last executing test programs: 13.731145757s ago: executing program 1 (id=361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, &(0x7f0000000080), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='VOLUME\nSYNTH \'Synth Capture\' 004'], 0x32) r12 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x280, 0x0) dup3(r12, r11, 0x0) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) 12.099649151s ago: executing program 1 (id=363): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000020101"], 0x44}}, 0x0) 11.618633705s ago: executing program 1 (id=366): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x16da) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r5, &(0x7f0000000000)=@id, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040094}, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8051) sched_getparam(r2, 0x0) 10.417042355s ago: executing program 1 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 10.371786654s ago: executing program 0 (id=372): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xfffffed0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x5a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x181400) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r5, r4, 0x0, 0x80009) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x30, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x30}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d", @ANYRES64=r3], 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) 7.678262298s ago: executing program 2 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x80000) sendto$phonet(r1, &(0x7f0000000300)="a7999836896d219556c517dcbe11f75257bee9cea3946d0986a82a328ef17f88022a96832fc3ca95143e3493504b190dfd9a74a7263c9afc4a34500557e590ea8d1495ba7b92ce6e26f2ac2ad0608af261c387f7cd55052cb01b349a08d66abb5437a6a3ba7ae0334a668bc49445ad78d6e1fd9c0ffb365e818f976e3aea00a85cb3b7b472cef429829a2b373750d0fb0ac64528aa2d4cacccc3354701c00ffc4712619eb3b2f9b2929c9ca781d7dcec3e783765d07f3edf853f6ea109a6c5b0cc654c15182c3fc2583f80ef69a701f9c42956c17f97475193906a443d4a644e76f25cc1d656f135c274afa817e83b", 0xef, 0x0, &(0x7f0000002480)={0x23, 0x4, 0xb, 0x1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff028}, {0x6}]}) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000400)='vlan1\x00', 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0xfffd, @local}, 0x18, 0x0}}], 0x1, 0x20000004) 7.432005088s ago: executing program 0 (id=377): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 7.158979681s ago: executing program 3 (id=378): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2, 0x6031, 0xffffffffffffffff, 0x0) 7.132967852s ago: executing program 2 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0x3], 0x0, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.075448156s ago: executing program 2 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000900)='B', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0) 5.87062185s ago: executing program 4 (id=382): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x16da) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r5, &(0x7f0000000000)=@id, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20040094}, 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x8, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8051) sched_getparam(r2, 0x0) 5.74838141s ago: executing program 3 (id=383): socket$nl_crypto(0x10, 0x3, 0x15) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0) 5.747022996s ago: executing program 2 (id=384): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1600", 0x10, 0x2b, 0x0, @private1, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000002200), 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) 5.342797065s ago: executing program 0 (id=385): socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(0x0) syz_emit_vhci(0x0, 0x7) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a2b0c0000000000000000020000000900020073797a32000000000900010073797a30000000002c000480280001800b0001"], 0x80}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) chdir(0x0) mount$tmpfs(0x0, &(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x10010) socket$packet(0x11, 0x2, 0x300) 5.149763638s ago: executing program 3 (id=386): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) 4.608535954s ago: executing program 2 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100001, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 4.442741094s ago: executing program 1 (id=388): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x22}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) 4.440447512s ago: executing program 4 (id=389): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = io_uring_setup(0x1698, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) syz_open_procfs(0x0, 0x0) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) 4.223909787s ago: executing program 3 (id=390): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.458286722s ago: executing program 2 (id=391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 3.263982787s ago: executing program 0 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000feb000/0x3000)=nil, 0x3000}, 0x3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.05501506s ago: executing program 4 (id=393): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) getegid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0xb) 2.981282804s ago: executing program 4 (id=394): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.933767249s ago: executing program 1 (id=395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000080)="fe", 0x1, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @mss, @window, @timestamp, @sack_perm, @sack_perm, @mss, @window], 0x200000000000020d) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb236100"], 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x805, 0x0, 0x0) 2.675099807s ago: executing program 3 (id=396): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 2.232269713s ago: executing program 0 (id=397): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x16da) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r4, &(0x7f0000000000)=@id, 0x10) close(r4) 1.689379233s ago: executing program 4 (id=398): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ftruncate(r0, 0x97a9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) prlimit64(r2, 0xe, &(0x7f00000000c0)={0x71, 0x9}, &(0x7f00000001c0)) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r5) syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a950fd28"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68b9c381"}, 0x0, 0x1, {0x0}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x3a00ea60) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r8, &(0x7f000000e280)={0x2020}, 0x2020) 943.718843ms ago: executing program 0 (id=399): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)}, 0x0) 354.610738ms ago: executing program 3 (id=400): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 0s ago: executing program 4 (id=401): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): x0406 failed: -4 [ 151.788418][ T4613] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.798913][ T5573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.816288][ T5790] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 151.822483][ T5790] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 151.896957][ T5816] syz.3.69[5816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.897429][ T5816] syz.3.69[5816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.909552][ T5816] syz.3.69[5816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.001398][ T5816] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69'. [ 152.046255][ T4613] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.708457][ T4613] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.803521][ T5790] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 152.942352][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.899533][ T4613] Bluetooth: hci5: command 0x0c1a tx timeout [ 153.905796][ T4613] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.911869][ T4613] Bluetooth: hci6: command 0x0c1a tx timeout [ 154.225706][ T5228] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 154.326108][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.396768][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.403976][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.426469][ T4613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.551803][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 154.558383][ T29] audit: type=1400 audit(383.450:307): avc: denied { accept } for pid=5831 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 154.588382][ T4613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.600856][ T4613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.618960][ T4613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.632046][ T4613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.739560][ T5323] IPVS: starting estimator thread 0... [ 154.766951][ T4613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.775599][ T4613] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.937995][ T5835] IPVS: using max 13 ests per chain, 31200 per kthread [ 155.177371][ T29] audit: type=1400 audit(383.450:308): avc: denied { write } for pid=5831 comm="syz.3.74" path="socket:[8890]" dev="sockfs" ino=8890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 155.707261][ T5457] bridge_slave_1: left allmulticast mode [ 155.712965][ T5457] bridge_slave_1: left promiscuous mode [ 155.725682][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.792122][ T5841] syz.0.76[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.792602][ T5841] syz.0.76[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.804602][ T5841] syz.0.76[5841] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.856283][ T5841] overlayfs: failed to resolve './file0': -2 [ 155.954877][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 156.118306][ T5237] Bluetooth: hci6: command 0x0c1a tx timeout [ 156.124770][ T5237] Bluetooth: hci5: command 0x0c1a tx timeout [ 156.651929][ T5457] bridge_slave_0: left allmulticast mode [ 156.657763][ T5457] bridge_slave_0: left promiscuous mode [ 156.663459][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.855923][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.939952][ T5237] Bluetooth: hci1: command tx timeout [ 157.078808][ T29] audit: type=1400 audit(386.020:309): avc: denied { write } for pid=5845 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.936290][ T29] audit: type=1400 audit(386.160:310): avc: denied { setopt } for pid=5845 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.956459][ T29] audit: type=1400 audit(386.160:311): avc: denied { setopt } for pid=5845 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.976156][ T29] audit: type=1400 audit(386.870:312): avc: denied { read write } for pid=5836 comm="syz.3.75" name="raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.005583][ T29] audit: type=1400 audit(386.870:313): avc: denied { open } for pid=5836 comm="syz.3.75" path="/dev/raw-gadget" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.043865][ T29] audit: type=1400 audit(386.870:314): avc: denied { ioctl } for pid=5836 comm="syz.3.75" path="/dev/raw-gadget" dev="devtmpfs" ino=732 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 158.136129][ T5237] Bluetooth: hci5: command 0x0c1a tx timeout [ 158.142320][ T4613] Bluetooth: hci6: command 0x0c1a tx timeout [ 158.165575][ T5323] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 158.330595][ T5323] usb 4-1: Invalid ep0 maxpacket: 16 [ 158.477863][ T5323] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 158.545871][ T5457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.571024][ T5457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.591031][ T5457] bond0 (unregistering): Released all slaves [ 158.626208][ T5493] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.633414][ T5493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.016515][ T5237] Bluetooth: hci1: command tx timeout [ 159.471587][ T5862] syz.0.78[5862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.472212][ T5862] syz.0.78[5862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.484553][ T5862] syz.0.78[5862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.626028][ T5862] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78'. [ 160.489772][ T29] audit: type=1400 audit(389.450:315): avc: denied { setopt } for pid=5866 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.562439][ T29] audit: type=1400 audit(389.520:316): avc: denied { write } for pid=5866 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.805798][ T5282] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 160.935562][ T5457] hsr_slave_0: left promiscuous mode [ 160.962127][ T5457] hsr_slave_1: left promiscuous mode [ 160.980848][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.991882][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.003875][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 161.012495][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.030314][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 161.042242][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.049803][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 161.061512][ T5282] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.075483][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.095806][ T5237] Bluetooth: hci1: command tx timeout [ 161.118061][ T5282] usb 1-1: config 0 descriptor?? [ 161.124918][ T5869] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 161.140616][ T5457] veth1_macvtap: left promiscuous mode [ 161.146851][ T5457] veth0_macvtap: left promiscuous mode [ 161.153101][ T5457] veth1_vlan: left promiscuous mode [ 161.160010][ T5282] hub 1-1:0.0: USB hub found [ 161.185714][ T5457] veth0_vlan: left promiscuous mode [ 161.342830][ T5282] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 161.749769][ T5282] usbhid 1-1:0.0: can't add hid device: -32 [ 161.761298][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 162.927414][ T5457] team0 (unregistering): Port device team_slave_1 removed [ 163.022941][ T5457] team0 (unregistering): Port device team_slave_0 removed [ 163.175583][ T5237] Bluetooth: hci1: command tx timeout [ 163.311899][ T5323] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 163.469067][ T5323] usb 4-1: Invalid ep0 maxpacket: 16 [ 163.626026][ T9] usb 1-1: USB disconnect, device number 3 [ 163.640610][ T5323] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 163.815752][ T5323] usb 4-1: Invalid ep0 maxpacket: 16 [ 163.844280][ T5323] usb usb4-port1: attempt power cycle [ 164.074215][ T5672] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.139428][ T29] audit: type=1400 audit(393.100:317): avc: denied { bind } for pid=5887 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 164.210949][ T5672] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.237236][ T5672] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 164.265599][ T5323] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 164.314258][ T5323] usb 4-1: Invalid ep0 maxpacket: 16 [ 164.406095][ T5282] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.407192][ T5672] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 164.485604][ T5323] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 164.537091][ T5323] usb 4-1: Invalid ep0 maxpacket: 16 [ 164.566972][ T5323] usb usb4-port1: unable to enumerate USB device [ 164.573549][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 164.588731][ T5282] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 164.623587][ T5282] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 164.657815][ T5282] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 164.681741][ T5282] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 164.698900][ T5282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.713434][ T5282] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 164.726438][ T5282] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 164.742929][ T5282] usb 1-1: Product: syz [ 164.747945][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 164.775359][ T5282] usb 1-1: Manufacturer: syz [ 164.783865][ T5282] usb 1-1: SerialNumber: syz [ 164.827893][ T5282] usb 1-1: config 0 descriptor?? [ 164.875117][ T5282] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 164.917514][ T5282] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.205844][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.215229][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.223649][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.241022][ T5829] bridge_slave_0: entered allmulticast mode [ 165.247464][ T5898] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET) [ 165.263007][ T5829] bridge_slave_0: entered promiscuous mode [ 165.294604][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.315677][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.332806][ T5829] bridge_slave_1: entered allmulticast mode [ 165.357214][ T5829] bridge_slave_1: entered promiscuous mode [ 165.479413][ T5301] usb 1-1: USB disconnect, device number 4 [ 165.479471][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 165.491095][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.555662][ T5900] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 165.582650][ T5903] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 165.595921][ T5301] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 165.739732][ T5457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.853089][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.901284][ T5457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.039982][ T5457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.109304][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.128108][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.274174][ T5457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.159965][ T5829] team0: Port device team_slave_0 added [ 167.208665][ T5829] team0: Port device team_slave_1 added [ 167.631164][ T5927] Invalid ELF header type: 0 != 1 [ 167.633539][ T29] audit: type=1400 audit(396.590:318): avc: denied { module_load } for pid=5922 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 168.628978][ T5672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.639523][ T5672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.228670][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.236197][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.321951][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.329225][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.491331][ T5573] veth0_vlan: entered promiscuous mode [ 169.570206][ T5573] veth1_vlan: entered promiscuous mode [ 169.620507][ T5573] veth0_macvtap: entered promiscuous mode [ 169.626657][ T5301] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.669200][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.687320][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.737490][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.782138][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.797644][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.813688][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.842289][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.892677][ T5573] veth1_macvtap: entered promiscuous mode [ 169.946712][ T5301] usb 1-1: Using ep0 maxpacket: 8 [ 169.956865][ T5301] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 169.990744][ T5301] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.045205][ T5301] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.072354][ T5829] hsr_slave_0: entered promiscuous mode [ 170.092893][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.105749][ T5829] hsr_slave_1: entered promiscuous mode [ 170.123704][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.141672][ T5301] usbtmc 1-1:16.0: bulk endpoints not found [ 170.145283][ T5829] Cannot create hsr debugfs directory [ 170.178280][ T5457] bridge_slave_1: left allmulticast mode [ 170.190625][ T5457] bridge_slave_1: left promiscuous mode [ 170.236436][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.273441][ T5457] bridge_slave_0: left allmulticast mode [ 170.279339][ T5457] bridge_slave_0: left promiscuous mode [ 170.286314][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.403561][ T29] audit: type=1400 audit(399.360:319): avc: denied { create } for pid=5933 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.329881][ T5323] usb 1-1: USB disconnect, device number 5 [ 171.605467][ T29] audit: type=1400 audit(400.540:320): avc: denied { create } for pid=5970 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 171.653177][ T5971] netlink: 'syz.0.89': attribute type 29 has an invalid length. [ 171.679953][ T29] audit: type=1400 audit(400.640:321): avc: denied { write } for pid=5970 comm="syz.0.89" name="icmp6" dev="proc" ino=4026533460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 172.605882][ T5281] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 172.668941][ T5457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.693646][ T5457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.719068][ T5457] bond0 (unregistering): Released all slaves [ 172.790961][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 172.843374][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 172.906248][ T5281] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.953547][ T5281] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.001161][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.095701][ T5989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.340361][ T5281] usb 4-1: config 0 descriptor?? [ 173.521659][ T5978] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.894178][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.913183][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.932715][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.945155][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.994070][ T5281] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 174.007929][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.013792][ T5281] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 174.053018][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.091516][ T5281] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 174.108149][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.128810][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.330610][ T29] audit: type=1400 audit(403.240:322): avc: denied { read } for pid=5996 comm="syz.0.92" name="usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.186201][ T29] audit: type=1400 audit(403.240:323): avc: denied { open } for pid=5996 comm="syz.0.92" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.268727][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.279717][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.292116][ T29] audit: type=1400 audit(403.280:324): avc: denied { ioctl } for pid=5996 comm="syz.0.92" path="/dev/usbmon0" dev="devtmpfs" ino=705 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.317028][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.329853][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.341149][ T29] audit: type=1400 audit(403.290:325): avc: denied { execute } for pid=5996 comm="syz.0.92" path="/29/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 175.363376][ T5573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.374470][ T5573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.387498][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.822281][ T5573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.890596][ T6019] syz.0.94[6019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.891113][ T6019] syz.0.94[6019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.903151][ T6019] syz.0.94[6019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.005786][ T6019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.94'. [ 176.392318][ T5573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.519202][ T5573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.632278][ T5573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.649667][ T29] audit: type=1326 audit(405.580:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8725b7dff9 code=0x7ffc0000 [ 176.691455][ T29] audit: type=1326 audit(405.590:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8725b7dff9 code=0x7ffc0000 [ 176.737710][ T29] audit: type=1326 audit(405.640:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8725b7dff9 code=0x7ffc0000 [ 176.772321][ T29] audit: type=1326 audit(405.640:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8725b7dff9 code=0x7ffc0000 [ 176.803996][ T29] audit: type=1326 audit(405.640:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8725b7dff9 code=0x7ffc0000 [ 176.838060][ T29] audit: type=1326 audit(405.640:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5977 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8725b7dff9 code=0x7ffc0000 [ 176.878576][ T5457] hsr_slave_0: left promiscuous mode [ 176.922228][ T5457] 0: left promiscuous mode [ 176.964362][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.972155][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.988793][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.997026][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.038000][ T5457] veth1_macvtap: left promiscuous mode [ 177.043629][ T5457] veth0_macvtap: left promiscuous mode [ 177.051987][ T5457] veth1_vlan: left promiscuous mode [ 177.058293][ T5457] veth0_vlan: left promiscuous mode [ 177.766047][ T5323] usb 4-1: USB disconnect, device number 8 [ 179.174112][ T6047] syz.0.99: attempt to access beyond end of device [ 179.174112][ T6047] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 179.195517][ T6047] syz.0.99: attempt to access beyond end of device [ 179.195517][ T6047] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 179.277074][ T6047] Mount JFS Failure: -5 [ 179.281340][ T6047] jfs_mount failed w/return code = -5 [ 179.889536][ T5457] team0 (unregistering): Port device team_slave_1 removed [ 179.943876][ T5457] team0 (unregistering): Port device team_slave_0 removed [ 180.489037][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.512874][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.534652][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.554290][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.563880][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.579583][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.911237][ T5672] veth0_vlan: entered promiscuous mode [ 181.389620][ T5672] veth1_vlan: entered promiscuous mode [ 182.182983][ T6066] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 182.421571][ T5672] veth0_macvtap: entered promiscuous mode [ 182.431818][ T5672] veth1_macvtap: entered promiscuous mode [ 182.451146][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.461763][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.472135][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.482994][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.493262][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.504657][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.518950][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.587707][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.605787][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.625589][ T4613] Bluetooth: hci0: command tx timeout [ 182.661818][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.682906][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.692950][ T5672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.703713][ T5672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.715753][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.866936][ T5672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.883736][ T5672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.893127][ T5672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.902491][ T5672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.112627][ T5455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.135546][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.143454][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.185831][ T5455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.262286][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 183.262311][ T29] audit: type=1400 audit(412.200:347): avc: denied { mounton } for pid=5672 comm="syz-executor" path="/root/syzkaller.3lECSt/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 183.281263][ T6088] netlink: 'syz.3.105': attribute type 10 has an invalid length. [ 183.384365][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 183.411401][ T6088] batman_adv: batadv0: Adding interface: vlan1 [ 183.447389][ T6088] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.560638][ T6088] batman_adv: batadv0: Interface activated: vlan1 [ 183.628016][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 184.033460][ T5457] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.236025][ T29] audit: type=1400 audit(413.130:348): avc: denied { create } for pid=6096 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 184.761875][ T4613] Bluetooth: hci0: command tx timeout [ 185.047287][ T29] audit: type=1400 audit(413.140:349): avc: denied { ioctl } for pid=6096 comm="syz.0.108" path="socket:[10716]" dev="sockfs" ino=10716 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.102984][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.148257][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.194724][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 185.368089][ T6109] capability: warning: `syz.3.109' uses 32-bit capabilities (legacy support in use) [ 185.381176][ T5457] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.437498][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.471243][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.484043][ T6093] block nbd2: shutting down sockets [ 185.606120][ T5457] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.930597][ T29] audit: type=1400 audit(414.890:350): avc: denied { read write } for pid=6122 comm="syz.0.112" name="sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 185.955503][ C1] sd 0:0:1:0: [sda] tag#7307 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 185.966045][ C1] sd 0:0:1:0: [sda] tag#7307 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 186.091495][ T5457] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.305800][ T29] audit: type=1400 audit(414.890:351): avc: denied { open } for pid=6122 comm="syz.0.112" path="/dev/sg0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.533722][ T29] audit: type=1400 audit(414.890:352): avc: denied { ioctl } for pid=6122 comm="syz.0.112" path="/dev/sg0" dev="devtmpfs" ino=693 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 186.646109][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.677498][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.685150][ T6051] bridge_slave_0: entered allmulticast mode [ 186.707235][ T6051] bridge_slave_0: entered promiscuous mode [ 186.723037][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.730344][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.738430][ T6051] bridge_slave_1: entered allmulticast mode [ 186.745900][ T6051] bridge_slave_1: entered promiscuous mode [ 186.785899][ T4613] Bluetooth: hci0: command tx timeout [ 186.893458][ T6051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.970198][ T6051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.164198][ T6051] team0: Port device team_slave_0 added [ 187.190801][ T5457] bridge_slave_1: left allmulticast mode [ 187.201556][ T5457] bridge_slave_1: left promiscuous mode [ 187.213616][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.241781][ T5457] bridge_slave_0: left allmulticast mode [ 187.253664][ T5457] bridge_slave_0: left promiscuous mode [ 187.264881][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.015643][ T29] audit: type=1400 audit(416.930:353): avc: denied { read } for pid=6135 comm="syz.0.114" name="ppp" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.390366][ T29] audit: type=1400 audit(416.930:354): avc: denied { open } for pid=6135 comm="syz.0.114" path="/dev/ppp" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.418584][ T29] audit: type=1400 audit(416.940:355): avc: denied { ioctl } for pid=6135 comm="syz.0.114" path="/dev/ppp" dev="devtmpfs" ino=698 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 188.859626][ T4613] Bluetooth: hci0: command tx timeout [ 188.925872][ T5457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.961182][ T5457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.980780][ T5457] bond0 (unregistering): Released all slaves [ 189.014544][ T6051] team0: Port device team_slave_1 added [ 189.183808][ T5457] hsr_slave_0: left promiscuous mode [ 189.204024][ T5457] hsr_slave_1: left promiscuous mode [ 189.228164][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.237209][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.246482][ T5457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.254958][ T5457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.282172][ T5457] veth1_macvtap: left promiscuous mode [ 189.288055][ T5457] veth0_macvtap: left promiscuous mode [ 189.294222][ T5457] veth1_vlan: left promiscuous mode [ 189.300605][ T5457] veth0_vlan: left promiscuous mode [ 189.731707][ T29] audit: type=1400 audit(418.690:356): avc: denied { setopt } for pid=6144 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.344242][ T5457] team0 (unregistering): Port device team_slave_1 removed [ 190.435781][ T5457] team0 (unregistering): Port device team_slave_0 removed [ 191.199210][ T29] audit: type=1400 audit(420.160:357): avc: denied { ioctl } for pid=6151 comm="syz.2.117" path="/dev/ptp0" dev="devtmpfs" ino=1073 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 191.278557][ T29] audit: type=1400 audit(420.240:358): avc: denied { create } for pid=6153 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.332589][ T29] audit: type=1400 audit(420.290:359): avc: denied { bind } for pid=6153 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.581543][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.589164][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.616352][ T6051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.687610][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.694630][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.730614][ T6051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.697231][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.721037][ T6051] hsr_slave_0: entered promiscuous mode [ 192.784405][ T6051] hsr_slave_1: entered promiscuous mode [ 192.799538][ T6051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.807392][ T6051] Cannot create hsr debugfs directory [ 192.957857][ T29] audit: type=1400 audit(421.880:360): avc: denied { ioctl } for pid=6167 comm="syz.2.120" path="/dev/vhost-net" dev="devtmpfs" ino=1082 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 193.751864][ T29] audit: type=1400 audit(421.970:361): avc: denied { create } for pid=6167 comm="syz.2.120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.805543][ T29] audit: type=1400 audit(421.970:362): avc: denied { write } for pid=6167 comm="syz.2.120" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.857227][ T29] audit: type=1400 audit(421.970:363): avc: denied { open } for pid=6167 comm="syz.2.120" path="/6/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.888608][ T29] audit: type=1400 audit(421.970:364): avc: denied { ioctl } for pid=6167 comm="syz.2.120" path="/6/file0" dev="tmpfs" ino=59 ioctlcmd=0x1287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.932330][ T29] audit: type=1400 audit(422.700:365): avc: denied { unlink } for pid=5672 comm="syz-executor" name="file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 193.987105][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.028058][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.038654][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.055065][ T5493] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.062306][ T5493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.073779][ T5493] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.081096][ T5493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.442492][ T29] audit: type=1400 audit(423.390:366): avc: denied { getopt } for pid=6184 comm="syz.2.122" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.623843][ T29] audit: type=1400 audit(423.580:367): avc: denied { read write } for pid=6189 comm="syz.2.125" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.659085][ T29] audit: type=1400 audit(423.620:368): avc: denied { open } for pid=6189 comm="syz.2.125" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 194.707855][ T29] audit: type=1400 audit(423.660:369): avc: denied { write } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.736558][ T29] audit: type=1400 audit(423.660:370): avc: denied { remove_name } for pid=4658 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.738404][ T4613] Bluetooth: hci6: unexpected event for opcode 0x041b [ 195.835167][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.851247][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.861444][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.871503][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.884335][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.892326][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 196.118078][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.401447][ T5829] veth0_vlan: entered promiscuous mode [ 197.454328][ T6051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.593209][ T6051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.672185][ T5829] veth1_vlan: entered promiscuous mode [ 197.707977][ T6051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.805199][ T6051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.915597][ T8] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 197.975530][ T5237] Bluetooth: hci3: command tx timeout [ 198.013653][ T5829] veth0_macvtap: entered promiscuous mode [ 198.024486][ T6201] chnl_net:caif_netlink_parms(): no params data found [ 198.060497][ T5829] veth1_macvtap: entered promiscuous mode [ 198.155776][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 198.212858][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.225657][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.237599][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.249508][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.265853][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.277464][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.304773][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.321645][ T8] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 198.378977][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.404804][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.425043][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.436114][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.446739][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.463843][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.496179][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.505827][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 198.514298][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.526027][ T8] usb usb1-port1: attempt power cycle [ 198.533614][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.557280][ T6201] bridge_slave_0: entered allmulticast mode [ 198.575207][ T6201] bridge_slave_0: entered promiscuous mode [ 198.597600][ T6201] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.604788][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.647025][ T6201] bridge_slave_1: entered allmulticast mode [ 198.670171][ T6201] bridge_slave_1: entered promiscuous mode [ 198.716940][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.730217][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.740438][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.750840][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.834908][ T6201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.877383][ T6201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.888468][ T8] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 198.938089][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 199.087794][ T6201] team0: Port device team_slave_0 added [ 199.095580][ T8] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 199.135158][ T6201] team0: Port device team_slave_1 added [ 199.145218][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 199.153176][ T8] usb usb1-port1: unable to enumerate USB device [ 199.245507][ T5301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 199.285896][ T6051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.338525][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.347059][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.375734][ T6201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.423895][ T6201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.436295][ T5301] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 199.460852][ T6201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.487659][ T5301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.528563][ T5301] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 199.556098][ T5301] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 199.574720][ T6201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.588870][ T5301] usb 3-1: Manufacturer: syz [ 199.615198][ T5301] usb 3-1: config 0 descriptor?? [ 199.661233][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.667738][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.732462][ T6051] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.743510][ T5487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.768491][ T5487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.848936][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.856138][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.866094][ T5301] rc_core: IR keymap rc-hauppauge not found [ 199.872080][ T5301] Registered IR keymap rc-empty [ 199.881560][ T5301] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 199.917714][ T6201] hsr_slave_0: entered promiscuous mode [ 199.935045][ T5301] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 199.952719][ T6201] hsr_slave_1: entered promiscuous mode [ 199.970057][ T6201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.985102][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 199.985122][ T29] audit: type=1400 audit(428.940:376): avc: denied { read } for pid=4661 comm="acpid" name="event4" dev="devtmpfs" ino=2342 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.018927][ T6201] Cannot create hsr debugfs directory [ 200.020887][ T29] audit: type=1400 audit(428.940:377): avc: denied { open } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2342 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.051556][ T5301] usb 3-1: USB disconnect, device number 2 [ 200.065780][ T5237] Bluetooth: hci3: command tx timeout [ 200.124828][ T29] audit: type=1400 audit(428.940:378): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2342 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 200.319505][ T5493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.330739][ T5493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.341872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.349152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.877847][ T29] audit: type=1400 audit(429.840:379): avc: denied { ioctl } for pid=6265 comm="syz.0.137" path="socket:[11677]" dev="sockfs" ino=11677 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 201.103651][ T6201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.195794][ T5237] Bluetooth: hci3: command tx timeout [ 202.221958][ T6201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.488617][ T6201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.536068][ T5282] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 202.688711][ T6201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.727914][ T5282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.728001][ T5282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 202.728055][ T5282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.728100][ T5282] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 202.729642][ T5282] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.729692][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 202.729731][ T5282] usb 2-1: SerialNumber: syz [ 202.752451][ T5282] cdc_acm 2-1:1.0: skipping garbage [ 202.811028][ T29] audit: type=1400 audit(431.760:380): avc: denied { mount } for pid=6293 comm="syz.2.144" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 202.993793][ T6201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.027005][ T6201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.032007][ T29] audit: type=1400 audit(431.990:381): avc: denied { unmount } for pid=5672 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 203.037216][ T6201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.064333][ T6201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.251735][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.361265][ T6201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.480624][ T6201] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.533575][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.540850][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.587070][ T5457] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.594316][ T5457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.776511][ T6201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.038592][ T5280] usb 2-1: USB disconnect, device number 2 [ 204.185502][ T5281] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.216588][ T5237] Bluetooth: hci3: command tx timeout [ 204.239805][ T6051] veth0_vlan: entered promiscuous mode [ 204.317411][ T6051] veth1_vlan: entered promiscuous mode [ 204.355618][ T5281] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.393346][ T5281] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 204.418685][ T5281] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.432418][ T6051] veth0_macvtap: entered promiscuous mode [ 204.450014][ T5281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 204.487381][ T6051] veth1_macvtap: entered promiscuous mode [ 204.495623][ T5281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 204.541661][ T5281] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.563731][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.581756][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.613962][ T5281] usb 1-1: Product: syz [ 204.624557][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.640417][ T5281] usb 1-1: Manufacturer: syz [ 204.654234][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.667659][ T5281] cdc_wdm 1-1:1.0: skipping garbage [ 204.672974][ T5281] cdc_wdm 1-1:1.0: skipping garbage [ 204.685815][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.704306][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.705099][ T5281] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 204.716902][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.731402][ T5281] cdc_wdm 1-1:1.0: Unknown control protocol [ 204.742161][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.763909][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.791590][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.819143][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.833727][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.853103][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.878791][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.893386][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.925466][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.948037][ T6051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.963729][ T5281] usb 1-1: USB disconnect, device number 10 [ 204.971448][ T6051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.011029][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.044579][ T6201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.078192][ T6051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.115264][ T6051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.133225][ T6051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.152439][ T6051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.343543][ T6201] veth0_vlan: entered promiscuous mode [ 205.423671][ T5493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.461500][ T5493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.526369][ T6201] veth1_vlan: entered promiscuous mode [ 205.532238][ T5493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.577519][ T5493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.697074][ T6201] veth0_macvtap: entered promiscuous mode [ 205.724420][ T6201] veth1_macvtap: entered promiscuous mode [ 205.804863][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.846051][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.873792][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.889618][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.919436][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.942088][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.959270][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.993943][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.015517][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.037479][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.049317][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.065518][ T6357] netlink: 'syz.2.158': attribute type 16 has an invalid length. [ 206.075841][ T6357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.158'. [ 206.100045][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.335626][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.346457][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.356725][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.381886][ T6360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.389780][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.409212][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.419975][ T6360] syz.4.38: attempt to access beyond end of device [ 206.419975][ T6360] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 206.429352][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.454857][ T29] audit: type=1400 audit(435.410:382): avc: denied { read } for pid=6371 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 206.455072][ T6360] SQUASHFS error: Failed to read block 0x0: -5 [ 206.488477][ T6360] unable to read squashfs_super_block [ 206.498315][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.513530][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.525731][ T6201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.554907][ T6201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.600782][ T6201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.771403][ T6201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.810075][ T6201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.841583][ T6201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.864749][ T6201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.141489][ T5437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.159944][ T5487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.225460][ T5487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.232931][ T5437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.678559][ T6387] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 207.805709][ T6387] vlan2: entered allmulticast mode [ 207.846762][ T6387] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 207.979864][ T6387] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 208.515695][ T1185] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 208.767096][ T1185] usb 1-1: Invalid ep0 maxpacket: 16 [ 208.917525][ T1185] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 209.115924][ T1185] usb 1-1: Invalid ep0 maxpacket: 16 [ 209.274990][ T1185] usb usb1-port1: attempt power cycle [ 210.335766][ T1185] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 210.357438][ T1185] usb 1-1: Invalid ep0 maxpacket: 16 [ 210.505672][ T1185] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 210.541541][ T1185] usb 1-1: Invalid ep0 maxpacket: 16 [ 210.551291][ T1185] usb usb1-port1: unable to enumerate USB device [ 210.622793][ T6401] netlink: 'syz.1.171': attribute type 4 has an invalid length. [ 210.661161][ T6401] netlink: 17 bytes leftover after parsing attributes in process `syz.1.171'. [ 210.847918][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 211.353201][ T6428] syz.3.178[6428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.353681][ T6428] syz.3.178[6428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.365905][ T6428] syz.3.178[6428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.456053][ T6428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.178'. [ 212.328809][ T6435] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 212.337235][ T6435] netlink: 9336 bytes leftover after parsing attributes in process `syz.1.183'. [ 212.346525][ T6435] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 212.845637][ T29] audit: type=1400 audit(441.800:383): avc: denied { read } for pid=6447 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.930649][ T29] audit: type=1400 audit(441.870:384): avc: denied { bind } for pid=6447 comm="syz.3.