last executing test programs: 21m2.647341256s ago: executing program 4 (id=2016): socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0xa, &(0x7f0000000300), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = accept4(r1, 0x0, 0x0, 0x80800) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) userfaultfd(0x1) mount$pvfs2(0x0, 0x0, 0x0, 0x3000800, &(0x7f0000000440)=ANY=[]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) 21m1.985435932s ago: executing program 4 (id=2020): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000003d00)=ANY=[], 0x1208}, 0x4010) 21m1.853693573s ago: executing program 4 (id=2022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB, @ANYRES8=r0], 0x40}}, 0x0) 20m59.298308888s ago: executing program 4 (id=2026): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0xe}, {&(0x7f0000000600)="9b1266926bac6fe17589a03ea03dd982ae36633c", 0x14}, {0x0}], 0x3) 20m58.342296804s ago: executing program 4 (id=2031): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 21.329554753s ago: executing program 1 (id=5679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x2c, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 19.243488264s ago: executing program 1 (id=5683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) dup3(r5, r4, 0x0) 18.714216474s ago: executing program 1 (id=5684): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) mmap(&(0x7f000059d000/0x2000)=nil, 0x2000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)={0x20000001}) 15.870558492s ago: executing program 1 (id=5691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}], [], 0x6b}}) chdir(&(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 15.370541839s ago: executing program 1 (id=5692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x2c, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 13.804535781s ago: executing program 1 (id=5695): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) r3 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8001, 0x3, 0x0, 0xffffffff, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) 10.195215535s ago: executing program 3 (id=5701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 9.46059687s ago: executing program 3 (id=5704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket(0x2c, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.885805282s ago: executing program 3 (id=5707): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1653]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, {@in6=@loopback, 0xfffffff9, 0x32}, @in=@local, {}, {0x0, 0x81, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 6.802138005s ago: executing program 3 (id=5710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.570267431s ago: executing program 0 (id=5711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x1008, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) 5.82984227s ago: executing program 3 (id=5712): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="000019"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001fc0)={0x2c, &(0x7f0000000dc0)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.771527941s ago: executing program 2 (id=5713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 5.192076155s ago: executing program 2 (id=5714): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 4.743457007s ago: executing program 0 (id=5715): mknod$loop(0x0, 0x100000000000600d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f0000000580)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) 3.579611253s ago: executing program 2 (id=5717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000a40)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x109301) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000000c40), 0x0, 0x2, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}}, 0x0) 3.578262639s ago: executing program 0 (id=5718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x2e, 0x0, 0x61, 0xbe]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000007a87830bbe0146e7ad174b34", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0xc00, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma,porx000000']) 3.268030089s ago: executing program 2 (id=5719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0, 0x0, 0x40000}, 0x18) setpriority(0x1, 0x0, 0x1) 2.690419198s ago: executing program 0 (id=5720): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1653]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, {@in6=@loopback, 0xfffffff9, 0x32}, @in=@local, {}, {0x0, 0x81, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) 2.690088748s ago: executing program 2 (id=5721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.528973891s ago: executing program 0 (id=5722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a"], 0x40}}, 0x0) 1.528248338s ago: executing program 3 (id=5723): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000240)="46b837a5a1e465323f1291912cdcdeb7152239dc05373e47874f423c13d548db445ee1191286903dba7701e1f466c93797c69140d084", &(0x7f0000000a40)=""/4096}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 94.177844ms ago: executing program 0 (id=5724): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) ioctl$TCGETS(r1, 0x541a, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000600)='9p_client_req\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x37}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r5) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000000080)) fcntl$getown(r5, 0x9) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)) 50.351972ms ago: executing program 2 (id=5725): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x50, 0x0, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x18040}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) ppoll(&(0x7f0000000d40)=[{r0}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 0s ago: executing program 4 (id=2108): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3], 0x1c}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000003d00)=ANY=[], 0x1208}, 0x4010) kernel console output (not intermixed with test programs): s mode [ 1688.876885][ T2997] veth1_vlan: left promiscuous mode [ 1688.882264][ T2997] veth0_vlan: left promiscuous mode [ 1689.416710][T23097] Bluetooth: hci2: command tx timeout [ 1691.516636][T23097] Bluetooth: hci2: command tx timeout [ 1691.921418][ T939] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1692.192445][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 1692.316256][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 1692.629519][ T939] usb 2-1: config 252 has an invalid interface number: 254 but max is 0 [ 1692.644291][ T939] usb 2-1: config 252 has no interface number 0 [ 1692.650881][ T939] usb 2-1: config 252 interface 254 has no altsetting 0 [ 1692.668110][ T939] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1692.686788][ T939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.732621][ T939] usb 2-1: Product: syz [ 1692.738347][ T939] usb 2-1: Manufacturer: syz [ 1692.743123][ T939] usb 2-1: SerialNumber: syz [ 1692.776317][ T939] bfusb 2-1:252.254: probe with driver bfusb failed with error -5 [ 1694.181734][T25313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.191022][T25313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.201928][T25313] bridge_slave_0: entered allmulticast mode [ 1694.224457][T25313] bridge_slave_0: entered promiscuous mode [ 1694.300803][T25426] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5155'. [ 1694.350008][T25313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.362291][T25313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.362934][T21242] usb 2-1: USB disconnect, device number 45 [ 1694.428043][T25313] bridge_slave_1: entered allmulticast mode [ 1694.467850][T25313] bridge_slave_1: entered promiscuous mode [ 1695.493793][T25313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.569736][T25313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1695.954056][T25313] team0: Port device team_slave_0 added [ 1696.010708][T25313] team0: Port device team_slave_1 added [ 1697.708571][T25313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.740100][T25313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.753380][T25313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.117027][T25313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.338789][T25313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.624174][T25313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.246961][T25313] hsr_slave_0: entered promiscuous mode [ 1700.264686][T25313] hsr_slave_1: entered promiscuous mode [ 1700.592766][ T29] audit: type=1400 audit(1729598351.966:1251): avc: denied { read } for pid=25495 comm="syz.1.5171" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1701.256738][ T29] audit: type=1400 audit(1729598351.966:1252): avc: denied { open } for pid=25495 comm="syz.1.5171" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1701.316652][ T29] audit: type=1400 audit(1729598351.966:1253): avc: denied { ioctl } for pid=25495 comm="syz.1.5171" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1701.867085][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1702.091199][ T25] usb 2-1: config 252 has an invalid interface number: 254 but max is 0 [ 1702.163455][ T25] usb 2-1: config 252 has no interface number 0 [ 1702.276148][ T25] usb 2-1: config 252 interface 254 has no altsetting 0 [ 1702.518977][ T25] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1702.528962][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.538073][ T25] usb 2-1: Product: syz [ 1702.542648][ T25] usb 2-1: Manufacturer: syz [ 1702.549150][ T25] usb 2-1: SerialNumber: syz [ 1702.572365][ T25] bfusb 2-1:252.254: probe with driver bfusb failed with error -5 [ 1702.782470][T25512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1702.844822][ T5277] usb 2-1: USB disconnect, device number 46 [ 1703.774620][T25313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1703.861079][T25313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1703.910275][T25313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1704.056721][T25313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1704.160791][T25313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.195056][T25313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.211778][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.218996][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.305427][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.312647][ T6574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.393890][T25313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1704.404529][T25313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1705.597689][T25313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.210142][T25313] veth0_vlan: entered promiscuous mode [ 1706.285453][T25597] syzkaller0: entered promiscuous mode [ 1706.299582][T25597] syzkaller0: entered allmulticast mode [ 1706.317873][T25313] veth1_vlan: entered promiscuous mode [ 1706.707363][ T939] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1706.925412][ T939] usb 4-1: config 252 has an invalid interface number: 254 but max is 0 [ 1706.940292][ T939] usb 4-1: config 252 has no interface number 0 [ 1706.950514][ T939] usb 4-1: config 252 interface 254 has no altsetting 0 [ 1707.172217][ T939] usb 4-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 1707.181643][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.190648][ T939] usb 4-1: Product: syz [ 1707.194979][ T939] usb 4-1: Manufacturer: syz [ 1707.200155][ T939] usb 4-1: SerialNumber: syz [ 1707.212433][ T939] bfusb 4-1:252.254: probe with driver bfusb failed with error -5 [ 1709.326711][ T939] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1709.507684][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1709.519424][ T939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.537552][ T939] usb 2-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 1709.551084][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.567344][ T939] usb 2-1: config 0 descriptor?? [ 1710.021624][ T939] usbhid 2-1:0.0: can't add hid device: -71 [ 1710.028013][ T939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1710.051924][ T939] usb 2-1: USB disconnect, device number 47 [ 1717.372519][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1717.387403][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1717.402161][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1717.556671][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1717.564445][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1717.572161][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1717.602679][T25313] veth0_macvtap: entered promiscuous mode [ 1717.609474][T25604] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5187'. [ 1718.356853][T25684] lo speed is unknown, defaulting to 1000 [ 1718.394214][T25313] veth1_macvtap: entered promiscuous mode [ 1718.422370][T25313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.445842][T25313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.455824][T25313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.466847][T25313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.478285][T25313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.485497][T11164] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1718.502137][T11164] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1718.512735][T11164] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1718.514689][T25313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.521287][T11164] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1718.536656][ T29] audit: type=1400 audit(1729598369.886:1254): avc: denied { write } for pid=25683 comm="syz.1.5208" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1718.540679][T11164] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1718.569074][T11164] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1718.727450][T25313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.740323][T25313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.809080][T25313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.886708][T25313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.003202][T25692] lo speed is unknown, defaulting to 1000 [ 1720.004162][T25313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.018183][T25313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.028622][T25313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.049473][T25313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.099880][ T5277] usb 4-1: USB disconnect, device number 56 [ 1720.158771][T25703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'. [ 1720.538671][T11164] Bluetooth: hci5: command tx timeout [ 1720.698762][T11164] Bluetooth: hci6: command tx timeout [ 1721.072866][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.122984][T25712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1721.130322][T25712] IPv6: NLM_F_CREATE should be set when creating new route [ 1721.191229][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.280327][T25684] chnl_net:caif_netlink_parms(): no params data found [ 1721.349519][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.479902][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.530596][T25692] chnl_net:caif_netlink_parms(): no params data found [ 1721.554104][ T2517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.563850][ T2517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.665608][T25684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.674247][T25684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.691261][T25684] bridge_slave_0: entered allmulticast mode [ 1721.702748][T25684] bridge_slave_0: entered promiscuous mode [ 1721.715143][T25684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.726231][T25684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.744256][T25684] bridge_slave_1: entered allmulticast mode [ 1721.752523][T25684] bridge_slave_1: entered promiscuous mode [ 1722.641395][T11164] Bluetooth: hci5: command tx timeout [ 1722.749792][T25684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.801617][T11164] Bluetooth: hci6: command tx timeout [ 1722.924606][T24307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1722.960798][T24307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.979765][T25684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.990386][ T35] hsr0: left allmulticast mode [ 1722.995209][ T35] hsr_slave_0: left allmulticast mode [ 1723.001400][ T35] hsr_slave_1: left allmulticast mode [ 1723.007328][ T35] hsr0: left promiscuous mode [ 1723.012283][ T35] bridge0: port 3(hsr0) entered disabled state [ 1723.023258][ T35] erspan0: left allmulticast mode [ 1723.029620][ T35] erspan0: left promiscuous mode [ 1723.035607][ T35] bridge0: port 2(erspan0) entered disabled state [ 1723.045000][ T35] bridge_slave_0: left allmulticast mode [ 1723.050914][ T35] bridge_slave_0: left promiscuous mode [ 1723.056843][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.705595][ T29] audit: type=1400 audit(1729598375.086:1255): avc: denied { mount } for pid=25737 comm="syz.1.5218" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1723.732098][ T29] audit: type=1400 audit(1729598375.116:1256): avc: denied { mounton } for pid=25737 comm="syz.1.5218" path="/29/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1723.887303][ T29] audit: type=1400 audit(1729598375.276:1257): avc: denied { unmount } for pid=25063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1724.806670][T11164] Bluetooth: hci5: command tx timeout [ 1724.837873][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.861368][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.870370][T25696] Bluetooth: hci6: command tx timeout [ 1724.887850][ T35] bond0 (unregistering): Released all slaves [ 1724.943567][T25692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.974264][T25692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.982179][T25692] bridge_slave_0: entered allmulticast mode [ 1724.996828][T25692] bridge_slave_0: entered promiscuous mode [ 1725.113063][T25684] team0: Port device team_slave_0 added [ 1725.172330][T25684] team0: Port device team_slave_1 added [ 1725.238488][ T35] Κό: left promiscuous mode [ 1725.255006][T25692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.305622][T25692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.327878][T25692] bridge_slave_1: entered allmulticast mode [ 1725.338819][T25692] bridge_slave_1: entered promiscuous mode [ 1725.353536][ T29] audit: type=1400 audit(1729598376.716:1258): avc: denied { unlink } for pid=25744 comm="syz.1.5220" name="#29" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1725.399972][ T29] audit: type=1400 audit(1729598376.736:1259): avc: denied { mount } for pid=25744 comm="syz.1.5220" name="/" dev="overlay" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1725.404727][T25684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.470146][T25684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.524396][T25684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1725.544166][ T35] tipc: Left network mode [ 1725.588061][T25692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.611619][T25684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.625577][T25684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.660783][T25684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.734891][T25692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.947021][T25692] team0: Port device team_slave_0 added [ 1726.071706][T25692] team0: Port device team_slave_1 added [ 1726.219932][T25684] hsr_slave_0: entered promiscuous mode [ 1726.235716][T25684] hsr_slave_1: entered promiscuous mode [ 1726.252680][T25684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1726.262991][T25684] Cannot create hsr debugfs directory [ 1726.467588][ T35] hsr_slave_0: left promiscuous mode [ 1726.504191][ T35] hsr_slave_1: left promiscuous mode [ 1726.510674][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.520566][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.537029][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.578200][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.847052][ T35] veth1_macvtap: left promiscuous mode [ 1726.857449][T25696] Bluetooth: hci5: command tx timeout [ 1726.903305][ T35] veth0_macvtap: left promiscuous mode [ 1726.937437][T25696] Bluetooth: hci6: command tx timeout [ 1726.977317][ T35] veth1_vlan: left promiscuous mode [ 1727.058798][ T35] veth0_vlan: left promiscuous mode [ 1729.616904][T14576] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1729.806988][T14576] usb 2-1: Using ep0 maxpacket: 16 [ 1729.848157][T14576] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1730.001266][T14576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1730.049471][T14576] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1730.066065][T14576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.092355][T14576] usb 2-1: Product: syz [ 1730.143414][T14576] usb 2-1: Manufacturer: syz [ 1730.148350][T14576] usb 2-1: SerialNumber: syz [ 1730.155276][T14576] usb 2-1: config 0 descriptor?? [ 1730.181433][T14576] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1730.192098][T14576] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1730.541173][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.020860][T14576] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1731.056113][T14576] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1732.021931][T25692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1732.029416][T25692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.061831][T25692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1732.088993][T25692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.096066][T25692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1732.125247][T25692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.261425][T14576] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1732.363849][T25692] hsr_slave_0: entered promiscuous mode [ 1732.388987][T25692] hsr_slave_1: entered promiscuous mode [ 1732.411802][T25692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1732.440544][T25692] Cannot create hsr debugfs directory [ 1732.588127][T14576] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1732.596210][T14576] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1732.603678][T14576] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1732.610704][T14576] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1732.617725][T14576] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1732.624530][T14576] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1732.736615][T14576] usb 2-1: USB disconnect, device number 48 [ 1733.440899][T25684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1734.861238][T25684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.849106][T25684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.379589][T25684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.587616][T24307] erspan0: left allmulticast mode [ 1736.592732][T24307] erspan0: left promiscuous mode [ 1736.646962][T24307] bridge0: port 2(erspan0) entered disabled state [ 1736.684351][T24307] bridge_slave_0: left allmulticast mode [ 1736.700469][T24307] bridge_slave_0: left promiscuous mode [ 1736.706288][T24307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.757971][ T5276] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1736.886694][ T5276] usb 2-1: device descriptor read/64, error -71 [ 1737.845310][ T5276] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1738.669208][ T5276] usb 2-1: device descriptor read/64, error -71 [ 1738.787840][ T5276] usb usb2-port1: attempt power cycle [ 1738.955554][T24307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1738.968017][T24307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1738.985390][T24307] bond0 (unregistering): Released all slaves [ 1739.472122][T24307] Κό: left promiscuous mode [ 1739.937741][T25684] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1739.965946][T25684] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1740.019214][T24307] tipc: Left network mode [ 1740.025088][T25684] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1740.081484][T25684] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1740.244712][ T29] audit: type=1400 audit(1729598391.626:1260): avc: denied { ioctl } for pid=25868 comm="syz.1.5241" path="socket:[119073]" dev="sockfs" ino=119073 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1740.776885][ T29] audit: type=1400 audit(1729598391.836:1261): avc: denied { mount } for pid=25868 comm="syz.1.5241" name="/" dev="ramfs" ino=119074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1741.075128][T25684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1741.430969][T25684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.491093][T24307] hsr_slave_0: left promiscuous mode [ 1741.511882][T24307] hsr_slave_1: left promiscuous mode [ 1741.524878][T24307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.534934][T24307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.188727][T24307] team0 (unregistering): Port device team_slave_1 removed [ 1742.268280][T24307] team0 (unregistering): Port device team_slave_0 removed [ 1743.995617][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1744.014696][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1744.032872][T11164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1744.044064][T11164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1744.059395][T11164] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1744.072154][T11164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1745.467969][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.475140][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1745.579056][ T2517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.586279][ T2517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1745.814009][T25692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1745.932127][T25692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1745.965890][T25692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1746.023744][T25692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1746.171865][T25692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.186762][T25696] Bluetooth: hci0: command tx timeout [ 1746.272816][T25692] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.927268][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.934421][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.051509][T24307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.179123][T19206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.186338][T19206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.344762][T24307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.438342][T25684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1747.495571][T24307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.626129][T24307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1747.717511][T25900] chnl_net:caif_netlink_parms(): no