last executing test programs: 1m24.21497112s ago: executing program 2 (id=729): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3e, 0x0, &(0x7f0000000440)="e460cdfbef2408002900119386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000400e8d50000000100000bb500000500242c108906d320d98a", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.009212319s ago: executing program 2 (id=730): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r3, r2, 0x2, 0x0, 0x4000}, 0x10) 1m23.836084931s ago: executing program 2 (id=731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2}]}, 0x1, [{0x0, 0x0}]}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r2], 0x1c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xd2, 0x6, 0x7, 0x48, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x8}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x23, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) sendmsg$sock(r5, &(0x7f0000001600)={&(0x7f0000000400)=@ax25={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x80, &(0x7f0000001580)=[{&(0x7f00000011c0)="9990589d9bcaba10d63e178af748c9bc60f5f5e9225cc876", 0x18}, {&(0x7f0000001200)="ffe579ac0d2352e744eac23659f37419b569190a0ad49f90ffb885f61a46ae459a324bd0fca1dc1f7ed3f0119ac26a1aaf9d70b77065be12d6712f0f92350e8a2240409804dc1d3754e4f12a3084099072e3b29453c295276908c2f982095b72", 0x60}, {&(0x7f0000001280)="71ac957fe39daa6a7989f85cc06bc9a7d2408319d0d56982", 0x18}, {&(0x7f00000012c0)="e0f3a8611abf613cbe86382047b0ac9d874dd3a26dbf0df463e42e90a7c1376beb02c59a", 0x24}, {&(0x7f0000001340)="afe9d51cbe46f7883cce68dd0a178958cd14c8d511a9358ee7121d599a968cf08e8d7b4b6715bf65290f04570990911aab7d90fa74f59dd378698063f02d579958af66aa26adac05cb00d2a0174a59df5b6fbd892dc98382ad16ce96ed9374330e393a4a43a5f6577568d503b80b1684285a8cd48624438e6bdee595772e8f4f8def119ac18513a9d3f4998517", 0x8d}, {&(0x7f0000001400)="c6de1e299bd68056a69c2825d7248edeb007e1b71dd20b59e9248e1bdbdb247a5cf0499ad11d1c7897407541ed5b63660600d3d81ebc29122857a9f4f02147fedf70dde2692f61394569fc6df2ee462363f8204b7b1e5da900d8a60cc56329ad2e794afc59c539dd8d0b5576dfc9e23e3da6c2901caba8697c8a39d4679ba6dd790cf0fb5f300408c376baf1d08df1c49540cd36b9203da026a5170a826220ce802e5e0121849123f3a738702349f7289238938e547a66bdec9c993319019205b27ac8", 0xc3}, {&(0x7f0000001500)="8fb643aed91377b2cb76e028daad92acc8c68d1a8b2b296445e6324d22d709360d565124806f9310a8b24fe26a62139eaf3bd6349a468a6c17b2ab56652e982184f9227f02bcd7fe3df785fc38129eb58ce970b1a7fdc567234764a6222765626c3ea5b9202ff7fb59f76b6d8b0c", 0x6e}], 0x7, &(0x7f00000015c0)=[@txtime={{0x14, 0x1, 0x3d, 0x9}}], 0x14}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000040)) syz_80211_inject_frame(0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="4d8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) 1m23.3442987s ago: executing program 2 (id=733): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4328c1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r3 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={r9}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) 55.05545626s ago: executing program 2 (id=733): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4328c1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r3 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={r9}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) 27.55216835s ago: executing program 3 (id=838): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000380), 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x1, "a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="000019"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000b40), 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x20, 0x13, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000004c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0}) 22.432152487s ago: executing program 3 (id=849): syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x800, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xc7, 0x3, 0x9}, @end, @timestamp_addr={0x44, 0x4, 0x60, 0x1, 0x7}]}}, @address_reply={0x12, 0x0, 0x0, 0x88f}}}}}, 0x0) 21.239417134s ago: executing program 3 (id=851): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/19, 0x20}], 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000200), &(0x7f0000000300)=[r1], &(0x7f0000000580)}) 19.485457224s ago: executing program 3 (id=856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @link_id}, 0x20) socketpair(0xa, 0x1, 0x0, &(0x7f0000002d00)) 19.065292765s ago: executing program 3 (id=860): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) pipe2(0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff0000000001"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91d13ee8db164c6e4b4e00d96070000001ea89de2b7fb0a0100000000000080000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 17.905972342s ago: executing program 3 (id=864): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 13.45077716s ago: executing program 2 (id=733): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4328c1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') r3 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={r9}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) 5.311668493s ago: executing program 0 (id=900): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x0, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f766972745f776966690008001300", @ANYRES32=r6, @ANYBLOB="24000e"], 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="bc7fcc42d332575a3e19161d4bc343e6310afebcde6c2c0143e9758f11a53281823747c6e54d679dbed435bd842c254a480b2d8944249e357195b29e6ca8a551a6e170082850cce372e4379687c6581c966b43ba95e5a6af8f3693b9db2c984b6fcfb86abd751de9c534359310a5da94b9859df7be94a712ea1d15513a15942fc9745dbc1f61", 0x86, 0x4040010, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @remote, 0x80000000}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) 4.708084568s ago: executing program 0 (id=902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 4.505416464s ago: executing program 0 (id=903): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x3, 0x5, "92e40ff9c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.723452019s ago: executing