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.950155][ T1185] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 213.115617][ T1185] usb 3-1: device descriptor read/64, error -71 [ 213.136318][ T29] audit: type=1400 audit(441.870:385): avc: denied { name_bind } for pid=6447 comm="syz.3.188" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 213.199627][ T29] audit: type=1400 audit(441.870:386): avc: denied { node_bind } for pid=6447 comm="syz.3.188" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 213.395539][ T1185] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.546854][ T1185] usb 3-1: device descriptor read/64, error -71 [ 213.687061][ T1185] usb usb3-port1: attempt power cycle [ 214.115572][ T1185] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 214.136509][ T1185] usb 3-1: device descriptor read/8, error -71 [ 215.051596][ T6470] input: syz1 as /devices/virtual/input/input8 [ 215.174892][ T1185] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 215.323459][ T1185] usb 3-1: device descriptor read/8, error -71 [ 215.436041][ T1185] usb usb3-port1: unable to enumerate USB device [ 215.465903][ T29] audit: type=1400 audit(444.420:387): avc: denied { write } for pid=6481 comm="syz.4.200" name="ppp" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 215.603667][ T29] audit: type=1326 audit(444.560:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 215.688515][ T29] audit: type=1326 audit(444.610:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 215.775553][ T29] audit: type=1326 audit(444.610:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 215.859802][ T6490] warning: `syz.1.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 215.873601][ T29] audit: type=1326 audit(444.610:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 215.924437][ T29] audit: type=1326 audit(444.610:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 215.994561][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 216.667876][ T6520] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 218.273191][ T6552] netlink: 44 bytes leftover after parsing attributes in process `syz.0.225'. [ 218.323790][ T6552] netlink: 35 bytes leftover after parsing attributes in process `syz.0.225'. [ 218.359666][ T6552] netlink: 'syz.0.225': attribute type 6 has an invalid length. [ 218.388663][ T6552] netlink: 'syz.0.225': attribute type 5 has an invalid length. [ 218.425577][ T6552] netlink: 35 bytes leftover after parsing attributes in process `syz.0.225'. [ 218.600803][ T6560] wg1: entered promiscuous mode [ 218.688686][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 218.688710][ T29] audit: type=1400 audit(447.650:403): avc: denied { write } for pid=6558 comm="syz.3.229" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.013581][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 219.055247][ T29] audit: type=1400 audit(448.010:404): avc: denied { write } for pid=6569 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 219.594643][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 219.603896][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.635448][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'. [ 219.666031][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 219.680860][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'. [ 219.834474][ T6585] erspan0: entered promiscuous mode [ 219.848561][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 219.905901][ T25] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 219.915041][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.954694][ T25] usb 3-1: config 0 descriptor?? [ 220.251157][ T5281] usb 3-1: USB disconnect, device number 7 [ 220.352346][ T6596] netlink: 'syz.4.243': attribute type 10 has an invalid length. [ 220.364992][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.374031][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.394904][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.402249][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.410017][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.417294][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.431818][ T6596] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.624703][ T29] audit: type=1400 audit(449.580:405): avc: denied { map } for pid=6601 comm="syz.1.246" path="socket:[14075]" dev="sockfs" ino=14075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 220.655630][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 220.701136][ T6603] syz.3.245[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.701698][ T6603] syz.3.245[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.714044][ T6603] syz.3.245[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.812900][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.245'. [ 221.337886][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.365805][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 221.544464][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 221.595722][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.623076][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.641618][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.698710][ T25] usb 1-1: config 0 descriptor?? [ 221.765086][ T6610] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 221.824579][ T6614] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 222.010849][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 222.159694][ T25] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 222.214283][ T25] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 222.399692][ T25] usb 1-1: USB disconnect, device number 15 [ 222.675642][ T5282] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 222.837573][ T5282] usb 2-1: Using ep0 maxpacket: 32 [ 222.862505][ T5282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.873330][ T5282] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 222.895505][ T5282] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.918432][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.927741][ T5282] usb 2-1: Product: syz [ 222.932680][ T5282] usb 2-1: Manufacturer: syz [ 222.938197][ T5282] usb 2-1: SerialNumber: syz [ 223.111624][ T6638] process 'syz.0.259' launched './file0' with NULL argv: empty string added [ 223.122613][ T29] audit: type=1400 audit(452.090:406): avc: denied { execute_no_trans } for pid=6637 comm="syz.0.259" path="/68/file0" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 223.160950][ T5282] usb 2-1: USB disconnect, device number 3 [ 223.531999][ T6645] syz.3.260[6645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.532122][ T6645] syz.3.260[6645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.544487][ T6645] syz.3.260[6645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.636466][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.260'. [ 223.660580][ T1185] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 223.898770][ T1185] usb 3-1: Using ep0 maxpacket: 8 [ 224.054050][ T1185] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 224.082215][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 224.156163][ T1185] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.255680][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.335900][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.389594][ T6652] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 224.469057][ T1185] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 224.476888][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 224.488583][ T1185] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.501027][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.512251][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.535618][ T1185] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 224.543213][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 224.579244][ T1185] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.601839][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.613083][ T1185] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.658684][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 224.697051][ T6661] netlink: 'syz.3.267': attribute type 12 has an invalid length. [ 224.728241][ T1185] usb 3-1: string descriptor 0 read error: -22 [ 224.734821][ T1185] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 224.745123][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.783669][ T1185] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 224.800159][ T6661] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.809736][ T6661] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.818690][ T6661] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.827577][ T6661] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.844443][ T6661] vxlan0: entered promiscuous mode [ 224.968922][ T6667] netlink: 76 bytes leftover after parsing attributes in process `syz.1.270'. [ 225.168328][ T1185] usb 3-1: USB disconnect, device number 8 [ 225.297859][ T29] audit: type=1400 audit(454.260:407): avc: denied { ioctl } for pid=6674 comm="syz.0.272" path="socket:[14747]" dev="sockfs" ino=14747 ioctlcmd=0x8b28 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.452083][ T29] audit: type=1400 audit(454.400:408): avc: denied { connect } for pid=6676 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.800946][ T6685] Cannot find add_set index 0 as target [ 226.494139][ T6705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6705 comm=syz.1.284 [ 226.522279][ T6707] overlayfs: failed to resolve '/6 kc': -2 [ 226.539970][ T6705] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 226.559824][ T6709] sd 0:0:1:0: device reset [ 226.701626][ T6705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.811348][ T29] audit: type=1400 audit(455.760:409): avc: denied { create } for pid=6712 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.853527][ T6710] bond1: (slave ip6gretap1): making interface the new active one [ 226.862841][ T6710] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 227.394842][ T29] audit: type=1400 audit(455.870:410): avc: denied { connect } for pid=6712 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.520061][ T29] audit: type=1400 audit(455.870:411): avc: denied { setopt } for pid=6712 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.665933][ T29] audit: type=1400 audit(455.890:412): avc: denied { bind } for pid=6712 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.783855][ T29] audit: type=1400 audit(455.890:413): avc: denied { write } for pid=6712 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 227.863991][ T29] audit: type=1400 audit(456.450:414): avc: denied { write } for pid=6716 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.971583][ T6733] Bluetooth: MGMT ver 1.23 [ 228.008967][ T6724] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 228.245526][ T5281] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.294852][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'. [ 228.313737][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.297'. [ 228.415607][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 228.433932][ T5281] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.443945][ T5281] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.490001][ T5281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.526654][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 228.550024][ T4613] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 228.561111][ T4613] Bluetooth: hci0: Injecting HCI hardware error event [ 228.582467][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 228.593951][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 228.602916][ T5281] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.612346][ T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 228.620970][ T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 228.629815][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.637925][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 228.647063][ T5281] usb 2-1: Product: syz [ 228.652350][ T5281] usb 2-1: Manufacturer: syz [ 228.657127][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.667897][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 228.677721][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.691021][ T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 228.700737][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.765560][ T25] usb 4-1: config 0 descriptor?? [ 228.783185][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 228.791916][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 228.825208][ T5281] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 228.845541][ T5281] cdc_wdm 2-1:1.0: Unknown control protocol [ 228.987823][ T5281] usb 2-1: USB disconnect, device number 4 [ 229.000562][ T25] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 229.057714][ T25] usb 4-1: USB disconnect, device number 9 [ 229.107275][ T25] usblp1: removed [ 229.691267][ T6754] syz.4.300[6754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.691788][ T6754] syz.4.300[6754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.704001][ T6754] syz.4.300[6754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.794789][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.300'. [ 230.066994][ T5237] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 230.093933][ T5237] Bluetooth: hci0: command 0x0401 tx timeout [ 230.102914][ T4613] Bluetooth: hci0: hardware error 0x00 [ 230.414157][ T6757] kvm: apic: phys broadcast and lowest prio [ 230.525546][ T5281] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 230.533686][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 230.947129][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 230.957867][ T5281] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 230.967055][ T5281] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.016143][ T5281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.812903][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 231.824308][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 231.837859][ T5281] usb 2-1: string descriptor 0 read error: -71 [ 231.844306][ T5281] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.853723][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.863863][ T25] usb 4-1: unable to read config index 0 descriptor/all [ 231.871059][ T25] usb 4-1: can't read configurations, error -71 [ 231.891434][ T5281] usb 2-1: can't set config #1, error -71 [ 231.899584][ T5281] usb 2-1: USB disconnect, device number 5 [ 232.298144][ T4613] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 232.315519][ T6780] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'. [ 235.930903][ T29] audit: type=1400 audit(464.880:415): avc: denied { bind } for pid=6821 comm="syz.3.