params data found [ 1747.733371][T25692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1747.911028][T25684] veth0_vlan: entered promiscuous mode [ 1748.059603][T25900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.095874][T25900] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.114184][T25900] bridge_slave_0: entered allmulticast mode [ 1748.125397][T25900] bridge_slave_0: entered promiscuous mode [ 1748.148419][T25684] veth1_vlan: entered promiscuous mode [ 1748.219048][T25696] Bluetooth: hci0: command tx timeout [ 1748.219393][T25900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.254024][T25900] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.272735][T25900] bridge_slave_1: entered allmulticast mode [ 1748.302156][T25900] bridge_slave_1: entered promiscuous mode [ 1748.368598][T24307] bridge_slave_1: left allmulticast mode [ 1748.384568][T24307] bridge_slave_1: left promiscuous mode [ 1748.393700][T24307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.630446][T24307] bridge_slave_0: left allmulticast mode [ 1748.636175][T24307] bridge_slave_0: left promiscuous mode [ 1748.656886][T24307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.381245][T25696] Bluetooth: hci0: command tx timeout [ 1751.339885][T24307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1751.362249][T24307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1751.403545][T24307] bond0 (unregistering): Released all slaves [ 1751.470674][T25900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.484307][T25900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.923439][T25900] team0: Port device team_slave_0 added [ 1752.347503][T25692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.401627][T25900] team0: Port device team_slave_1 added [ 1752.432556][T25684] veth0_macvtap: entered promiscuous mode [ 1752.448940][T25684] veth1_macvtap: entered promiscuous mode [ 1752.456691][T25696] Bluetooth: hci0: command tx timeout [ 1752.485216][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.518280][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.551610][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.600723][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.638067][T25684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.663744][T25692] veth0_vlan: entered promiscuous mode [ 1752.739798][T25997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1752.748925][T25997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1752.916768][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1753.274294][ T25] usb 2-1: device descriptor read/64, error -71 [ 1753.292286][T25790] udevd[25790]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1753.460875][T25900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1753.468193][T25900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.494444][T25900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1753.619039][T25900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1753.626561][T25900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1753.681921][T25900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.715508][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.726616][ T25] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1753.760469][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.773193][T25684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1753.786576][T25684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1753.878535][ T25] usb 2-1: device descriptor read/64, error -71 [ 1753.987793][ T25] usb usb2-port1: attempt power cycle [ 1754.173621][T25684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.453718][T25692] veth1_vlan: entered promiscuous mode [ 1754.551853][ T25] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1754.579954][ T25] usb 2-1: device descriptor read/8, error -71 [ 1754.587346][T24307] hsr_slave_0: left promiscuous mode [ 1754.604728][T24307] hsr_slave_1: left promiscuous mode [ 1754.612606][T24307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1754.633574][T24307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1754.647400][T24307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1754.665361][T24307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1754.722067][T24307] veth1_macvtap: left promiscuous mode [ 1754.732056][T24307] veth0_macvtap: left promiscuous mode [ 1754.746642][T24307] veth1_vlan: left promiscuous mode [ 1754.762663][T24307] veth0_vlan: left promiscuous mode [ 1754.816734][ T25] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1754.852190][ T25] usb 2-1: device descriptor read/8, error -71 [ 1754.969588][ T25] usb usb2-port1: unable to enumerate USB device [ 1755.948856][T24307] team0 (unregistering): Port device team_slave_1 removed [ 1756.490094][T24307] team0 (unregistering): Port device team_slave_0 removed [ 1758.128003][T25684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.152878][T25684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.161916][T25684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.170968][T25684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.355880][T25900] hsr_slave_0: entered promiscuous mode [ 1758.402309][T25900] hsr_slave_1: entered promiscuous mode [ 1758.521762][T25692] veth0_macvtap: entered promiscuous mode [ 1758.661242][T25692] veth1_macvtap: entered promiscuous mode [ 1758.922085][T25692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.948382][T25692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.964271][T25692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.975292][T25692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.994774][T25692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.085743][T25692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.117479][T25692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.147011][T25692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.176732][T25692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.208781][T25692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.983038][T25692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.036054][T25692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.049175][T25692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.074780][T25692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.114886][ T2517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.138776][ T2517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.180167][ T6574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.188350][ T6574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.786015][T25961] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1762.976897][T25961] usb 3-1: Using ep0 maxpacket: 32 [ 1762.985372][T25961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.995925][T25961] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1763.009348][T25961] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1763.018513][T25961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.040003][T25961] usb 3-1: config 0 descriptor?? [ 1763.047591][T25961] hub 3-1:0.0: bad descriptor, ignoring hub [ 1763.053578][T25961] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1763.073939][T25961] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1763.396618][ T5302] usb 3-1: USB disconnect, device number 52 [ 1764.166781][T25961] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1764.326749][T25961] usb 3-1: device descriptor read/64, error -71 [ 1764.606618][T25961] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1764.771193][T25961] usb 3-1: device descriptor read/64, error -71 [ 1764.897775][T25961] usb usb3-port1: attempt power cycle [ 1765.236873][T25961] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1765.272547][T25961] usb 3-1: device descriptor read/8, error -71 [ 1765.546663][T25961] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1765.577587][T25961] usb 3-1: device descriptor read/8, error -71 [ 1765.687026][T25961] usb usb3-port1: unable to enumerate USB device [ 1766.319913][T19206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.328860][ T6574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.336857][T19206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.344295][ T6574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.906768][ T5302] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1766.989511][T25900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1767.029741][T25900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1767.064259][T25900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1767.083607][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.108341][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.133614][T25900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1767.179301][ T5302] usb 4-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 1767.261178][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.319778][ T5302] usb 4-1: config 0 descriptor?? [ 1768.139816][ T5302] usbhid 4-1:0.0: can't add hid device: -71 [ 1768.147849][ T5302] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1768.157984][ T5302] usb 4-1: USB disconnect, device number 57 [ 1768.261512][T25900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1768.490293][T25900] 8021q: adding VLAN 0 to HW filter on device team0 [ 1768.559243][T19206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.566502][T19206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.961027][T24307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.968250][T24307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.327350][T25900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1769.337870][T25900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1771.572710][T25900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.247684][T25900] veth0_vlan: entered promiscuous mode [ 1772.274682][T25900] veth1_vlan: entered promiscuous mode [ 1773.107445][T25900] veth0_macvtap: entered promiscuous mode [ 1773.127228][T25900] veth1_macvtap: entered promiscuous mode [ 1773.155314][T25900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.166851][T25900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.185106][T25900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.196315][T25900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.211867][T25900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1773.222977][T25900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.240790][T25900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.264106][T25900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.280228][T25900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.295166][T25900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.309032][T25900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.319398][T25900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.335373][T25900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.353932][T25900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1774.078035][T25900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.087084][T25900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.095793][T25900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.153074][T25900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1774.413183][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.446597][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.498997][ T2517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.509463][ T2517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.230733][T26261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5295'. [ 1781.648733][T26286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1781.662964][T26286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5303'. [ 1784.148056][ T29] audit: type=1400 audit(1729598435.146:1262): avc: denied { bind } for pid=26299 comm="syz.3.5307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1784.284234][ T29] audit: type=1400 audit(1729598435.186:1263): avc: denied { write } for pid=26299 comm="syz.3.5307" name="ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1784.381445][ T29] audit: type=1400 audit(1729598435.186:1264): avc: denied { open } for pid=26299 comm="syz.3.5307" path="/dev/ppp" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1784.405585][ T29] audit: type=1400 audit(1729598435.206:1265): avc: denied { ioctl } for pid=26299 comm="syz.3.5307" path="/dev/ppp" dev="devtmpfs" ino=697 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1785.741739][T26320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1785.762709][T26320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5313'. [ 1787.190974][ T5277] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1787.358329][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.374929][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.393469][ T5277] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1787.404142][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.419986][ T5277] usb 3-1: config 0 descriptor?? [ 1788.596414][ T5277] usbhid 3-1:0.0: can't add hid device: -71 [ 1788.602637][ T5277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1788.676667][ T5277] usb 3-1: USB disconnect, device number 57 [ 1788.966302][T11164] Bluetooth: hci3: command 0x0406 tx timeout [ 1789.126516][ T29] audit: type=1326 audit(1729598440.506:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26357 comm="syz.0.