program 1 (id=907): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/19, 0x20}], 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000200), &(0x7f0000000300)=[r2], &(0x7f0000000580)}) 3.516426856s ago: executing program 4 (id=908): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file1/file0', [], 0xa, "c55a45c46892ef08f7bbfe536226c977b08afffb5c482a5c"}, 0x29) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 3.389860919s ago: executing program 4 (id=909): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ptype\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) openat$vcs(0xffffff9c, 0x0, 0x84400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) read$FUSE(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22020000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4bcf52d32e0400000000d40e7a0c1f7bff000000af000000000b4af975cda405", 0x20) 2.613536165s ago: executing program 1 (id=910): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffe2, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 2.51597434s ago: executing program 4 (id=911): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100}}) 2.301343803s ago: executing program 1 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 2.300590234s ago: executing program 4 (id=913): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r0, 0x401) 2.092482553s ago: executing program 4 (id=914): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = semget$private(0x0, 0x5, 0x0) semop(0x0, 0x0, 0x0) semtimedop(r0, &(0x7f0000000180)=[{0x2, 0x5371, 0x1800}], 0x1, 0x0) 2.078866937s ago: executing program 0 (id=915): ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000001000)={0x0, "e82e659329311a0f30c2fe3a26f9fcacf57855fe99ffc6beffa9820aa03da8d5", 0x5, 0x20, 0x4, 0xb708, 0x0, 0x2, 0xf}) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socket$packet(0x11, 0x3, 0x300) 1.760264376s ago: executing program 1 (id=916): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000088a80d008100090086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be81000000100000000100000000000000080022eb"], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x65c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 1.75906327s ago: executing program 4 (id=917): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.503220142s ago: executing program 0 (id=918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x2000002, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) 688.953963ms ago: executing program 1 (id=919): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f00000005c0)=""/93, 0x5d}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f0000000640)=""/85, 0x55}, {&(0x7f0000000700)=""/143, 0x8f}], 0x6}, 0x5}, {{&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/189, 0xbd}], 0x1}, 0x8}, {{&(0x7f0000000a40)=@nfc_llcp, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/128, 0x80}, {0x0}], 0x2, &(0x7f0000000c80)=""/177, 0xb1}, 0x1000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1}, 0x40}], 0x5, 0x1, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 167.748671ms ago: executing program 0 (id=920): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/19, 0x20}], 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000200), &(0x7f0000000300)=[r2], &(0x7f0000000580)}) 0s ago: executing program 1 (id=921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) socket$inet6(0xa, 0x3, 0x3a) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x6) fcntl$getown(0xffffffffffffffff, 0x9) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x0]}}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) recvmmsg(r7, 0x0, 0x0, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000a95a6e870200010000000008004000020000000005000500000000000a"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): id=9306 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 717.442337][ T5673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.746025][ T30] audit: type=1400 audit(2000000403.530:413): avc: denied { bind } for pid=9306 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 717.819721][ T5673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.838373][ T5673] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 717.874551][ T5673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.887912][ T5673] usb 1-1: config 0 descriptor?? [ 718.032101][ T8788] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 718.286373][ T8788] usb 3-1: Using ep0 maxpacket: 32 [ 718.328915][ T8788] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 718.354540][ T5673] usbhid 1-1:0.0: can't add hid device: -71 [ 718.368542][ T8788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.383229][ T5673] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 718.404980][ T8788] usb 3-1: Product: syz [ 718.420646][ T8788] usb 3-1: Manufacturer: syz [ 718.425337][ T8788] usb 3-1: SerialNumber: syz [ 718.431278][ T5673] usb 1-1: USB disconnect, device number 22 [ 718.457633][ T8788] usb 3-1: config 0 descriptor?? [ 718.537101][ T8788] usb 3-1: bad CDC descriptors [ 718.546527][ T8788] usb 3-1: unsupported MDLM descriptors [ 718.822878][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.855710][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.897058][ T142] bond0 (unregistering): Released all slaves [ 718.986964][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.199204][ T5241] Bluetooth: hci4: command 0x0406 tx timeout [ 719.356475][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.137601][ T25] usb 3-1: USB disconnect, device number 20 [ 720.408557][ T9124] team0: Port device team_slave_0 added [ 720.758449][ T9124] team0: Port device team_slave_1 added [ 722.154716][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.176131][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.275353][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.360244][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 722.427387][ T142] hsr_slave_0: left promiscuous mode [ 722.470733][ T142] hsr_slave_1: left promiscuous mode [ 