvtap: entered promiscuous mode [ 552.887428][ T8] usb 3-1: USB disconnect, device number 18 [ 552.915613][ T8086] veth1_macvtap: entered promiscuous mode [ 553.060339][ T7190] udevd[7190]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.079884][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.110258][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.160558][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.217649][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.257515][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.280341][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.294849][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.353751][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.384873][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.408646][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.426407][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 553.426431][ T29] audit: type=1400 audit(2000000372.100:586): avc: denied { write } for pid=4659 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.441905][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.482044][ T8086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 553.503200][ T8086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.510228][ T29] audit: type=1400 audit(2000000372.100:587): avc: denied { remove_name } for pid=4659 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.542566][ T8086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.616327][ T29] audit: type=1400 audit(2000000372.100:588): avc: denied { rename } for pid=4659 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 553.662963][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 553.739986][ T29] audit: type=1400 audit(2000000372.100:589): avc: denied { add_name } for pid=4659 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.767221][ T4662] bcm5974 4-1:1.0: could not read from device [ 553.775470][ T29] audit: type=1400 audit(2000000372.100:590): avc: denied { unlink } for pid=4659 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 553.790757][ T8086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.837420][ T8086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.847167][ T29] audit: type=1400 audit(2000000372.120:591): avc: denied { create } for pid=4659 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 553.936354][ T8086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.985180][ T8086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.043933][ T4662] bcm5974 4-1:1.0: could not read from device [ 554.244856][ T25] usb 4-1: USB disconnect, device number 9 [ 554.302438][ T4662] bcm5974 4-1:1.0: could not read from device [ 555.140732][ T29] audit: type=1400 audit(2000000373.340:592): avc: denied { execute } for pid=8300 comm="syz.3.700" name="file1" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 555.183637][ T4662] bcm5974 4-1:1.0: could not read from device [ 555.301906][ T29] audit: type=1400 audit(2000000373.350:593): avc: denied { execute_no_trans } for pid=8300 comm="syz.3.700" path="/2/file1" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 555.658342][ T8306] pim6reg1: entered promiscuous mode [ 555.663760][ T8306] pim6reg1: entered allmulticast mode [ 555.961865][ T4543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.990608][ T4543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.177782][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.185690][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.419398][ T29] audit: type=1326 audit(2000000375.090:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052297def9 code=0x7fc00000 [ 556.477590][ T29] audit: type=1326 audit(2000000375.140:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.4.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f052297def9 code=0x7fc00000 [ 556.515981][ T8322] netlink: 104 bytes leftover after parsing attributes in process `syz.4.704'. [ 556.518271][ T6314] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 556.793066][ T6314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.825144][ T6314] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.856514][ T6314] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.894665][ T6314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.907469][ T6314] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 556.942459][ T6314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.988120][ T6314] usb 4-1: config 0 descriptor?? [ 557.424277][ T6314] zeroplus 0003:0C12:0005.0018: item fetching failed at offset 1/5 [ 557.485195][ T6314] zeroplus 0003:0C12:0005.0018: parse failed [ 557.532400][ T6314] zeroplus 0003:0C12:0005.0018: probe with driver zeroplus failed with error -22 [ 557.666814][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.707'. [ 557.693588][ T9] usb 4-1: USB disconnect, device number 10 [ 558.649074][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.713'. [ 558.675997][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 558.676029][ T29] audit: type=1400 audit(2000000377.350:618): avc: denied { create } for pid=8356 comm="syz.4.