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1789.240265][ T29] audit: type=1326 audit(1729598440.506:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26357 comm="syz.0.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1789.312429][T26361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1789.316628][ T29] audit: type=1326 audit(1729598440.506:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26357 comm="syz.0.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1789.336509][T26361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1789.387314][ T29] audit: type=1326 audit(1729598440.506:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26357 comm="syz.0.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1790.100361][ T29] audit: type=1326 audit(1729598441.486:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1790.183197][ T29] audit: type=1326 audit(1729598441.516:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1790.214171][ T29] audit: type=1326 audit(1729598441.516:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1790.446769][ T29] audit: type=1326 audit(1729598441.516:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1790.471441][ T29] audit: type=1326 audit(1729598441.516:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1790.502777][ T29] audit: type=1326 audit(1729598441.516:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1790.532163][ T29] audit: type=1326 audit(1729598441.526:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26365 comm="syz.3.5327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1791.774983][T26385] Bluetooth: MGMT ver 1.23 [ 1791.993135][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.994553][T26398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5338'. [ 1795.756639][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1795.756662][ T29] audit: type=1400 audit(1729598446.426:1284): avc: denied { name_bind } for pid=26406 comm="syz.3.5342" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1796.405190][T26429] binder: 26423:26429 ioctl 4018620d 0 returned -22 [ 1796.484056][T26427] netlink: 'syz.0.5345': attribute type 4 has an invalid length. [ 1796.541835][ T29] audit: type=1326 audit(1729598447.926:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1796.689600][ T29] audit: type=1326 audit(1729598447.926:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1796.880449][ T29] audit: type=1326 audit(1729598447.926:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1796.934822][ T29] audit: type=1326 audit(1729598447.926:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1796.969156][ T29] audit: type=1326 audit(1729598447.926:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1797.026113][ T29] audit: type=1326 audit(1729598447.926:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1797.142443][ T29] audit: type=1326 audit(1729598447.946:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26435 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe00d7b00e5 code=0x7ffc0000 [ 1797.224445][ T29] audit: type=1326 audit(1729598447.946:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1797.305656][ T29] audit: type=1326 audit(1729598448.026:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26432 comm="syz.2.5349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1798.646789][T25932] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1799.135207][T25932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.146808][T25932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.167159][T25932] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1799.211061][T25932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.267364][T25932] usb 4-1: config 0 descriptor?? [ 1799.872847][T25932] pyra 0003:1E7D:2CF6.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1800.095370][T25932] pyra 0003:1E7D:2CF6.0022: couldn't init struct pyra_device [ 1800.119746][T25932] pyra 0003:1E7D:2CF6.0022: couldn't install mouse [ 1800.135920][T25932] pyra 0003:1E7D:2CF6.0022: probe with driver pyra failed with error -71 [ 1800.161148][T25932] usb 4-1: USB disconnect, device number 58 [ 1804.794458][ T2517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.950949][ T2517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.377701][T25696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1805.389794][T25696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1805.399136][T25696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1805.410597][T25696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1805.422285][T25696] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1805.430029][T25696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1805.495672][ T2517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.689045][ T2517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.859642][T26512] binder: 26509:26512 ioctl 4018620d 0 returned -22 [ 1806.194061][ T2517] bridge_slave_1: left allmulticast mode [ 1806.202628][T26525] overlayfs: missing 'lowerdir' [ 1806.291816][ T2517] bridge_slave_1: left promiscuous mode [ 1806.333195][ T2517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.460445][ T2517] bridge_slave_0: left allmulticast mode [ 1806.467510][ T2517] bridge_slave_0: left promiscuous mode [ 1806.473334][ T2517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.496651][T11164] Bluetooth: hci0: command tx timeout [ 1808.091966][ T2517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1808.105252][ T2517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1808.116608][ T2517] bond0 (unregistering): Released all slaves [ 1808.585018][ T5277] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1808.754168][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.781626][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.484206][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1809.493795][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.540742][ T5277] usb 2-1: config 0 descriptor?? [ 1809.757983][T26514] chnl_net:caif_netlink_parms(): no params data found [ 1809.881849][ T2517] hsr_slave_0: left promiscuous mode [ 1809.900176][ T2517] hsr_slave_1: left promiscuous mode [ 1809.909351][ T2517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.936724][ T2517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.955187][ T2517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.976552][ T2517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1810.155074][ T2517] veth1_macvtap: left promiscuous mode [ 1810.184845][ T2517] veth0_macvtap: left promiscuous mode [ 1810.228194][ T2517] veth1_vlan: left promiscuous mode [ 1810.257101][ T2517] veth0_vlan: left promiscuous mode [ 1811.015656][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.022845][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.029934][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.037056][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.044545][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.051776][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.064085][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.092550][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.125431][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.139273][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.153131][ T5277] lg-g15 0003:046D:C222.0023: unknown main item tag 0x0 [ 1811.169386][ T5277] lg-g15 0003:046D:C222.0023: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 1812.568046][T25961] usb 2-1: USB disconnect, device number 56 [ 1813.373116][T19206] Bluetooth: hci1: Frame reassembly failed (-84) [ 1814.597677][ T2517] team0 (unregistering): Port device team_slave_1 removed [ 1814.716176][ T2517] team0 (unregistering): Port device team_slave_0 removed [ 1815.259252][T11164] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1816.788204][T26514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.859225][T26514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1816.924525][T26514] bridge_slave_0: entered allmulticast mode [ 1817.173667][T26514] bridge_slave_0: entered promiscuous mode [ 1817.411625][T26514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.480446][T26514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.509513][T26514] bridge_slave_1: entered allmulticast mode [ 1817.567522][T26514] bridge_slave_1: entered promiscuous mode [ 1817.785135][T26514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.822827][T26514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.003832][T26514] team0: Port device team_slave_0 added [ 1818.070007][T26514] team0: Port device team_slave_1 added [ 1818.335558][ T5931] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1818.363671][T26514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.370896][T26514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.399053][T26514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.401193][T26514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.401214][T26514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1818.401243][T26514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1818.467747][ C0] vkms_vblank_simulate: vblank timer overrun [ 1818.509504][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.509551][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.509595][ T5931] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1818.509629][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.600237][ T5931] usb 3-1: config 0 descriptor?? [ 1819.338888][T26514] hsr_slave_0: entered promiscuous mode [ 1819.358606][T26514] hsr_slave_1: entered promiscuous mode [ 1820.669449][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1820.676570][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1820.683568][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.170180][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.177335][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.184347][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.192970][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.200449][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.207895][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.215630][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.222999][ T5931] lg-g15 0003:046D:C222.0024: unknown main item tag 0x0 [ 1821.242740][ T5931] lg-g15 0003:046D:C222.0024: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1821.399528][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1821.399547][ T29] audit: type=1400 audit(1729598472.786:1314): avc: denied { create } for pid=26674 comm="syz.0.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1821.478295][ T29] audit: type=1400 audit(1729598472.866:1315): avc: denied { write } for pid=26674 comm="syz.0.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1821.498597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.531500][T26680] lo speed is unknown, defaulting to 1000 [ 1821.549583][T26680] lo speed is unknown, defaulting to 1000 [ 1821.564156][T26680] lo speed is unknown, defaulting to 1000 [ 1821.697526][ T5931] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1821.748592][T26680] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1821.876985][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 1821.896076][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.919367][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1821.934889][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.944374][T26680] lo speed is unknown, defaulting to 1000 [ 1821.953127][T26680] lo speed is unknown, defaulting to 1000 [ 1821.981394][ T5931] usb 4-1: config 0 descriptor?? [ 1822.014930][ T5931] hub 4-1:0.0: bad descriptor, ignoring hub [ 1822.023997][ T5931] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1822.038721][ T5931] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1822.078963][T26680] lo speed is unknown, defaulting to 1000 [ 1822.089252][T26680] lo speed is unknown, defaulting to 1000 [ 1822.145990][T26680] lo speed is unknown, defaulting to 1000 [ 1822.228918][T26680] lo speed is unknown, defaulting to 1000 [ 1822.297599][T25961] usb 3-1: USB disconnect, device number 58 [ 1822.329553][ T5931] usb 4-1: USB disconnect, device number 59 [ 1823.528916][T26514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1823.607474][T26514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1823.653740][T26514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1823.704848][T26514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1823.986392][T26514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.000493][T26514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.021286][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.028506][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.174560][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.181816][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.659572][T26514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.165045][T26514] veth0_vlan: entered promiscuous mode [ 1825.195556][T26514] veth1_vlan: entered promiscuous mode [ 1825.273369][T26514] veth0_macvtap: entered promiscuous mode [ 1825.302402][T26514] veth1_macvtap: entered promiscuous mode [ 1825.447865][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.508707][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.614724][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.703105][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.790572][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1825.850969][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1825.930143][T26514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.004372][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.027162][ T5931] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1826.187130][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.229630][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.252486][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.280808][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.301436][ T5931] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1826.336699][T26514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1826.416665][ T5931] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1826.420281][T26514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.425751][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.425784][ T5931] usb 2-1: Product: syz [ 1826.448737][ T5931] usb 2-1: Manufacturer: syz [ 1826.453378][ T5931] usb 2-1: SerialNumber: syz [ 1826.470622][ T5931] usb 2-1: config 0 descriptor?? [ 1826.497938][T26514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.608913][T26514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.617819][T26514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.626758][T26514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.646549][T26514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.837938][ T2517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.871413][ T2517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.945117][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.985502][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.490515][ T29] audit: type=1400 audit(1729598478.676:1316): avc: denied { mount } for pid=26743 comm="syz.1.5407" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1827.512841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1827.878859][ T29] audit: type=1400 audit(1729598478.696:1317): avc: denied { remount } for pid=26743 comm="syz.1.5407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1828.895206][ T25] usb 2-1: USB disconnect, device number 57 [ 1828.987217][ T29] audit: type=1400 audit(1729598480.366:1318): avc: denied { unmount } for pid=25063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1830.015429][T26808] ptrace attach of "./syz-executor exec"[25692] was attempted by "./syz-executor exec"[26808] [ 1830.618215][ T29] audit: type=1326 audit(1729598482.006:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1830.826827][ T25] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1830.865333][ T29] audit: type=1326 audit(1729598482.156:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1831.151241][T26817] Bluetooth: MGMT ver 1.23 [ 1831.161077][ T29] audit: type=1326 audit(1729598482.156:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1831.270884][ T29] audit: type=1326 audit(1729598482.156:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1831.315757][ T29] audit: type=1326 audit(1729598482.156:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1831.369919][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.435346][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.492253][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1831.525078][ T29] audit: type=1326 audit(1729598482.156:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1831.548684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1831.573541][ T29] audit: type=1326 audit(1729598482.156:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26815 comm="syz.2.5417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1831.583778][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.638093][ T25] usb 2-1: config 0 descriptor?? [ 1832.127683][T26841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1832.136932][T26841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5421'. [ 1832.586492][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 1832.586515][ T29] audit: type=1400 audit(1729598483.966:1347): avc: denied { create } for pid=26843 comm="syz.3.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1832.814048][ T29] audit: type=1400 audit(1729598483.996:1348): avc: denied { connect } for pid=26843 comm="syz.3.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1832.814097][ T29] audit: type=1400 audit(1729598484.036:1349): avc: denied { write } for pid=26843 comm="syz.3.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1833.286881][T26862] syz.3.5426[26862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1833.287020][T26862] syz.3.5426[26862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1833.514977][T26862] syz.3.5426[26862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1834.004650][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 1834.030169][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1834.090986][ T5277] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1834.118507][ T25] usb 2-1: USB disconnect, device number 58 [ 1834.207463][ T29] audit: type=1326 audit(1729598485.596:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.285196][ T5277] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.326609][ T5277] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1834.335860][ T29] audit: type=1326 audit(1729598485.596:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.359451][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.367752][ T29] audit: type=1326 audit(1729598485.616:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.391269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.403000][ T29] audit: type=1326 audit(1729598485.636:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.426525][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.433339][ T29] audit: type=1326 audit(1729598485.636:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.456838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.476803][ T29] audit: type=1326 audit(1729598485.646:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.500468][ T29] audit: type=1326 audit(1729598485.646:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26876 comm="syz.3.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909337dff9 code=0x7ffc0000 [ 1834.523937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.647470][ T5277] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1834.657363][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.665636][ T5277] usb 3-1: Product: syz [ 1834.670544][ T5277] usb 3-1: Manufacturer: syz [ 1834.676826][ T5277] usb 3-1: SerialNumber: syz [ 1834.697812][ T5277] usb 3-1: config 0 descriptor?? [ 1835.561397][T26895] usb usb8: usbfs: process 26895 (syz.0.5432) did not claim interface 0 before use [ 1837.665216][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1837.674413][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1838.280587][ T5302] usb 3-1: USB disconnect, device number 59 [ 1839.802211][T26909] overlayfs: missing 'lowerdir' [ 1841.178639][T11164] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1842.964899][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1842.964920][ T29] audit: type=1400 audit(1729598494.346:1361): avc: denied { setopt } for pid=26945 comm="syz.1.5444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1843.071247][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5446'. [ 1843.080298][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5446'. [ 1845.044034][T11367] Bluetooth: hci1: Frame reassembly failed (-84) [ 1845.269418][T23097] Bluetooth: hci6: command 0x0406 tx timeout [ 1845.283281][T23097] Bluetooth: hci5: command 0x0406 tx timeout [ 1845.511744][ T29] audit: type=1326 audit(1729598496.896:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.538406][ T29] audit: type=1326 audit(1729598496.926:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.564420][ T29] audit: type=1326 audit(1729598496.926:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.587916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1845.595857][ T29] audit: type=1326 audit(1729598496.926:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.619384][ C1] vkms_vblank_simulate: vblank timer overrun [ 1845.634162][ T29] audit: type=1326 audit(1729598496.926:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.666852][ T29] audit: type=1326 audit(1729598497.016:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.688027][T26977] pim6reg1: entered promiscuous mode [ 1845.696196][T26977] pim6reg1: entered allmulticast mode [ 1845.706070][ T29] audit: type=1326 audit(1729598497.016:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.730871][ T29] audit: type=1326 audit(1729598497.016:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.759538][ T29] audit: type=1326 audit(1729598497.016:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26974 comm="syz.2.5452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1845.783027][ C1] vkms_vblank_simulate: vblank timer overrun [ 1845.858703][T26981] netlink: 'syz.0.5455': attribute type 4 has an invalid length. [ 1845.866897][T26981] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1846.783259][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'. [ 1846.926628][T26997] bridge_slave_1: left allmulticast mode [ 1846.947397][T26997] bridge_slave_1: left promiscuous mode [ 1846.953273][T26997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.993673][T26997] bridge1: port 1(bridge_slave_1) entered blocking state [ 1847.017331][T11164] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1847.023789][T26997] bridge1: port 1(bridge_slave_1) entered disabled state [ 1847.073160][T26997] bridge_slave_1: entered allmulticast mode [ 1847.080816][T26997] bridge_slave_1: entered promiscuous mode [ 1848.146657][ T5302] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1848.590342][ T5302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1848.606205][ T5302] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1848.631160][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1848.631181][ T29] audit: type=1326 audit(1729598500.016:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.635902][ T5302] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1848.643915][ T29] audit: type=1326 audit(1729598500.026:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.715024][ T5302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.723498][ T5302] usb 4-1: Product: syz [ 1848.727891][ T5302] usb 4-1: Manufacturer: syz [ 1848.732521][ T5302] usb 4-1: SerialNumber: syz [ 1848.740268][ T5302] usb 4-1: config 0 descriptor?? [ 1848.748385][ T29] audit: type=1326 audit(1729598500.096:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.801378][ T29] audit: type=1326 audit(1729598500.096:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.864216][ T29] audit: type=1326 audit(1729598500.096:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.887717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1848.899642][ T29] audit: type=1326 audit(1729598500.096:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.923887][ T29] audit: type=1326 audit(1729598500.096:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.939031][T27029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5472'. [ 1848.950853][ T29] audit: type=1326 audit(1729598500.096:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1848.957139][ T5277] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1848.980986][ T29] audit: type=1326 audit(1729598500.096:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1849.073807][T27029] bridge_slave_1: left allmulticast mode [ 1849.096998][ T29] audit: type=1326 audit(1729598500.096:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27021 comm="syz.2.5469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00d77dff9 code=0x7ffc0000 [ 1849.130535][T27029] bridge_slave_1: left promiscuous mode [ 1849.147458][T27029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.172321][T27029] bridge1: port 1(bridge_slave_1) entered blocking state [ 1849.193493][T27029] bridge1: port 1(bridge_slave_1) entered disabled state [ 1849.207917][T27029] bridge_slave_1: entered allmulticast mode [ 1849.215543][T27029] bridge_slave_1: entered promiscuous mode [ 1849.222303][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 1849.241342][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.260846][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1849.274577][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1849.993052][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.057376][ T5277] usb 2-1: config 0 descriptor?? [ 1850.095279][ T5277] hub 2-1:0.0: USB hub found [ 1850.335293][ T5277] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1850.358000][ T5277] usbhid 2-1:0.0: can't add hid device: -71 [ 1850.364726][ T5277] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1850.399414][ T5277] usb 2-1: USB disconnect, device number 59 [ 1851.590215][ T5931] usb 4-1: USB disconnect, device number 60 [ 1851.625176][T27055] atomic_op ffff88807d88f198 conn xmit_atomic 0000000000000000 [ 1851.872146][T27063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1852.616818][T27069] bridge_slave_1: left allmulticast mode [ 1852.622546][T27069] bridge_slave_1: left promiscuous mode [ 1852.693997][T27069] bridge1: port 1(bridge_slave_1) entered disabled state [ 1852.744805][T27069] bridge2: port 1(bridge_slave_1) entered blocking state [ 1852.771272][T27069] bridge2: port 1(bridge_slave_1) entered disabled state [ 1852.801316][T27069] bridge_slave_1: entered allmulticast mode [ 1852.824084][T27069] bridge_slave_1: entered promiscuous