722.488527][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.536019][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.562385][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.019791][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.230174][ T9328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.660'. [ 723.268355][ T142] veth1_macvtap: left promiscuous mode [ 723.278570][ T142] veth0_macvtap: left promiscuous mode [ 723.286967][ T142] veth1_vlan: left promiscuous mode [ 723.293322][ T142] veth0_vlan: left promiscuous mode [ 723.648879][ T5230] Bluetooth: hci3: unexpected event for opcode 0x200f [ 723.658315][ T9333] overlayfs: conflicting options: nfs_export=on,index=off [ 725.707545][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 725.726705][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 725.735622][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 725.758642][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 725.800011][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 725.807850][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 726.325491][ T142] team0 (unregistering): Port device team_slave_1 removed [ 726.496945][ T142] team0 (unregistering): Port device team_slave_0 removed [ 727.916252][ T5241] Bluetooth: hci4: command tx timeout [ 727.931951][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.944780][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 727.949114][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.004082][ T9339] hfs: invalid gid -1 [ 728.006168][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.018830][ T9339] hfs: unable to parse mount options [ 728.036618][ T9057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 728.257408][ T9057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 728.535463][ T9057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 729.319626][ T9124] hsr_slave_0: entered promiscuous mode [ 729.337383][ T9124] hsr_slave_1: entered promiscuous mode [ 729.372724][ T9124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.380473][ T9124] Cannot create hsr debugfs directory [ 729.389395][ T9057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 729.791041][ T9347] FAULT_INJECTION: forcing a failure. [ 729.791041][ T9347] name failslab, interval 1, probability 0, space 0, times 0 [ 729.807257][ T9347] CPU: 1 UID: 0 PID: 9347 Comm: syz.2.666 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 729.817929][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 729.828047][ T9347] Call Trace: [ 729.831369][ T9347] [ 729.834341][ T9347] dump_stack_lvl+0x16c/0x1f0 [ 729.839080][ T9347] should_fail_ex+0x497/0x5b0 [ 729.843818][ T9347] ? fs_reclaim_acquire+0xae/0x160 [ 729.848991][ T9347] should_failslab+0xc2/0x120 [ 729.849045][ T9349] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 729.849045][ T9349] Ue[%#s' [ 729.853714][ T9347] __kmalloc_noprof+0xcb/0x400 [ 729.853760][ T9347] ? __pfx_lock_acquire+0x10/0x10 [ 729.877471][ T30] audit: type=1400 audit(2000000415.650:414): avc: denied { mounton } for pid=9348 comm="syz.0.667" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 729.881795][ T9347] tomoyo_realpath_from_path+0xb9/0x720 [ 729.881840][ T9347] ? tomoyo_profile+0x47/0x60 [ 729.920710][ T9347] tomoyo_path_number_perm+0x245/0x590 [ 729.926257][ T9347] ? tomoyo_path_number_perm+0x232/0x590 [ 729.931966][ T9347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 729.938031][ T9347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 729.944081][ T9347] ? __fget_files+0x256/0x400 [ 729.948799][ T9347] security_file_ioctl+0x75/0xc0 [ 729.953800][ T9347] __x64_sys_ioctl+0xbb/0x220 [ 729.958533][ T9347] do_syscall_64+0xcd/0x250 [ 729.963070][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.969014][ T9347] RIP: 0033:0x7f22abb79e79 [ 729.973455][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.993100][ T9347] RSP: 002b:00007f22ac93c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.996227][ T5241] Bluetooth: hci4: command tx timeout [ 730.001522][ T9347] RAX: ffffffffffffffda RBX: 00007f22abd15f80 RCX: 00007f22abb79e79 [ 730.001550][ T9347] RDX: 0000000020000040 RSI: 000000000000540f RDI: 0000000000000003 [ 730.001573][ T9347] RBP: 00007f22ac93c090 R08: 0000000000000000 R09: 0000000000000000 [ 730.030915][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.038951][ T9347] R13: 0000000000000000 R14: 00007f22abd15f80 R15: 00007ffe44d101f8 [ 730.046967][ T9347] [ 730.068401][ T9347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 730.346157][ T30] audit: type=1400 audit(2000000416.100:415): avc: denied { write } for pid=9351 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 731.547784][ T30] audit: type=1400 audit(2000000417.340:416): avc: denied { ioctl } for pid=9368 comm="syz.0.671" path="socket:[37821]" dev="sockfs" ino=37821 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 732.079183][ T5241] Bluetooth: hci4: command tx timeout [ 732.171432][ T6320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.532707][ T6320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.948507][ T9391] sctp: [Deprecated]: syz.0.674 (pid 9391) Use of int in maxseg socket option. [ 733.948507][ T9391] Use struct sctp_assoc_value instead [ 734.156517][ T5241] Bluetooth: hci4: command tx timeout [ 734.192142][ T30] audit: type=1400 audit(2000000419.980:417): avc: denied { bind } for pid=9389 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 734.197910][ T6320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.246297][ T30] audit: type=1400 audit(2000000420.020:418): avc: denied { write } for pid=9389 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 734.294654][ T9335] chnl_net:caif_netlink_parms(): no params data found [ 734.420740][ T6320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.836440][ T9389] delete_channel: no stack [ 734.874053][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.708812][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.756762][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.764132][ T9335] bridge_slave_0: entered allmulticast mode [ 742.810591][ T9335] bridge_slave_0: entered promiscuous mode [ 742.996217][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.003525][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.069070][ T9335] bridge_slave_1: entered allmulticast mode [ 743.149754][ T9335] bridge_slave_1: entered promiscuous mode [ 743.422752][ T6320] bridge_slave_1: left allmulticast mode [ 743.446111][ T6320] bridge_slave_1: left promiscuous mode [ 743.452031][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.573313][ T6320] bridge_slave_0: left allmulticast mode [ 743.617508][ T6320] bridge_slave_0: left promiscuous mode [ 743.623458][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.314975][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 745.339166][ T5228] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 745.349986][ T5228] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 745.384865][ T5228] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 745.393815][ T5228] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 745.406392][ T5228] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 745.635516][ T30] audit: type=1400 audit(2000000431.430:419): avc: denied { listen } for pid=9414 comm="syz.0.678" lport=44500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 745.958965][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 745.997727][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 746.011576][ T5241] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 746.020965][ T5241] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 746.030407][ T5241] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 746.038425][ T5241] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 747.189395][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.230250][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.272341][ T6320] bond0 (unregistering): Released all slaves [ 747.417772][ T9124] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.456954][ T9124] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 747.517873][ T5241] Bluetooth: hci5: command tx timeout [ 747.579502][ T9124] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 747.817952][ T9335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.037210][ T9124] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 748.076208][ T5241] Bluetooth: hci1: command tx timeout [ 748.161369][ T9335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.679146][ T6320] hsr_slave_0: left promiscuous mode [ 748.744125][ T6320] hsr_slave_1: left promiscuous mode [ 748.753211][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.782250][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.807897][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.815408][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.239130][ T6320] veth1_macvtap: left promiscuous mode [ 749.247884][ T6320] veth0_macvtap: left promiscuous mode [ 749.253747][ T6320] veth1_vlan: left promiscuous mode [ 749.688429][ T5241] Bluetooth: hci5: command tx timeout [ 750.157083][ T5241] Bluetooth: hci1: command tx timeout [ 750.346224][ T6320] veth0_vlan: left promiscuous mode [ 751.756725][ T5241] Bluetooth: hci5: command tx timeout [ 752.246404][ T5241] Bluetooth: hci1: command tx timeout [ 752.705666][ T5228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.723934][ T5228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 752.734674][ T5228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 752.763827][ T5228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 752.781640][ T5228] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 752.793935][ T5228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 752.980824][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.987881][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.482665][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 753.554641][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 753.837201][ T5241] Bluetooth: hci5: command tx timeout [ 754.259383][ T9335] team0: Port device team_slave_0 added [ 754.271735][ T9335] team0: Port device team_slave_1 added [ 754.326628][ T5241] Bluetooth: hci1: command tx timeout [ 754.646311][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.653317][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.711786][ T9335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.773673][ T9335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.780937][ T9335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.868673][ T9335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.956534][ T5241] Bluetooth: hci6: command tx timeout [ 755.038951][ T5241] Bluetooth: hci0: command 0x0406 tx timeout [ 755.544051][ T9335] hsr_slave_0: entered promiscuous mode [ 755.557340][ T9335] hsr_slave_1: entered promiscuous mode [ 755.570936][ T9335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.585630][ T30] audit: type=1400 audit(2000000441.380:420): avc: denied { bind } for pid=9460 comm="syz.0.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 755.596247][ T9335] Cannot create hsr debugfs directory [ 756.782276][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 756.820669][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 756.849420][ T9478] hfs: invalid gid -1 [ 756.861687][ T9478] hfs: unable to parse mount options [ 757.036122][ T5228] Bluetooth: hci6: command tx timeout [ 757.802154][ T9419] chnl_net:caif_netlink_parms(): no params data found [ 758.311256][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.320246][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.327866][ T9409] bridge_slave_0: entered allmulticast mode [ 758.336863][ T9409] bridge_slave_0: entered promiscuous mode [ 758.402826][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.430299][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.459885][ T9409] bridge_slave_1: entered allmulticast mode [ 758.487471][ T9409] bridge_slave_1: entered promiscuous mode [ 758.537918][ T9457] chnl_net:caif_netlink_parms(): no params data found [ 758.813705][ T9419] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.832350][ T9419] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.846543][ T9419] bridge_slave_0: entered allmulticast mode [ 758.865560][ T9419] bridge_slave_0: entered promiscuous mode [ 