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 558.797735][ T29] audit: type=1400 audit(2000000377.400:619): avc: denied { name_bind } for pid=8356 comm="syz.4.713" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 559.195602][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 559.458196][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 559.492355][ T9] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 559.524328][ T9] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 559.579358][ T9] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 559.636892][ T9] usb 4-1: config 250 has no interface number 0 [ 559.685614][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 559.727056][ T9] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 559.764725][ T9] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 559.835946][ T9] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 559.847023][ T9] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 559.861205][ T9] usb 4-1: config 250 interface 228 has no altsetting 0 [ 559.890627][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 559.903463][ T9] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 559.916187][ T9] usb 4-1: Product: syz [ 559.924256][ T9] usb 4-1: SerialNumber: syz [ 559.946911][ T9] hub 4-1:250.228: bad descriptor, ignoring hub [ 559.957264][ T9] hub 4-1:250.228: probe with driver hub failed with error -5 [ 560.359523][ T9] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 560.999539][ T8] usb 4-1: USB disconnect, device number 11 [ 561.121366][ T8] usblp0: removed [ 563.009153][ T8384] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 563.027793][ T8384] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 563.038532][ T8384] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 563.049452][ T8384] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 563.060748][ T8384] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 563.068833][ T8384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 563.407424][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 563.417688][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 563.426843][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 563.452079][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 563.467159][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 563.476321][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 564.532312][ T29] audit: type=1400 audit(2000000383.200:620): avc: denied { connect } for pid=8390 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 564.565939][ T29] audit: type=1326 audit(2000000383.220:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.603852][ T29] audit: type=1326 audit(2000000383.220:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.642623][ T29] audit: type=1326 audit(2000000383.220:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.677314][ T29] audit: type=1326 audit(2000000383.220:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.727920][ T29] audit: type=1326 audit(2000000383.220:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.752054][ T29] audit: type=1326 audit(2000000383.230:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.808216][ T29] audit: type=1326 audit(2000000383.230:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.853053][ T29] audit: type=1326 audit(2000000383.230:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 564.927723][ T29] audit: type=1326 audit(2000000383.250:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54017def9 code=0x7ffc0000 [ 565.218033][ T8384] Bluetooth: hci3: command tx timeout [ 565.348804][ T4543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.650348][ T8384] Bluetooth: hci0: command tx timeout [ 565.874086][ T4543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.911789][ T4543] bond0 (unregistering): Released