mode [ 1853.144998][T27083] ptrace attach of "./syz-executor exec"[25684] was attempted by "./syz-executor exec"[27083] [ 1854.060394][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.407004][ T5931] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1854.500969][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1854.500991][ T29] audit: type=1400 audit(1729598505.886:1413): avc: denied { write } for pid=27094 comm="syz.0.5493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1854.568611][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 1854.582755][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.614134][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.631899][ T5931] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1854.641236][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.657190][ T5931] usb 4-1: config 0 descriptor?? [ 1854.664492][ T5931] hub 4-1:0.0: USB hub found [ 1854.836644][ T5320] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1854.931899][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1854.939694][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1854.946928][ T5931] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1854.957987][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1854.965526][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1854.994551][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 1855.006956][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1855.068170][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1855.083679][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1855.093519][ T5931] usb 4-1: USB disconnect, device number 61 [ 1855.117658][T27107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5498'. [ 1855.131684][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1855.151449][T27107] bridge6: port 1(bridge_slave_1) entered blocking state [ 1855.158864][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1855.173966][T27107] bridge6: port 1(bridge_slave_1) entered disabled state [ 1855.182885][T27107] bridge_slave_1: entered allmulticast mode [ 1855.196803][ T5320] usb 2-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 1855.216734][ T5320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.225232][ T5320] usb 2-1: Product: syz [ 1855.235793][ T5320] usb 2-1: Manufacturer: syz [ 1855.242845][ T5320] usb 2-1: SerialNumber: syz [ 1855.253191][T27107] bridge_slave_1: entered promiscuous mode [ 1855.271681][ T5320] usb 2-1: config 0 descriptor?? [ 1855.292602][ T5320] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1855.311505][ T5320] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 1855.678976][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1855.688125][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1855.720730][ T5277] usb 2-1: USB disconnect, device number 60 [ 1855.759821][T26906] udevd[26906]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 1855.773470][ T5277] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1857.404156][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5508'. [ 1857.450682][T27137] bridge_slave_1: left allmulticast mode [ 1857.474625][T27137] bridge_slave_1: left promiscuous mode [ 1857.490965][T27137] bridge6: port 1(bridge_slave_1) entered disabled state [ 1857.528449][T27137] bridge7: port 1(bridge_slave_1) entered blocking state [ 1857.549718][T27137] bridge7: port 1(bridge_slave_1) entered disabled state [ 1857.572274][T27137] bridge_slave_1: entered allmulticast mode [ 1857.603383][T27137] bridge_slave_1: entered promiscuous mode [ 1857.717089][T25961] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1858.546672][T25961] usb 4-1: Using ep0 maxpacket: 8 [ 1858.606555][T25961] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1858.615672][T25961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.016584][T25961] usb 4-1: Product: syz [ 1859.020825][T25961] usb 4-1: Manufacturer: syz [ 1859.025445][T25961] usb 4-1: SerialNumber: syz [ 1859.158513][T25961] usb 4-1: config 0 descriptor?? [ 1859.879747][T25961] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1860.110546][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1860.120152][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5513'. [ 1860.146657][ T5276] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1860.173459][ T29] audit: type=1400 audit(1729598511.556:1414): avc: denied { create } for pid=27159 comm="syz.1.5515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1860.226110][ T29] audit: type=1400 audit(1729598511.596:1415): avc: denied { audit_write } for pid=27159 comm="syz.1.5515" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1860.260906][ T29] audit: type=1107 audit(1729598511.596:1416): pid=27159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1860.338578][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1860.354936][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1860.374458][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1860.386160][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1860.405250][ T5276] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 1860.415081][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.431596][ T5276] usb 3-1: Product: syz [ 1860.436136][ T5276] usb 3-1: Manufacturer: syz [ 1860.441381][ T5276] usb 3-1: SerialNumber: syz [ 1860.450012][ T5276] usb 3-1: config 0 descriptor?? [ 1860.465311][ T5276] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1860.484198][ T5276] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input49 [ 1860.497611][T25961] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1860.700664][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1860.758815][T27166] bridge_slave_1: left allmulticast mode [ 1860.764542][T27166] bridge_slave_1: left promiscuous mode [ 1860.796762][T27166] bridge2: port 1(bridge_slave_1) entered disabled state [ 1860.834321][T27166] bridge3: port 1(bridge_slave_1) entered blocking state [ 1860.859577][T27166] bridge3: port 1(bridge_slave_1) entered disabled state [ 1860.877047][T27166] bridge_slave_1: entered allmulticast mode [ 1860.907345][T27166] bridge_slave_1: entered promiscuous mode [ 1860.998195][ T5320] usb 3-1: USB disconnect, device number 60 [ 1861.005517][ T5320] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1861.342118][ T29] audit: type=1400 audit(1729598512.726:1417): avc: denied { read } for pid=27179 comm="syz.1.5521" name="sg0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1861.371086][ T29] audit: type=1400 audit(1729598512.726:1418): avc: denied { open } for pid=27179 comm="syz.1.5521" path="/dev/sg0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1861.411176][ T29] audit: type=1400 audit(1729598512.726:1419): avc: denied { ioctl } for pid=27179 comm="syz.1.5521" path="/dev/sg0" dev="devtmpfs" ino=691 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1861.542282][ T5320] usb 4-1: USB disconnect, device number 62 [ 1863.395683][T27198] ptrace attach of "./syz-executor exec"[25063] was attempted by "./syz-executor exec"[27198] [ 1863.428173][T27196] netlink: 'syz.3.5526': attribute type 27 has an invalid length. [ 1863.540703][T27196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.548351][T27196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.731157][T27196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1863.774684][T27196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1863.960413][T27196] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.971402][T27196] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.980682][T27196] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1863.990005][T27196] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.038243][T27205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1864.058250][T27207] bridge_slave_1: left allmulticast mode [ 1864.069591][T27207] bridge_slave_1: left promiscuous mode [ 1864.075608][T27207] bridge1: port 1(bridge_slave_1) entered disabled state [ 1864.089603][T27207] bridge2: port 1(bridge_slave_1) entered blocking state [ 1864.097095][T27207] bridge2: port 1(bridge_slave_1) entered disabled state [ 1864.104478][T27207] bridge_slave_1: entered allmulticast mode [ 1864.112797][T27207] bridge_slave_1: entered promiscuous mode [ 1864.376593][ T5276] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1864.562181][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1864.767114][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1864.812509][ T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1864.853607][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.913905][ T25] usb 3-1: Product: syz [ 1864.981445][ T25] usb 3-1: Manufacturer: syz [ 1865.033506][ T25] usb 3-1: SerialNumber: syz [ 1865.068802][ T25] usb 3-1: config 0 descriptor?? [ 1865.078207][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1865.093011][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1865.103670][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1865.115817][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1865.134107][ T5276] usb 4-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 1865.145456][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.176893][ T5276] usb 4-1: Product: syz [ 1865.192157][ T5276] usb 4-1: Manufacturer: syz [ 1865.198343][ T5276] usb 4-1: SerialNumber: syz [ 1865.205533][ T5276] usb 4-1: config 0 descriptor?? [ 1865.244605][ T5276] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1865.256214][ T5276] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input50 [ 1865.288899][ T25] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1865.631672][ T5320] usb 4-1: USB disconnect, device number 63 [ 1865.639775][ T5320] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1865.732883][ T2517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.845014][ T2517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.933065][ T25] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1865.945014][ T2517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.032581][ T2517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.184366][ T2517] bridge_slave_1: left allmulticast mode [ 1866.190645][ T2517] bridge_slave_1: left promiscuous mode [ 1866.196665][ T2517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.212878][ T2517] bridge_slave_0: left allmulticast mode [ 1866.220972][ T2517] bridge_slave_0: left promiscuous mode [ 1866.227371][ T2517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.912259][ T2517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1866.924361][ T2517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.935516][ T2517] bond0 (unregistering): Released all slaves [ 1867.312707][ T5320] usb 3-1: USB disconnect, device number 61 [ 1869.294879][ T2517] hsr_slave_0: left promiscuous mode [ 1869.438011][T25696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1869.458447][T25696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1869.468677][T25696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1869.487959][T25696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1869.498218][T25696] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1869.509445][T25696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1869.518149][T27271] usb usb8: usbfs: process 27271 (syz.0.5535) did not claim interface 0 before use [ 1869.693662][ T2517] hsr_slave_1: left promiscuous mode [ 1869.717831][ T2517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1869.754357][ T2517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1869.798644][ T2517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1869.841836][ T2517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1869.953524][ T2517] veth1_macvtap: left promiscuous mode [ 1869.976602][ T2517] veth0_macvtap: left promiscuous mode [ 1869.982285][ T2517] veth1_vlan: left promiscuous mode [ 1870.016634][ T2517] veth0_vlan: left promiscuous mode [ 1871.587589][T11164] Bluetooth: hci0: command tx timeout [ 1871.612704][ T2517] team0 (unregistering): Port device team_slave_1 removed [ 1871.708639][ T2517] team0 (unregistering): Port device team_slave_0 removed [ 1873.669411][T11164] Bluetooth: hci0: command tx timeout [ 1873.949388][T27309] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5550'. [ 1873.984359][T27280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'. [ 1874.001463][T27283] bridge_slave_1: left allmulticast mode [ 1874.007534][T27283] bridge_slave_1: left promiscuous mode [ 1874.013651][T27283] bridge2: port 1(bridge_slave_1) entered disabled state [ 1874.039703][T27283] bridge3: port 1(bridge_slave_1) entered blocking state [ 1874.050316][T27283] bridge3: port 1(bridge_slave_1) entered disabled state [ 1874.068525][T27283] bridge_slave_1: entered allmulticast mode [ 1874.080456][T27283] bridge_slave_1: entered promiscuous mode [ 1874.166861][T27297] netlink: 'syz.3.5547': attribute type 27 has an invalid length. [ 1874.289391][T27268] lo speed is unknown, defaulting to 1000 [ 1875.705305][T27268] chnl_net:caif_netlink_parms(): no params data found [ 1875.746851][T11164] Bluetooth: hci0: command tx timeout [ 1876.137969][T27268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.145133][T27268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.166909][T27268] bridge_slave_0: entered allmulticast mode [ 1876.190058][T27268] bridge_slave_0: entered promiscuous mode [ 1876.212651][T27268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.230064][T27268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.247251][T27268] bridge_slave_1: entered