758.899040][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.939310][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.086439][ T9419] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.099578][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.107750][ T9419] bridge_slave_1: entered allmulticast mode [ 759.115646][ T9419] bridge_slave_1: entered promiscuous mode [ 759.122672][ T5228] Bluetooth: hci6: command tx timeout [ 759.195282][ T9518] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.687'. [ 759.964608][ T9409] team0: Port device team_slave_0 added [ 759.977958][ T9409] team0: Port device team_slave_1 added [ 760.120469][ T6320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.155040][ T9419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.271749][ T9419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.428384][ T6320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.553568][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.574290][ T9457] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.581829][ T9457] bridge_slave_0: entered allmulticast mode [ 760.592370][ T9457] bridge_slave_0: entered promiscuous mode [ 760.689452][ T9419] team0: Port device team_slave_0 added [ 760.724988][ T6320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.746196][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.753736][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.795442][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.817193][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.836280][ T9457] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.843816][ T9457] bridge_slave_1: entered allmulticast mode [ 760.858360][ T9457] bridge_slave_1: entered promiscuous mode [ 760.887762][ T9335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 760.957117][ T9419] team0: Port device team_slave_1 added [ 761.054814][ T6320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.177791][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.184776][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.216897][ T5228] Bluetooth: hci6: command tx timeout [ 761.222504][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.371973][ T9335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 761.412539][ T9335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 761.754021][ T9335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 761.825448][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.839211][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.880141][ T9419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.908449][ T9419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.915465][ T9419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.957879][ T9419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.043899][ T9457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.082986][ T9457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.354070][ T9409] hsr_slave_0: entered promiscuous mode [ 762.382158][ T9409] hsr_slave_1: entered promiscuous mode [ 762.414915][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.440833][ T9409] Cannot create hsr debugfs directory [ 762.540909][ T9457] team0: Port device team_slave_0 added [ 762.635309][ T9457] team0: Port device team_slave_1 added [ 762.835444][ T9419] hsr_slave_0: entered promiscuous mode [ 762.913269][ T9419] hsr_slave_1: entered promiscuous mode [ 762.960710][ T9419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.986185][ T9419] Cannot create hsr debugfs directory [ 763.174559][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.195010][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.244377][ T9457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.420489][ T9457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.428311][ T1848] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 763.447161][ T9457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.488497][ T9457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.646296][ T1848] usb 1-1: Using ep0 maxpacket: 8 [ 763.654242][ T1848] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 763.662875][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.686545][ T1848] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 763.716226][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 763.745270][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 763.768478][ T1848] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 763.780929][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.806801][ T1848] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 763.845967][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 763.861790][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 763.876600][ T1848] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 763.884142][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.908134][ T1848] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 763.924292][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 763.947806][ T1848] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 763.977287][ T1848] usb 1-1: string descriptor 0 read error: -22 [ 763.984128][ T1848] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 764.006259][ T1848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.077140][ T1848] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 764.161726][ T9457] hsr_slave_0: entered promiscuous mode [ 764.199450][ T9457] hsr_slave_1: entered promiscuous mode [ 764.210663][ T9457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.221141][ T9457] Cannot create hsr debugfs directory [ 764.552793][ T46] usb 1-1: USB disconnect, device number 23 [ 765.156911][ T5673] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 765.373824][ T5673] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 765.387352][ T6320] bridge_slave_1: left allmulticast mode [ 765.393076][ T6320] bridge_slave_1: left promiscuous mode [ 765.398901][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 765.413721][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.422109][ T5673] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.437331][ T6320] bridge_slave_0: left