all slaves [ 567.338003][ T8384] Bluetooth: hci3: command tx timeout [ 567.947970][ T8384] Bluetooth: hci0: command tx timeout [ 568.159992][ T8420] ------------[ cut here ]------------ [ 568.167006][ T8420] WARNING: CPU: 0 PID: 8420 at include/linux/rwsem.h:195 follow_pte+0x414/0x4c0 [ 568.177062][ T8420] Modules linked in: [ 568.187894][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.0.731 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 568.198966][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 568.212772][ T8420] RIP: 0010:follow_pte+0x414/0x4c0 [ 568.219919][ T8420] Code: bf 98 01 00 00 be ff ff ff ff e8 47 e8 44 09 31 ff 41 89 c4 89 c6 e8 db ce b9 ff 45 85 e4 0f 85 80 fc ff ff e8 8d cc b9 ff 90 <0f> 0b 90 e9 72 fc ff ff e8 7f cc b9 ff 90 0f 0b 48 c7 c7 18 80 14 [ 568.240186][ T8420] RSP: 0018:ffffc9000358f4d0 EFLAGS: 00010287 [ 568.246583][ T8420] RAX: 000000000000e0d7 RBX: 00007fd322150000 RCX: ffffc9000c26a000 [ 568.258669][ T8420] RDX: 0000000000040000 RSI: ffffffff81d203c3 RDI: 0000000000000005 [ 568.267216][ T8420] RBP: ffff8880306a9aa8 R08: 0000000000000005 R09: 0000000000000000 [ 568.277642][ T8420] R10: 0000000000000000 R11: 000000000000019f R12: 0000000000000000 [ 568.291778][ T8420] R13: ffffc9000358f530 R14: ffffc9000358f550 R15: ffff88801dbaaf80 [ 568.300284][ T8420] FS: 00007f86e9ad96c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 568.309476][ T8420] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 568.319328][ T8420] CR2: 0000000000000000 CR3: 000000002eee4000 CR4: 00000000003506f0 [ 568.327742][ T8420] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 568.335932][ T8420] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 568.344176][ T8420] Call Trace: [ 568.349056][ T8420] [ 568.352136][ T8420] ? show_regs+0x8c/0xa0 [ 568.356688][ T8420] ? __warn+0xe5/0x3c0 [ 568.361610][ T8420] ? follow_pte+0x414/0x4c0 [ 568.366819][ T8420] ? report_bug+0x3c0/0x580 [ 568.371875][ T8420] ? handle_bug+0x3d/0x70 [ 568.376758][ T8420] ? exc_invalid_op+0x17/0x50 [ 568.381806][ T8420] ? asm_exc_invalid_op+0x1a/0x20 [ 568.394308][ T8420] ? follow_pte+0x413/0x4c0 [ 568.399618][ T8420] ? follow_pte+0x414/0x4c0 [ 568.404633][ T8420] get_pat_info+0xf2/0x510 [ 568.409922][ T8420] ? __pfx_get_pat_info+0x10/0x10 [ 568.418360][ T8420] untrack_pfn+0xf7/0x4d0 [ 568.423185][ T8420] ? __pfx_untrack_pfn+0x10/0x10 [ 568.428454][ T8420] ? zap_page_range_single+0x307/0x560 [ 568.434362][ T8420] ? __pfx_lock_release+0x10/0x10 [ 568.439938][ T8420] ? uprobe_munmap+0x20/0x5d0 [ 568.445207][ T8420] unmap_single_vma+0x1bd/0x2b0 [ 568.450879][ T8420] zap_page_range_single+0x326/0x560 [ 568.456477][ T8420] ? __pfx_zap_page_range_single+0x10/0x10 [ 568.463036][ T8420] ? __pfx___might_resched+0x10/0x10 [ 568.469015][ T8420] ? vma_interval_tree_subtree_search+0x14d/0x1b0 [ 568.475761][ T8420] unmap_mapping_range+0x1ee/0x280 [ 568.481650][ T8420] ? __pfx_unmap_mapping_range+0x10/0x10 [ 568.497075][ T8420] ? inode_newsize_ok+0x13b/0x200 [ 568.503276][ T8420] truncate_pagecache+0x53/0x90 [ 568.508838][ T8420] simple_setattr+0xf2/0x120 [ 568.513820][ T8420] notify_change+0xf41/0x1230 [ 568.523118][ T8420] do_truncate+0x15c/0x220 [ 568.528568][ T8420] ? __pfx_do_truncate+0x10/0x10 [ 568.534497][ T8420] path_openat+0x27a8/0x2d20 [ 568.539681][ T8420] ? __pfx_path_openat+0x10/0x10 [ 568.545041][ T8420] ? __pfx___lock_acquire+0x10/0x10 [ 568.550751][ T8420] ? find_held_lock+0x2d/0x110 [ 568.556040][ T8420] do_filp_open+0x1dc/0x430 [ 568.561297][ T8420] ? __pfx_do_filp_open+0x10/0x10 [ 568.566653][ T8420] ? find_held_lock+0x2d/0x110 [ 568.573238][ T8420] ? _raw_spin_unlock+0x28/0x50 [ 568.578467][ T8420] ? alloc_fd+0x2d7/0x6c0 [ 568.583205][ T8420] do_sys_openat2+0x17a/0x1e0 [ 568.589591][ T8420] ? __pfx_do_sys_openat2+0x10/0x10 [ 568.597782][ T8420] __x64_sys_openat+0x175/0x210 [ 568.603061][ T8420] ? __pfx___x64_sys_openat+0x10/0x10 [ 568.609002][ T8420] do_syscall_64+0xcd/0x250 [ 568.613940][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.624323][ T8420] RIP: 0033:0x7f86e8d7def9 [ 568.629590][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.649844][ T8420] RSP: 002b:00007f86e9ad9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 568.658992][ T8420] RAX: ffffffffffffffda RBX: 00007f86e8f36130 RCX: 00007f86e8d7def9 [ 568.667139][ T8420] RDX: 0000000000000300 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 568.675524][ T8420] RBP: 00007f86e8df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 