allmulticast mode [ 1876.264703][T27268] bridge_slave_1: entered promiscuous mode [ 1876.780803][T27268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.799467][T27268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.003300][T27268] team0: Port device team_slave_0 added [ 1877.031948][T27268] team0: Port device team_slave_1 added [ 1877.148532][T27268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1877.155538][T27268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.202324][T27268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1877.224197][T27268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1877.241457][T27268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1877.296559][T27268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1877.423696][T27268] hsr_slave_0: entered promiscuous mode [ 1877.432205][T27268] hsr_slave_1: entered promiscuous mode [ 1877.816688][T11164] Bluetooth: hci0: command tx timeout [ 1878.715790][T27367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5561'. [ 1878.731692][T27371] bridge_slave_1: left allmulticast mode [ 1878.755670][T27371] bridge_slave_1: left promiscuous mode [ 1878.773107][T27371] bridge3: port 1(bridge_slave_1) entered disabled state [ 1878.798306][T27371] bridge4: port 1(bridge_slave_1) entered blocking state [ 1878.805618][T27371] bridge4: port 1(bridge_slave_1) entered disabled state [ 1878.815057][T27371] bridge_slave_1: entered allmulticast mode [ 1878.829511][T27371] bridge_slave_1: entered promiscuous mode [ 1878.995611][T27383] netlink: 'syz.2.5563': attribute type 27 has an invalid length. [ 1879.094098][T27383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.195465][T27383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1879.219098][T27383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1879.563067][T27383] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.580874][T27383] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.591629][T27383] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.605094][T27383] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.329212][T27411] syz.1.5569[27411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1881.329324][T27411] syz.1.5569[27411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1881.427133][T27411] syz.1.5569[27411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1882.756841][T27427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1882.987059][T27427] bridge_slave_1: left allmulticast mode [ 1883.006919][T27427] bridge_slave_1: left promiscuous mode [ 1883.016868][T27427] bridge7: port 1(bridge_slave_1) entered disabled state [ 1883.273870][T27427] bridge8: port 1(bridge_slave_1) entered blocking state [ 1883.282688][T27427] bridge8: port 1(bridge_slave_1) entered disabled state [ 1883.294069][T27427] bridge_slave_1: entered allmulticast mode [ 1884.760342][T27427] bridge_slave_1: entered promiscuous mode [ 1884.913733][T27433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5572'. [ 1885.005953][T27445] netlink: 'syz.1.5576': attribute type 27 has an invalid length. [ 1885.334978][T27445] bridge0: port 3(erspan0) entered disabled state [ 1886.202859][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.511391][T27445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1886.539418][T27445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1887.316357][T27445] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.349317][T27445] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.363051][T27445] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.375802][T27445] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.575308][T27268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1887.645200][T27268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1887.666207][T27268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1887.697223][T27268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1888.877354][T27268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1890.169978][T27268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1890.465906][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.473113][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1890.706878][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.714035][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.244121][T27268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1891.254752][T27268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1891.490151][T27500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5588'. [ 1891.522958][T27494] bridge_slave_1: left allmulticast mode [ 1891.532337][T27494] bridge_slave_1: left promiscuous mode [ 1891.538462][T27494] bridge8: port 1(bridge_slave_1) entered disabled state [ 1891.587998][T27494] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5588'. [ 1893.231408][T27268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.450937][T27563] usb usb8: usbfs: process 27563 (syz.0.5599) did not claim interface 0 before use [ 1896.769288][T27268] veth0_vlan: entered promiscuous mode [ 1896.812619][T27268] veth1_vlan: entered promiscuous mode [ 1896.837544][T27268] veth0_macvtap: entered promiscuous mode [ 1896.847541][T27268] veth1_macvtap: entered promiscuous mode [ 1896.884501][T27268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1896.924606][T27268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1896.956463][T27569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1896.976809][T27570] bridge_slave_1: left allmulticast mode [ 1896.982519][T27570] bridge_slave_1: left promiscuous mode [ 1897.039891][T27570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.447466][T27570] bridge2: port 1(bridge_slave_1) entered blocking state [ 1897.456674][T27570] bridge2: port 1(bridge_slave_1) entered disabled state [ 1897.480760][T27570] bridge_slave_1: entered allmulticast mode [ 1897.515421][T27570] bridge_slave_1: entered promiscuous mode [ 1897.559041][T27268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.596069][T27268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.619951][T27268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.632539][T27268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.663509][T27569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1898.098367][ T2517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1898.172424][ T2517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.008117][ T2517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1899.016015][ T2517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1900.336718][T27634] usb usb8: usbfs: process 27634 (syz.3.5610) did not claim interface 0 before use [ 1902.325369][T27664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5614'. [ 1902.418729][T27664] bridge_slave_1: left allmulticast mode [ 1902.454698][T27664] bridge_slave_1: left promiscuous mode [ 1902.495826][T27664] bridge4: port 1(bridge_slave_1) entered disabled state [ 1902.629049][T27664] bridge5: port 1(bridge_slave_1) entered blocking state [ 1902.643644][T27664] bridge5: port 1(bridge_slave_1) entered disabled state [ 1902.651692][T27664] bridge_slave_1: entered allmulticast mode [ 1902.778633][T27664] bridge_slave_1: entered promiscuous mode [ 1902.786178][T27666] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5614'. [ 1904.136610][ T5302] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1905.015957][ T5302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.031464][ T5302] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1905.059277][ T5302] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1905.074530][ T5302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.090323][ T5302] usb 2-1: Product: syz [ 1905.115278][ T5302] usb 2-1: Manufacturer: syz [ 1905.130575][ T5302] usb 2-1: SerialNumber: syz [ 1905.170813][ T5302] usb 2-1: config 0 descriptor?? [ 1907.893305][T27724] usb usb8: usbfs: process 27724 (syz.3.5621) did not claim interface 0 before use [ 1908.270035][T27732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1908.294070][T27732] bridge10: port 1(bridge_slave_1) entered blocking state [ 1908.301804][T27732] bridge10: port 1(bridge_slave_1) entered disabled state [ 1908.314257][T27732] bridge_slave_1: entered allmulticast mode [ 1908.321822][T27732] bridge_slave_1: entered promiscuous mode [ 1908.334798][T27732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1908.872553][T24307] Bluetooth: hci1: Frame reassembly failed (-84) [ 1908.938463][ T25] usb 2-1: USB disconnect, device number 61 [ 1910.938489][T25696] Bluetooth: hci1: command 0x1003 tx timeout [ 1910.945324][T11164] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1911.779683][T27777] usb usb8: usbfs: process 27777 (syz.1.5637) did not claim interface 0 before use [ 1914.512937][T27801] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5636'. [ 1914.523965][T27801] openvswitch: Κό: Dropping previously announced user features [ 1914.901727][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.684103][ T29] audit: type=1400 audit(1729598567.066:1420): avc: denied { listen } for pid=27810 comm="syz.2.5648" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1915.710852][ T29] audit: type=1400 audit(1729598567.096:1421): avc: denied { setopt } for pid=27810 comm="syz.2.5648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1915.763113][ T29] audit: type=1400 audit(1729598567.146:1422): avc: denied { accept } for pid=27810 comm="syz.2.5648" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1915.866271][T27815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5648'. [ 1915.884290][ T2517] Bluetooth: hci1: Frame reassembly failed (-84) [ 1916.571202][ T29] audit: type=1400 audit(1729598567.936:1423): avc: denied { watch watch_reads } for pid=27810 comm="syz.2.5648" path="/91/file0" dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1916.710415][T27818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5649'. [ 1917.926779][T25696] Bluetooth: hci1: command 0x1003 tx timeout [ 1917.935685][T11164] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1919.488663][ T5320] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1919.526796][T27853] Bluetooth: MGMT ver 1.23 [ 1919.673530][ T5320] usb 4-1: Using ep0 maxpacket: 32 [ 1919.853596][ T5320] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1919.862857][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.874608][ T5320] usb 4-1: config 0 descriptor?? [ 1919.889956][ T5320] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1923.909625][ T5320] gspca_vc032x: reg_r err -32 [ 1923.914418][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.920282][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.925619][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.941486][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.951614][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.966546][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.971891][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1923.996523][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.001877][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.021047][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.036518][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.046479][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.051812][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.076418][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.081920][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.096452][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.101806][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1924.120789][ T5320] gspca_vc032x: Unknown sensor... [ 1924.125935][ T5320] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1924.249405][ T5320] usb 4-1: USB disconnect, device number 64 [ 1924.756814][ T5320] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1924.940847][ T5320] usb 3-1: Using ep0 maxpacket: 32 [ 1924.962951][ T5320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.994486][ T5320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1925.031897][ T5320] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1925.068828][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.185890][ T5320] usb 3-1: config 0 descriptor?? [ 1925.233887][ T5320] hub 3-1:0.0: USB hub found [ 1925.511966][ T5320] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1925.733466][ T5320] usbhid 3-1:0.0: can't add hid device: -71 [ 1925.756584][ T5320] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1925.831971][ T5320] usb 3-1: USB disconnect, device number 62 [ 1927.920933][T27923] ptrace attach of "./syz-executor exec"[25692] was attempted by "./syz-executor exec"[27923] [ 1928.932991][T24305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.006484][T24305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.091837][T24305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.160805][T24305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.264772][T24305] bridge_slave_1: left allmulticast mode [ 1929.273576][T24305] bridge_slave_1: left promiscuous mode [ 1929.284681][T24305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.298477][T24305] bridge_slave_0: left allmulticast mode [ 1929.304193][T24305] bridge_slave_0: left promiscuous mode [ 1929.310595][T24305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.794797][ T5277] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1929.891809][T25696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1929.903832][T25696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1929.915490][T25696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1929.952278][T25696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1929.965026][T25696] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1929.976610][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 1929.994147][ T5277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 1930.007790][T25696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1930.068963][ T5277] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1930.079216][ T5277] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1930.094327][ T5277] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1930.104632][ T5277] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1930.124436][ T5277] usb 3-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 1930.142335][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1930.165549][ T5277] usb 3-1: SerialNumber: syz [ 1930.185785][T27934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1930.203041][ T5277] hub 3-1:1.0: bad descriptor, ignoring hub [ 1930.231284][ T5277] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1930.239230][ T5277] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1930.833799][T24305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1930.852620][T24305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1930.864880][T24305] bond0 (unregistering): Released all slaves [ 1930.939500][T27946] lo speed is unknown, defaulting to 1000 [ 1931.419912][T27946] chnl_net:caif_netlink_parms(): no params data found [ 1931.486568][T24305] hsr_slave_0: left promiscuous mode [ 1931.493862][T24305] hsr_slave_1: left promiscuous mode [ 1931.517189][T24305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1931.537119][T24305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1931.570113][T24305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1931.593777][T24305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1931.681455][T24305] veth1_macvtap: left promiscuous mode [ 1931.689864][T24305] veth0_macvtap: left promiscuous mode [ 1931.695593][T24305] veth1_vlan: left promiscuous mode [ 1931.704662][T24305] veth0_vlan: left promiscuous mode [ 1932.066878][T25696] Bluetooth: hci0: command tx timeout [ 1932.876599][T25696] Bluetooth: hci1: command 0x1003 tx timeout [ 1932.896799][T11164] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1932.978475][ T5320] usb 3-1: USB disconnect, device number 63 [ 1933.097867][ T29] audit: type=1400 audit(1729598584.486:1424): avc: denied { unmount } for pid=25692 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1934.438216][T11164] Bluetooth: hci0: command tx timeout [ 1934.917649][T24305] team0 (unregistering): Port device team_slave_1 removed [ 1935.070040][T24305] team0 (unregistering): Port device team_slave_0 removed [ 1935.081569][T28001] Bluetooth: MGMT ver 1.23 [ 1935.967655][ T29] audit: type=1326 audit(1729598587.356:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.026473][ T29] audit: type=1326 audit(1729598587.376:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.088110][ T29] audit: type=1326 audit(1729598587.386:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.132229][ T29] audit: type=1326 audit(1729598587.436:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.224409][ T29] audit: type=1326 audit(1729598587.436:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.290977][ T29] audit: type=1326 audit(1729598587.436:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.361013][ T29] audit: type=1326 audit(1729598587.466:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.446498][ T29] audit: type=1326 audit(1729598587.466:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1936.471188][T11164] Bluetooth: hci0: command tx timeout [ 1936.564883][ T29] audit: type=1326 audit(1729598587.466:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28006 comm="syz.0.5693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83277dff9 code=0x7ffc0000 [ 1938.111109][T28026] ptrace attach of "./syz-executor exec"[25692] was attempted by "./syz-executor exec"[28026] [ 1938.233465][T27946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.288038][T27946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.315444][T27946] bridge_slave_0: entered allmulticast mode [ 1938.338888][T27946] bridge_slave_0: entered promiscuous mode [ 1938.366994][T27946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.385068][T27946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.401115][T27946] bridge_slave_1: entered allmulticast mode [ 1938.420970][T27946] bridge_slave_1: entered promiscuous mode [ 1938.536587][T11164] Bluetooth: hci0: command tx timeout [ 1938.572230][T27946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1938.643930][T27946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1938.850447][T27946] team0: Port device team_slave_0 added [ 1938.879312][T27946] team0: Port device team_slave_1 added [ 1938.973107][T27946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1938.994115][T27946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1939.076424][T27946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1939.100316][T27946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1939.139337][T27946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1939.216459][T27946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1939.244549][T28044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 1939.276645][T28045] bridge_slave_1: left allmulticast mode [ 1939.289353][T28045] bridge_slave_1: left promiscuous mode [ 1939.324911][T28045] bridge2: port 1(bridge_slave_1) entered disabled state [ 1939.369215][T28045] bridge3: port 1(bridge_slave_1) entered blocking state [ 1939.376794][T28045] bridge3: port 1(bridge_slave_1) entered disabled state [ 1939.384219][T28045] bridge_slave_1: entered allmulticast mode [ 1939.395865][T28045] bridge_slave_1: entered promiscuous mode [ 1939.420612][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5699'. [ 1939.627167][T27946] hsr_slave_0: entered promiscuous mode [ 1939.650341][T27946] hsr_slave_1: entered promiscuous mode [ 1942.668686][T27946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1942.697508][T28075] block device autoloading is deprecated and will be removed. [ 1942.775897][T28075] syz.0.5705: attempt to access beyond end of device [ 1942.775897][T28075] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1942.930184][T27946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1942.942588][T28086] ptrace attach of "./syz-executor exec"[9619] was attempted by "./syz-executor exec"[28086] [ 1943.040884][T28088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1943.208905][T27946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1943.230548][T27946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1943.253857][T28088] bridge_slave_1: left allmulticast mode [ 1943.967494][T28088] bridge_slave_1: left promiscuous mode [ 1943.973331][T28088] bridge5: port 1(bridge_slave_1) entered disabled state [ 1944.151159][T28088] bridge6: port 1(bridge_slave_1) entered blocking state [ 1944.176588][T28088] bridge6: port 1(bridge_slave_1) entered disabled state [ 1944.183886][T28088] bridge_slave_1: entered allmulticast mode [ 1944.341836][T28088] bridge_slave_1: entered promiscuous mode [ 1944.975203][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1945.268478][T27946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1945.269236][ T5320] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1945.294169][T27946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1945.425245][ T2517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1945.432504][ T2517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1945.460698][ T5320] usb 4-1: Using ep0 maxpacket: 32 [ 1945.475039][ T5320] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1945.493630][ T2517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1945.500801][ T2517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.568330][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.609979][ T5320] usb 4-1: config 0 descriptor?? [ 1945.644228][T27946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1945.647971][ T5320] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1945.668141][T27946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1946.741172][ T5320] gspca_vc032x: reg_r err -110 [ 1946.746104][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.751549][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.756955][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.762335][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.767753][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.773127][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.778719][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.784107][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.789725][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.795172][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.800621][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.806012][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.811436][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.816888][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.822264][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.827726][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.833106][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.838579][ T5320] gspca_vc032x: I2c Bus Busy Wait 00 [ 1946.843961][ T5320] gspca_vc032x: Unknown sensor... [ 1946.849274][ T5320] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1947.521925][T28126] syz.0.5718[28126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1947.521996][T28126] syz.0.5718[28126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1947.643753][T28126] syz.0.5718[28126] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1947.673149][T27946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1948.732760][ T25] usb 4-1: USB disconnect, device number 65 [ 1948.990315][T27946] veth0_vlan: entered promiscuous mode [ 1949.037913][T27946] veth1_vlan: entered promiscuous mode [ 1949.149427][T27946] veth0_macvtap: entered promiscuous mode [ 1949.193546][T27946] veth1_macvtap: entered promiscuous mode [ 1949.282768][T27946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1949.450818][T27946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1949.641116][T27946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.651584][T27946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.660894][T27946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.695968][T27946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1949.841580][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5722'. [ 1949.922167][T28175] bridge_slave_1: left allmulticast mode [ 1949.940034][T28175] bridge_slave_1: left promiscuous mode [ 1949.966949][T28175] bridge10: port 1(bridge_slave_1) entered disabled state [ 1950.021624][T28175] bridge11: port 1(bridge_slave_1) entered blocking state [ 1950.039892][T28175] bridge11: port 1(bridge_slave_1) entered disabled state [ 1950.088981][T28175] bridge_slave_1: entered allmulticast mode [ 1950.153994][T28175] bridge_slave_1: entered promiscuous mode [ 1950.287099][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.316636][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.401428][T24305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.436688][T24305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.773698][ T2997] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=2108 state=3 status=67 (errno 9: Bad file descriptor) [ 1951.930872][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1951.930894][ T29] audit: type=1400 audit(1729598603.286:1437): avc: denied { write } for pid=5209 comm="syz-executor" path="pipe:[3500]" dev="pipefs" ino=3500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1952.351817][ T2997] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.108142][T28205] bond0: (slave syz_tun): Releasing backup interface [ 1953.809939][ T2997] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1953.948390][ T2997] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1954.264062][ T2997] bridge_slave_1: left allmulticast mode [ 1954.277065][ T2997] bridge_slave_1: left promiscuous mode [ 1954.282865][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.342866][ T2997] bridge_slave_0: left allmulticast mode [ 1954.361114][ T2997] bridge_slave_0: left promiscuous mode [ 1954.367518][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1955.374373][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1955.429297][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1955.449165][ T2997] bond0 (unregistering): Released all slaves [ 1956.083276][ T2997] hsr_slave_0: left promiscuous mode [ 1956.097210][ T2997] hsr_slave_1: left promiscuous mode [ 1956.107384][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1956.114866][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1956.161918][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1956.181664][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1956.302630][ T2997] veth1_macvtap: left promiscuous mode [ 1956.344836][ T2997] veth0_macvtap: left promiscuous mode [ 1956.359219][ T2997] veth1_vlan: left promiscuous mode [ 1956.367787][ T2997] veth0_vlan: left promiscuous mode [ 1958.016985][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 1958.199427][ T2997] team0 (unregistering): Port device team_slave_0 removed