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 236.020091][ T6821] delete_channel: no stack [ 236.051550][ T6821] delete_channel: no stack [ 236.312762][ T29] audit: type=1400 audit(465.250:416): avc: denied { create } for pid=6826 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.332321][ T29] audit: type=1400 audit(465.250:417): avc: denied { listen } for pid=6826 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.351993][ T29] audit: type=1400 audit(465.250:418): avc: denied { accept } for pid=6826 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 236.374132][ T6816] syz.4.323 (6816): drop_caches: 2 [ 236.978890][ T29] audit: type=1400 audit(465.940:419): avc: denied { mounton } for pid=6844 comm="syz.2.332" path="/syzcgroup/cpu/syz2/syz0/file0" dev="cgroup" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 237.255942][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 237.577570][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.588734][ T8] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.602426][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.612589][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.678385][ T6854] syz.0.335[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.678819][ T6854] syz.0.335[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.690852][ T6854] syz.0.335[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.790965][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'. [ 238.644048][ T8] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.658017][ T8] usb 3-1: invalid MIDI out EP 0 [ 238.931991][ T8] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 239.092916][ T1185] usb 3-1: USB disconnect, device number 9 [ 239.199071][ T5237] Bluetooth: hci5: sending frame failed (-49) [ 239.208836][ T4613] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 239.265971][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 239.425569][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 239.441042][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.460668][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.492745][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 239.521440][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 239.555534][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.598676][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.636089][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.603431][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 240.609081][ T8] usbtmc 2-1:16.0: can't read capabilities [ 240.760868][ T29] audit: type=1400 audit(469.710:420): avc: denied { mounton } for pid=6871 comm="syz.4.341" path="/proc/98/task" dev="proc" ino=15275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 240.920729][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.019398][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.028549][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.037652][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.046765][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.055864][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.065134][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.076608][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.085756][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.094856][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.103956][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.113055][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.124119][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.133266][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.150269][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.159466][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 241.430673][ C1] sd 0:0:1:0: [sda] tag#7308 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 241.441166][ C1] sd 0:0:1:0: [sda] tag#7308 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 241.965856][ T29] audit: type=1400 audit(470.450:421): avc: denied { ioctl } for pid=6882 comm="syz.0.355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 242.573864][ T6898] libceph: resolve '. [ 242.573864][ T6898] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 242.573864][ T6898] ' (ret=-3): failed [ 243.283936][ T5310] usb 2-1: USB disconnect, device number 6 [ 243.359043][ T6898] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.389144][ T6907] team0: Port device team_slave_1 removed [ 243.423205][ T6898] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 243.461624][ T6898] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 243.744809][ T6898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.786422][ T6898] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.710461][ T6898] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 244.931231][ T6898] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.962232][ T6898] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 245.096634][ T4613] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.121430][ T6898] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 245.208841][ T29] audit: type=1400 audit(474.170:422): avc: denied { read } for pid=6919 comm="syz.0.356" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 245.274763][ T6921] block device autoloading is deprecated and will be removed. [ 245.430562][ T29] audit: type=1400 audit(474.200:423): avc: denied { open } for pid=6919 comm="syz.0.356" path="/97/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 245.496117][ T4613] Bluetooth: hci6: command 0x0c1a tx timeout [ 245.502186][ T4613] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.574765][ T29] audit: type=1400 audit(474.530:424): avc: denied { setattr } for pid=6927 comm="syz.0.358" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.652862][ T29] audit: type=1400 audit(474.610:425): avc: denied { unmount } for pid=5227 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.815581][ T4613] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.845677][ T5323] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.898676][ T29] audit: type=1400 audit(474.860:426): avc: denied { setopt } for pid=6930 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.918047][ T29] audit: type=1400 audit(474.860:427): avc: denied { listen } for pid=6930 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.938339][ T29] audit: type=1400 audit(474.860:428): avc: denied { connect } for pid=6930 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 245.989618][ T29] audit: type=1400 audit(474.950:429): avc: denied { write } for pid=6930 comm="syz.0.359" path="socket:[15665]" dev="sockfs" ino=15665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 246.070774][ T5323] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 246.092086][ T5323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.150164][ T5323] usb 3-1: Product: syz [ 246.175771][ T5323] usb 3-1: Manufacturer: syz [ 246.180466][ T5323] usb 3-1: SerialNumber: syz [ 246.256438][ T5323] usb 3-1: config 0 descriptor?? [ 246.935591][ T4613] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.198794][ T4613] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.083761][ T4613] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.347432][ T6952] netlink: 48 bytes leftover after parsing attributes in process `syz.1.363'. [ 248.623265][ T5323] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 248.665986][ T5323] usb 3-1: USB disconnect, device number 10 [ 248.865070][ T5323] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 249.016921][ T4613] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.744364][ T29] audit: type=1400 audit(478.350:430): avc: denied { write } for pid=6956 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.026926][ T5323] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 250.282098][ T4613] Bluetooth: hci1: command 0x0c1a tx timeout [ 251.125701][ T4613] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.340458][ T7010] tipc: Started in network mode [ 253.378364][ T7010] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 253.412563][ T7010] tipc: Enabled bearer , priority 10 [ 253.464771][ T29] audit: type=1400 audit(482.410:431): avc: denied { ioctl } for pid=7005 comm="syz.4.379" path="socket:[16713]" dev="sockfs" ino=16713 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.488872][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.566055][ T5323] tipc: Node number set to 15444650 [ 254.793090][ T7020] tipc: Started in network mode [ 254.822369][ T7020] tipc: Node identity 7f000001, cluster identity 4711 [ 254.854489][ T7020] tipc: Enabled bearer , priority 10 [ 255.224815][ T29] audit: type=1400 audit(484.060:432): avc: denied { connect } for pid=7019 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.865089][ T5310] tipc: Node number set to 2130706433 [ 255.973167][ T29] audit: type=1400 audit(484.930:433): avc: denied { mount } for pid=7032 comm="syz.2.387" name="/" dev="autofs" ino=15951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 256.020292][ T29] audit: type=1400 audit(484.980:434): avc: denied { read } for pid=7032 comm="syz.2.387" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.114222][ T7037] syz.0.385[7037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.114698][ T7037] syz.0.385[7037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.126784][ T7037] syz.0.385[7037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.217016][ T7037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'. [ 256.255026][ T29] audit: type=1400 audit(484.980:435): avc: denied { open } for pid=7032 comm="syz.2.387" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.447885][ T29] audit: type=1400 audit(484.980:436): avc: denied { mounton } for pid=7032 comm="syz.2.387" path="/77/file1/file0" dev="autofs" ino=15956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 256.602788][ T29] audit: type=1400 audit(484.980:437): avc: denied { ioctl } for pid=7032 comm="syz.2.387" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.704051][ T29] audit: type=1400 audit(485.010:438): avc: denied { unmount } for pid=5672 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 257.218906][ T5310] kernel write not supported for file bpf-prog (pid: 5310 comm: kworker/1:7) [ 257.232746][ T29] audit: type=1326 audit(486.190:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 257.259725][ T29] audit: type=1326 audit(486.190:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 257.289819][ T29] audit: type=1326 audit(486.190:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3897b7dff9 code=0x7ffc0000 [ 257.668120][ T5310] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 257.825629][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 257.831828][ T5310] usb 2-1: no configurations [ 257.838378][ T5310] usb 2-1: can't read configurations, error -22 [ 257.990499][ T5310] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 258.395476][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 258.401982][ T5310] usb 2-1: no configurations [ 258.413907][ T5310] usb 2-1: can't read configurations, error -22 [ 258.422697][ T5310] usb usb2-port1: attempt power cycle [ 259.275739][ T5310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 259.323215][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 259.334892][ T5310] usb 2-1: no configurations [ 259.341765][ T5310] usb 2-1: can't read configurations, error -22 [ 260.325832][ T5310] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.396476][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 260.409715][ T5310] usb 2-1: no configurations [ 260.415610][ T5310] usb 2-1: can't read configurations, error -22 [ 260.423459][ T5310] usb usb2-port1: unable to enumerate USB device [ 261.104296][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.449123][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.851902][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.868976][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.890297][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.917318][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.977622][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 315.999409][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.503689][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.599424][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.684957][ T5228] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.710671][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.712871][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.720394][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.751407][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.752075][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 317.774740][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.791524][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.891026][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 317.902733][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.916521][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.930472][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.999679][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.128321][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.137340][ T5232] Bluetooth: hci0: command tx timeout [ 318.316684][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 