allmulticast mode [ 765.443038][ T6320] bridge_slave_0: left promiscuous mode [ 765.455834][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.465821][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.479392][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 765.493167][ T5673] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 765.494679][ T6320] bridge_slave_1: left allmulticast mode [ 765.507875][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 765.516438][ T6320] bridge_slave_1: left promiscuous mode [ 765.534919][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.535945][ T5673] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.553890][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.565380][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 765.579257][ T6320] bridge_slave_0: left allmulticast mode [ 765.580422][ T5673] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 765.584947][ T6320] bridge_slave_0: left promiscuous mode [ 765.606776][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 765.614885][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.636068][ T5673] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.647984][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.662877][ T5673] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 765.674994][ T6320] bridge_slave_1: left allmulticast mode [ 765.683048][ T6320] bridge_slave_1: left promiscuous mode [ 765.689779][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.699916][ T5673] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 765.719557][ T6320] bridge_slave_0: left allmulticast mode [ 765.720713][ T5673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.725276][ T6320] bridge_slave_0: left promiscuous mode [ 765.744882][ T5673] usb 1-1: Product: syz [ 765.749924][ T5673] usb 1-1: Manufacturer: syz [ 765.755316][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.766465][ T5673] usb 1-1: SerialNumber: syz [ 766.070929][ T5673] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 766.101344][ T5673] usb 1-1: USB disconnect, device number 24 [ 767.009337][ T9590] FAULT_INJECTION: forcing a failure. [ 767.009337][ T9590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.022747][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: syz.0.692 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 767.033479][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 767.043571][ T9590] Call Trace: [ 767.046874][ T9590] [ 767.049828][ T9590] dump_stack_lvl+0x16c/0x1f0 [ 767.054548][ T9590] should_fail_ex+0x497/0x5b0 [ 767.059263][ T9590] _copy_from_user+0x30/0xf0 [ 767.063908][ T9590] __sys_bpf+0x21c/0x4a00 [ 767.068293][ T9590] ? ksys_write+0x21c/0x260 [ 767.072837][ T9590] ? reacquire_held_locks+0x4a0/0x4c0 [ 767.078284][ T9590] ? __pfx___sys_bpf+0x10/0x10 [ 767.083091][ T9590] ? vfs_write+0x14d/0x1140 [ 767.087640][ T9590] ? __mutex_unlock_slowpath+0x164/0x650 [ 767.093325][ T9590] ? fput+0x32/0x390 [ 767.097254][ T9590] ? ksys_write+0x1ab/0x260 [ 767.101792][ T9590] ? __pfx_ksys_write+0x10/0x10 [ 767.106681][ T9590] __x64_sys_bpf+0x78/0xc0 [ 767.111159][ T9590] ? lockdep_hardirqs_on+0x7c/0x110 [ 767.116490][ T9590] do_syscall_64+0xcd/0x250 [ 767.121044][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.126989][ T9590] RIP: 0033:0x7fb090f79e79 [ 767.131446][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.151130][ T9590] RSP: 002b:00007fb091db9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 767.159579][ T9590] RAX: ffffffffffffffda RBX: 00007fb091116058 RCX: 00007fb090f79e79 [ 767.167583][ T9590] RDX: 000000000000004c RSI: 0000000020000400 RDI: 000000000000000a [ 767.175591][ T9590] RBP: 00007fb091db9090 R08: 0000000000000000 R09: 0000000000000000 [ 767.183594][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.191595][ T9590] R13: 0000000000000000 R14: 00007fb091116058 R15: 00007ffcf108e708 [ 767.199604][ T9590] [ 767.264313][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.298142][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.324126][ T6320] bond0 (unregistering): Released all slaves [ 767.646139][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.673044][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.702120][ T6320] bond0 (unregistering): Released all slaves [ 768.083666][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.121368][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.143361][ T6320] bond0 (unregistering): Released all slaves [ 768.246781][ T9593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 768.568232][ T9335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.993167][ T9335] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.259018][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.266313][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.681917][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.689339][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.866028][ T6320] hsr_slave_0: left promiscuous mode [ 770.885392][ T6320] hsr_slave_1: left promiscuous mode [ 770.910177][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.933402][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.972910][ T6320] hsr_slave_0: left promiscuous mode [ 770.987666][ T6320] hsr_slave_1: left promiscuous mode [ 771.010482][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.027515][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.048685][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.068445][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.095412][ T6320] hsr_slave_0: left promiscuous mode [ 771.102604][ T6320] hsr_slave_1: left promiscuous mode [ 771.114913][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.138010][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.221009][ T6320] veth1_macvtap: left promiscuous mode [ 771.227294][ T6320] veth0_macvtap: left promiscuous mode [ 771.233260][ T6320] veth1_vlan: left promiscuous mode [ 771.240018][ T6320] veth0_vlan: left promiscuous mode [ 772.459400][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 772.592209][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 