568.683882][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.698591][ T8420] R13: 0000000000000000 R14: 00007f86e8f36130 R15: 00007ffea6d0b4a8 [ 568.707279][ T8420] [ 568.711666][ T8420] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 568.718986][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.0.731 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 568.729718][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 568.739909][ T8420] Call Trace: [ 568.743230][ T8420] [ 568.746192][ T8420] dump_stack_lvl+0x3d/0x1f0 [ 568.750845][ T8420] panic+0x6dc/0x7c0 [ 568.754897][ T8420] ? __pfx_panic+0x10/0x10 [ 568.759378][ T8420] ? show_trace_log_lvl+0x363/0x500 [ 568.764672][ T8420] ? follow_pte+0x414/0x4c0 [ 568.769256][ T8420] check_panic_on_warn+0xab/0xb0 [ 568.774279][ T8420] __warn+0xf1/0x3c0 [ 568.778260][ T8420] ? follow_pte+0x414/0x4c0 [ 568.782854][ T8420] report_bug+0x3c0/0x580 [ 568.787245][ T8420] handle_bug+0x3d/0x70 [ 568.791464][ T8420] exc_invalid_op+0x17/0x50 [ 568.796018][ T8420] asm_exc_invalid_op+0x1a/0x20 [ 568.801012][ T8420] RIP: 0010:follow_pte+0x414/0x4c0 [ 568.806183][ T8420] Code: bf 98 01 00 00 be ff ff ff ff e8 47 e8 44 09 31 ff 41 89 c4 89 c6 e8 db ce b9 ff 45 85 e4 0f 85 80 fc ff ff e8 8d cc b9 ff 90 <0f> 0b 90 e9 72 fc ff ff e8 7f cc b9 ff 90 0f 0b 48 c7 c7 18 80 14 [ 568.825938][ T8420] RSP: 0018:ffffc9000358f4d0 EFLAGS: 00010287 [ 568.832075][ T8420] RAX: 000000000000e0d7 RBX: 00007fd322150000 RCX: ffffc9000c26a000 [ 568.840096][ T8420] RDX: 0000000000040000 RSI: ffffffff81d203c3 RDI: 0000000000000005 [ 568.848116][ T8420] RBP: ffff8880306a9aa8 R08: 0000000000000005 R09: 0000000000000000 [ 568.856565][ T8420] R10: 0000000000000000 R11: 000000000000019f R12: 0000000000000000 [ 568.864603][ T8420] R13: ffffc9000358f530 R14: ffffc9000358f550 R15: ffff88801dbaaf80 [ 568.872659][ T8420] ? follow_pte+0x413/0x4c0 [ 568.877253][ T8420] get_pat_info+0xf2/0x510 [ 568.881739][ T8420] ? __pfx_get_pat_info+0x10/0x10 [ 568.886845][ T8420] untrack_pfn+0xf7/0x4d0 [ 568.891241][ T8420] ? __pfx_untrack_pfn+0x10/0x10 [ 568.896237][ T8420] ? zap_page_range_single+0x307/0x560 [ 568.901781][ T8420] ? __pfx_lock_release+0x10/0x10 [ 568.906876][ T8420] ? uprobe_munmap+0x20/0x5d0 [ 568.911621][ T8420] unmap_single_vma+0x1bd/0x2b0 [ 568.916565][ T8420] zap_page_range_single+0x326/0x560 [ 568.921940][ T8420] ? __pfx_zap_page_range_single+0x10/0x10 [ 568.927847][ T8420] ? __pfx___might_resched+0x10/0x10 [ 568.933215][ T8420] ? vma_interval_tree_subtree_search+0x14d/0x1b0 [ 568.939705][ T8420] unmap_mapping_range+0x1ee/0x280 [ 568.944885][ T8420] ? __pfx_unmap_mapping_range+0x10/0x10 [ 568.950592][ T8420] ? inode_newsize_ok+0x13b/0x200 [ 568.955694][ T8420] truncate_pagecache+0x53/0x90 [ 568.961041][ T8420] simple_setattr+0xf2/0x120 [ 568.965719][ T8420] notify_change+0xf41/0x1230 [ 568.970483][ T8420] do_truncate+0x15c/0x220 [ 568.974969][ T8420] ? __pfx_do_truncate+0x10/0x10 [ 568.980008][ T8420] path_openat+0x27a8/0x2d20 [ 568.984687][ T8420] ? __pfx_path_openat+0x10/0x10 [ 568.989688][ T8420] ? __pfx___lock_acquire+0x10/0x10 [ 568.994961][ T8420] ? find_held_lock+0x2d/0x110 [ 568.999791][ T8420] do_filp_open+0x1dc/0x430 [ 569.004355][ T8420] ? __pfx_do_filp_open+0x10/0x10 [ 569.009440][ T8420] ? find_held_lock+0x2d/0x110 [ 569.014298][ T8420] ? _raw_spin_unlock+0x28/0x50 [ 569.019241][ T8420] ? alloc_fd+0x2d7/0x6c0 [ 569.023658][ T8420] do_sys_openat2+0x17a/0x1e0 [ 569.028409][ T8420] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.033706][ T8420] __x64_sys_openat+0x175/0x210 [ 569.038622][ T8420] ? __pfx___x64_sys_openat+0x10/0x10 [ 569.044088][ T8420] do_syscall_64+0xcd/0x250 [ 569.048676][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.054612][ T8420] RIP: 0033:0x7f86e8d7def9 [ 569.059069][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.078719][ T8420] RSP: 002b:00007f86e9ad9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 569.087269][ T8420] RAX: ffffffffffffffda RBX: 00007f86e8f36130 RCX: 00007f86e8d7def9 [ 569.095284][ T8420] RDX: 0000000000000300 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 569.103300][ T8420] RBP: 00007f86e8df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 569.111322][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.119415][ T8420] R13: 0000000000000000 R14: 00007f86e8f36130 R15: 00007ffea6d0b4a8 [ 569.127449][ T8420] [ 569.130648][ T8420] Kernel Offset: disabled [ 569.135632][ T8420] Rebooting in 86400 seconds..