318.366154][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.854954][ T5455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.144786][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.161010][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.185294][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.214288][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.233684][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 319.244498][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.752665][ T5455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.896409][ T5228] Bluetooth: hci3: command tx timeout [ 320.137872][ T5228] Bluetooth: hci1: command tx timeout [ 320.215738][ T5228] Bluetooth: hci0: command tx timeout [ 320.266268][ T5455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.456891][ T5228] Bluetooth: hci5: command tx timeout [ 321.107532][ T5455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.337293][ T5228] Bluetooth: hci6: command tx timeout [ 321.976210][ T5228] Bluetooth: hci3: command tx timeout [ 322.225556][ T5228] Bluetooth: hci1: command tx timeout [ 322.298924][ T5228] Bluetooth: hci0: command tx timeout [ 322.549968][ T5228] Bluetooth: hci5: command tx timeout [ 322.552848][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.562415][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.415851][ T5228] Bluetooth: hci6: command tx timeout [ 324.056763][ T5228] Bluetooth: hci3: command tx timeout [ 324.297152][ T5228] Bluetooth: hci1: command tx timeout [ 324.385570][ T5228] Bluetooth: hci0: command tx timeout [ 324.621307][ T5228] Bluetooth: hci5: command tx timeout [ 325.495741][ T5228] Bluetooth: hci6: command tx timeout [ 326.144872][ T5228] Bluetooth: hci3: command tx timeout [ 326.375824][ T5228] Bluetooth: hci1: command tx timeout [ 326.706017][ T5228] Bluetooth: hci5: command tx timeout [ 326.724652][ T5455] bridge_slave_1: left allmulticast mode [ 326.756990][ T5455] bridge_slave_1: left promiscuous mode [ 326.764837][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.822103][ T5455] bridge_slave_0: left promiscuous mode [ 326.832722][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.584711][ T5228] Bluetooth: hci6: command tx timeout [ 331.689973][ T5455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.887417][ T5455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.923114][ T5455] bond0 (unregistering): Released all slaves [ 334.349170][ T5455] tipc: Disabling bearer [ 334.526902][ T5455] tipc: Left network mode [ 340.134518][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 340.134697][ T29] audit: type=1400 audit(569.090:451): avc: denied { module_request } for pid=7095 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 347.526867][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 347.592580][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 347.629554][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 347.675083][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 347.716538][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 347.760013][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 348.761368][ T7095] chnl_net:caif_netlink_parms(): no params data found [ 349.046933][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 349.156925][ T5455] hsr_slave_0: left promiscuous mode [ 349.180323][ T5455] hsr_slave_1: left promiscuous mode [ 349.195406][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.202912][ T5455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.216403][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.223876][ T5455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.247845][ T5455] veth1_macvtap: left promiscuous mode [ 349.253448][ T5455] veth0_macvtap: left promiscuous mode [ 349.260169][ T5455] veth1_vlan: left promiscuous mode [ 349.266860][ T5455] veth0_vlan: left promiscuous mode [ 349.916435][ T5455] team0 (unregistering): Port device team_slave_1 removed [ 349.982909][ T5455] team0 (unregistering): Port device team_slave_0 removed [ 350.056812][ T5228] Bluetooth: hci7: command tx timeout [ 350.691069][ T7087] chnl_net:caif_netlink_parms(): no params data found [ 350.897400][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 351.148559][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.157090][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.164435][ T7091] bridge_slave_0: entered allmulticast mode [ 351.173106][ T7091] bridge_slave_0: entered promiscuous mode [ 351.196010][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.203198][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.225427][ T7095] bridge_slave_0: entered allmulticast mode [ 351.233266][ T7095] bridge_slave_0: entered promiscuous mode [ 351.258196][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.278548][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.295703][ T7095] bridge_slave_1: entered allmulticast mode [ 351.305759][ T7095] bridge_slave_1: entered promiscuous mode [ 351.388871][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.405671][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.413027][ T7091] bridge_slave_1: entered allmulticast mode [ 351.431665][ T7091] bridge_slave_1: entered promiscuous mode [ 351.506076][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.593593][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.638254][ T7095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.651129][ T7095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.731239][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.752597][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.763564][ T7087] bridge_slave_0: entered allmulticast mode [ 351.772229][ T7087] bridge_slave_0: entered promiscuous mode [ 351.794511][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.801855][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.816230][ T7098] bridge_slave_0: entered allmulticast mode [ 351.823210][ T7098] bridge_slave_0: entered promiscuous mode [ 351.840095][ T7091] team0: Port device team_slave_0 added [ 351.870998][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.882293][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.890245][ T7087] bridge_slave_1: entered allmulticast mode [ 351.898391][ T7087] bridge_slave_1: entered promiscuous mode [ 351.912641][ T7095] team0: Port device team_slave_0 added [ 351.919001][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.933929][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.942557][ T7098] bridge_slave_1: entered allmulticast mode [ 351.950446][ T7098] bridge_slave_1: entered promiscuous mode [ 351.970405][ T7091] team0: Port device team_slave_1 added [ 352.017772][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.059301][ T7095] team0: Port device team_slave_1 added [ 352.136081][ T5228] Bluetooth: hci7: command tx timeout [ 352.138313][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.180742][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.193840][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.243246][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.274672][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.295612][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.340962][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.399069][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.519577][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.546454][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.553482][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.600828][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.674491][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.681818][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.709515][ T7095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.757406][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.818824][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.834083][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.861120][ T7095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.881253][ T7098] team0: Port device team_slave_0 added [ 352.892943][ T7098] team0: Port device team_slave_1 added [ 352.934143][ T7087] team0: Port device team_slave_0 added [ 352.944998][ T7087] team0: Port device team_slave_1 added [ 353.024471][ T7091] hsr_slave_0: entered promiscuous mode [ 353.031461][ T7091] hsr_slave_1: entered promiscuous mode [ 353.076209][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.083221][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.111892][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.123704][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 353.159029][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.166139][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.192832][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.222071][ T7095] hsr_slave_0: entered promiscuous mode [ 353.229141][ T7095] hsr_slave_1: entered promiscuous mode [ 353.235949][ T7095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.243555][ T7095] Cannot create hsr debugfs directory [ 353.250283][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.263594][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.291094][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.346154][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.353170][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.381006][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.568902][ T7098] hsr_slave_0: entered promiscuous mode [ 353.575277][ T7098] hsr_slave_1: entered promiscuous mode [ 353.584091][ T7098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.592493][ T7098] Cannot create hsr debugfs directory [ 353.602294][ T7087] hsr_slave_0: entered promiscuous mode [ 353.609372][ T7087] hsr_slave_1: entered promiscuous mode [ 353.616604][ T7087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.624210][ T7087] Cannot create hsr debugfs directory [ 353.699714][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.707359][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.714744][ T7113] bridge_slave_0: entered allmulticast mode [ 353.722867][ T7113] bridge_slave_0: entered promiscuous mode [ 353.795967][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.803145][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.812157][ T7113] bridge_slave_1: entered allmulticast mode [ 353.820344][ T7113] bridge_slave_1: entered promiscuous mode [ 353.869395][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.880384][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.980527][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.991787][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.056442][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.141370][ T7091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.192373][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.203953][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.215605][ T5228] Bluetooth: hci7: command tx timeout [ 354.237472][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.319405][ T7091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.405931][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.417539][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.451031][ T7113] team0: Port device team_slave_0 added [ 354.468494][ T7113] team0: Port device team_slave_1 added [ 354.506924][ T7091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.682229][ T7091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.704434][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.726398][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.753284][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.817056][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.835109][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.863581][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.058621][ T7113] hsr_slave_0: entered promiscuous mode [ 355.077141][ T7113] hsr_slave_1: entered promiscuous mode [ 355.083738][ T7113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.104503][ T7113] Cannot create hsr debugfs directory [ 355.230449][ T35] bridge_slave_1: left allmulticast mode [ 355.245895][ T35] bridge_slave_1: left promiscuous mode [ 355.252204][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.267300][ T35] bridge_slave_0: left allmulticast mode [ 355.273057][ T35] bridge_slave_0: left promiscuous mode [ 355.279916][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.293739][ T35] bridge_slave_1: left allmulticast mode [ 355.300194][ T35] bridge_slave_1: left promiscuous mode [ 355.306984][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.319247][ T35] bridge_slave_0: left allmulticast mode [ 355.326872][ T35] bridge_slave_0: left promiscuous mode [ 355.332659][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.247165][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.258815][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.270788][ T35] bond0 (unregistering): Released all slaves [ 356.304746][ T5228] Bluetooth: hci7: command tx timeout [ 356.492269][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.504005][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.519751][ T35] bond0 (unregistering): Released all slaves [ 356.668303][ T7091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.810823][ T7095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.866589][ T7091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.876912][ T7091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.960257][ T7095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.974824][ T7091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 357.078265][ T7095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.229056][ T7095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.762030][ T35] hsr_slave_0: left promiscuous mode [ 357.780819][ T35] hsr_slave_1: left promiscuous mode [ 357.793326][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.803015][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.812161][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.820925][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.834399][ T35] hsr_slave_0: left promiscuous mode [ 357.841107][ T35] hsr_slave_1: left promiscuous mode [ 357.847959][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.856257][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.867677][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.875197][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.914220][ T35] veth1_macvtap: left promiscuous mode [ 357.919955][ T35] veth0_macvtap: left promiscuous mode [ 357.925890][ T35] veth1_vlan: left promiscuous mode [ 357.931299][ T35] veth0_vlan: left promiscuous mode [ 357.938152][ T35] veth1_macvtap: left promiscuous mode [ 357.943905][ T35] veth0_macvtap: left promiscuous mode [ 357.949824][ T35] veth1_vlan: left promiscuous mode [ 357.955207][ T35] veth0_vlan: left promiscuous mode [ 358.844707][ T35] team0 (unregistering): Port device team_slave_0 removed [ 359.247253][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 359.261662][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 359.288160][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 359.297788][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 359.329345][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 359.354721][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.351540][ T35] team0 (unregistering): Port device team_slave_1 removed [ 360.424661][ T35] team0 (unregistering): Port device team_slave_0 removed [ 361.205906][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.309616][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.369364][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.376611][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.403248][ T5493] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.411106][ T5493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.424195][ T5228] Bluetooth: hci2: command tx timeout [ 361.761589][ T7091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.407893][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 362.566490][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.592302][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.635715][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.653439][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.662172][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.674958][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.926707][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.934298][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.942052][ T7197] bridge_slave_0: entered allmulticast mode [ 362.949510][ T7197] bridge_slave_0: entered promiscuous mode [ 363.054340][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.074378][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.084009][ T7197] bridge_slave_1: entered allmulticast mode [ 363.094332][ T7197] bridge_slave_1: entered promiscuous mode [ 363.192955][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.250370][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.356991][ T7197] team0: Port device team_slave_0 added [ 363.398957][ T7197] team0: Port device team_slave_1 added [ 363.506753][ T5232] Bluetooth: hci2: command tx timeout [ 363.564950][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.577712][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.605467][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.634879][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.661523][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.695420][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.766818][ T7113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.783657][ T7113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.799922][ T7113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.884215][ T7113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.894311][ T7219] chnl_net:caif_netlink_parms(): no params data found [ 363.932926][ T7197] hsr_slave_0: entered promiscuous mode [ 363.940058][ T7197] hsr_slave_1: entered promiscuous mode [ 363.953122][ T7197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.961324][ T7197] Cannot create hsr debugfs directory [ 364.081461][ T7095] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.130184][ T7095] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.140711][ T7095] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.152068][ T7095] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.185146][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.195732][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.203015][ T7219] bridge_slave_0: entered allmulticast mode [ 364.210842][ T7219] bridge_slave_0: entered promiscuous mode [ 364.222154][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.230270][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.238030][ T7219] bridge_slave_1: entered allmulticast mode [ 364.246373][ T7219] bridge_slave_1: entered promiscuous mode [ 364.366626][ T7219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.390547][ T7219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.453534][ T7219] team0: Port device team_slave_0 added [ 364.478483][ T7098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.509525][ T7219] team0: Port device team_slave_1 added [ 364.546912][ T7098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.559994][ T7098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.662556][ T7098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.676037][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.683049][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.710614][ T7219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.749656][ T35] bridge_slave_1: left allmulticast mode [ 364.755840][ T35] bridge_slave_1: left promiscuous mode [ 364.761835][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.776179][ T5232] Bluetooth: hci0: command tx timeout [ 364.783242][ T35] bridge_slave_0: left allmulticast mode [ 364.789223][ T35] bridge_slave_0: left promiscuous mode [ 364.795064][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.808431][ T35] bridge_slave_1: left allmulticast mode [ 364.814152][ T35] bridge_slave_1: left promiscuous mode [ 364.821720][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.831094][ T35] bridge_slave_0: left allmulticast mode [ 364.837228][ T35] bridge_slave_0: left promiscuous mode [ 364.843037][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.854886][ T35] bridge_slave_1: left allmulticast mode [ 364.862533][ T35] bridge_slave_1: left promiscuous mode [ 364.868586][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.881156][ T35] bridge_slave_0: left allmulticast mode [ 364.887021][ T35] bridge_slave_0: left promiscuous mode [ 364.892783][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.905280][ T35] tipc: Resetting bearer [ 364.905812][ T5493] [ 364.912949][ T35] BUG: spinlock bad magic on CPU#0, kworker/u8:2/35 [ 364.913474][ T5493] ============================= [ 364.920129][ T35] Oops: general protection fault, probably for non-canonical address 0xe0001bffe00020b9: 0000 [#1] PREEMPT SMP KASAN PTI [ 364.920163][ T35] KASAN: maybe wild-memory-access in range [0x0000ffff000105c8-0x0000ffff000105cf] [ 364.920191][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 364.920229][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.920250][ T35] Workqueue: netns cleanup_net [ 364.925133][ T5493] WARNING: suspicious RCU usage [ 364.925146][ T5493] 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 Not tainted [ 364.937705][ T35] RIP: 0010:spin_bug+0x100/0x1d0 [ 364.937750][ T35] Code: 08 84 d2 0f 85 db 00 00 00 48 85 ed 44 8b 4b 08 74 7d 48 8d bd c8 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 68 44 8b 85 c8 05 00 00 48 8d 8d [ 364.937782][ T35] RSP: 0018:ffffc90000ab77e0 EFLAGS: 00010002 [ 364.937810][ T35] RAX: dffffc0000000000 RBX: ffff888078b0c020 RCX: ffffffff816d46e9 [ 364.937833][ T35] RDX: 00001fffe00020b9 RSI: ffffffff816defe6 RDI: 0000ffff000105c8 [ 364.937855][ T35] RBP: 0000ffff00010000 R08: 0000000000000005 R09: 0000000000000001 [ 364.937877][ T35] R10: 0000000080000001 R11: 205d353354202020 R12: ffffffff8b6d3760 [ 364.947359][ T5493] ----------------------------- [ 364.957804][ T35] R13: ffff88801daeda00 R14: ffffc90000ab7920 R15: 0000000000000001 [ 364.957838][ T35] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 364.957868][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.957891][ T35] CR2: 00007ffe54038ef8 CR3: 0000000069ee8000 CR4: 00000000003526f0 [ 364.957912][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 364.957932][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 364.957952][ T35] Call Trace: [ 364.957961][ T35] [ 364.957974][ T35] ? die_addr+0x3b/0xa0 [ 364.958012][ T35] ? exc_general_protection+0x155/0x230 [ 364.958069][ T35] ? asm_exc_general_protection+0x26/0x30 [ 364.968206][ T5493] net/sched/sch_generic.c:1284 suspicious rcu_dereference_protected() usage! [ 364.972902][ T35] ? __wake_up_klogd.part.0+0x99/0xf0 [ 364.977840][ T5493] [ 364.977840][ T5493] other info that might help us debug this: [ 364.977840][ T5493] [ 364.984841][ T35] ? vprintk+0x86/0xa0 [ 364.984887][ T35] ? spin_bug+0x100/0x1d0 [ 364.984925][ T35] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 364.984959][ T35] do_raw_spin_lock+0x225/0x2c0 [ 364.984997][ T35] ? trace_lock_acquire+0x14a/0x1d0 [ 364.990113][ T5493] [ 364.990113][ T5493] rcu_scheduler_active = 2, debug_locks = 1 [ 365.009552][ T35] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 365.009602][ T35] ? lock_acquire+0x2f/0xb0 [ 365.009630][ T35] ? down+0x2a/0xa0 [ 365.009675][ T35] _raw_spin_lock_irqsave+0x42/0x60 [ 365.009714][ T35] ? down+0x2a/0xa0 [ 365.015873][ T5493] 8 locks held by kworker/u8:19/5493: [ 365.023776][ T35] down+0x2a/0xa0 [ 365.031917][ T5493] #0: [ 365.039800][ T35] ? lockdep_rtnl_is_held+0x26/0x40 [ 365.039846][ T35] netpoll_poll_disable+0x79/0x110 [ 365.039886][ T35] __dev_close_many+0xd9/0x310 [ 365.048156][ T5493] ffff88807a88d148 [ 365.052749][ T35] ? __pfx___dev_close_many+0x10/0x10 [ 365.061105][ T5493] ( [ 365.069699][ T35] ? __pfx_mark_lock+0x10/0x10 [ 365.069754][ T35] dev_close_many+0x24c/0x6a0 [ 365.069795][ T35] ? __pfx_dev_close_many+0x10/0x10 [ 365.076451][ T5493] (wq_completion)bond0 [ 365.084484][ T35] unregister_netdevice_many_notify+0x489/0x1e50 [ 365.084572][ T35] ? find_held_lock+0x2d/0x110 [ 365.084615][ T35] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 365.084669][ T35] ? mutex_is_locked+0x12/0x50 [ 365.084699][ T35] ? unregister_netdevice_queue+0x22f/0x3f0 [ 365.093059][ T5493] #9 [ 365.100694][ T35] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 365.100752][ T35] ? __pfx_nexthop_net_exit_batch_rtnl+0x10/0x10 [ 365.100786][ T35] ? mutex_is_locked+0x12/0x50 [ 365.100818][ T35] ? nexthop_net_exit_batch_rtnl+0x1c6/0x290 [ 365.100854][ T35] cleanup_net+0x58c/0xb40 [ 365.100888][ T35] ? __pfx_cleanup_net+0x10/0x10 [ 365.100917][ T35] ? trace_lock_acquire+0x14a/0x1d0 [ 365.100960][ T35] ? process_one_work+0x921/0x1ba0 [ 365.100994][ T35] ? lock_acquire+0x2f/0xb0 [ 365.101023][ T35] ? process_one_work+0x921/0x1ba0 [ 365.101057][ T35] process_one_work+0x9c5/0x1ba0 [ 365.101095][ T35] ? __pfx_bond_mii_monitor+0x10/0x10 [ 365.101139][ T35] ? __pfx_process_one_work+0x10/0x10 [ 365.101177][ T35] ? assign_work+0x1a0/0x250 [ 365.104474][ T5493] ){+.+.}-{0:0} [ 365.107428][ T35] worker_thread+0x6c8/0xf00 [ 365.107477][ T35] ? __kthread_parkme+0x148/0x220 [ 365.107526][ T35] ? __pfx_worker_thread+0x10/0x10 [ 365.107557][ T35] kthread+0x2c1/0x3a0 [ 365.107598][ T35] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.111746][ T5493] , at: process_one_work+0x129b/0x1ba0 [ 365.117297][ T35] ? __pfx_kthread+0x10/0x10 [ 365.117345][ T35] ret_from_fork+0x45/0x80 [ 365.117377][ T35] ? __pfx_kthread+0x10/0x10 [ 365.117416][ T35] ret_from_fork_asm+0x1a/0x30 [ 365.123124][ T5493] #1: ffffc90004a2fd80 [ 365.131893][ T35] [ 365.131915][ T35] Modules linked in: [ 365.131953][ T35] ---[ end trace 0000000000000000 ]--- [ 365.131968][ T35] RIP: 0010:spin_bug+0x100/0x1d0 [ 365.137543][ T5493] ( [ 365.147743][ T35] Code: 08 84 d2 0f 85 db 00 00 00 48 85 ed 44 8b 4b 08 74 7d 48 8d bd c8 05 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 68 44 8b 85 c8 05 00 00 48 8d 8d [ 365.147787][ T35] RSP: 0018:ffffc90000ab77e0 EFLAGS: 00010002 [ 365.147816][ T35] RAX: dffffc0000000000 RBX: ffff888078b0c020 RCX: ffffffff816d46e9 [ 365.147836][ T35] RDX: 00001fffe00020b9 RSI: ffffffff816defe6 RDI: 0000ffff000105c8 [ 365.152108][ T5493] (work_completion)(&(&bond->mii_work)->work) [ 365.156243][ T35] RBP: 0000ffff00010000 R08: 0000000000000005 R09: 0000000000000001 [ 365.156274][ T35] R10: 0000000080000001 R11: 205d353354202020 R12: ffffffff8b6d3760 [ 365.156293][ T35] R13: ffff88801daeda00 R14: ffffc90000ab7920 R15: 0000000000000001 [ 365.156314][ T35] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 365.156346][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.156367][ T35] CR2: 00007ffe54038ef8 CR3: 0000000069ee8000 CR4: 00000000003526f0 [ 365.156389][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 365.156407][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 365.156430][ T35] Kernel panic - not syncing: Fatal exception [ 365.156794][ T35] Kernel Offset: disabled