773.477293][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 774.402287][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 774.483947][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 776.183824][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 776.235354][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 776.665997][ T9419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.697941][ T9419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.718207][ T9419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.744312][ T9419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 777.196755][ T9335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 777.214636][ T9335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.690896][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.891682][ T9419] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.014934][ T9335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.080111][ T4596] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.087429][ T4596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.101577][ T30] audit: type=1400 audit(2000000464.900:421): avc: denied { append } for pid=9668 comm="syz.0.698" name="001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 779.199731][ T9669] usb usb9: usbfs: process 9669 (syz.0.698) did not claim interface 0 before use [ 779.217850][ T9669] usb usb9: selecting invalid altsetting 21783 [ 779.240731][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.248083][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.488452][ T9674] QAT: Device 127 not found [ 779.633939][ T9335] veth0_vlan: entered promiscuous mode [ 779.685454][ T9409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 779.745767][ T9409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 779.793579][ T9335] veth1_vlan: entered promiscuous mode [ 779.815379][ T9409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 779.953001][ T9409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 780.161871][ T9457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 780.204186][ T9457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.251640][ T9457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.938433][ T9457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 781.096190][ T5673] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 782.585717][ T9335] veth0_macvtap: entered promiscuous mode [ 783.337832][ T9335] veth1_macvtap: entered promiscuous mode [ 783.550406][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.562430][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.579190][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.593338][ T9335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.608430][ T9335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.635281][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.669178][ T9419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.752994][ T9335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.783354][ T9335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.826244][ T9335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.842045][ T9335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.828288][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.181921][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.485446][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.492840][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.601101][ T9419] veth0_vlan: entered promiscuous mode [ 785.679392][ T4596] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.686782][ T4596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.762139][ T9707] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.701'. [ 786.312225][ T9419] veth1_vlan: entered promiscuous mode [ 786.930565][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.999578][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.012416][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.024497][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 787.035136][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 787.043992][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 787.052944][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 787.246582][ T3757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.323602][ T9419] veth0_macvtap: entered promiscuous mode [ 787.408345][ T9419] veth1_macvtap: entered promiscuous mode [ 787.521261][ T3757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.727991][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.742292][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.989437][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.212720][ T3757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.310943][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.318310][ T9083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.337035][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.354125][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.365061][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.375781][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.389130][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.489579][ T3757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.561272][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.568671][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.704640][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.730297][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.763943][ T9419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.874865][ T9419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.549691][ T5228] Bluetooth: hci2: command tx timeout [ 789.575383][ T9419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.826871][ T9419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.845136][ T9419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.879627][ T9419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.896035][ T9419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.084909][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.438105][ T3757] bridge_slave_1: left allmulticast mode [ 790.444109][ T3757] bridge_slave_1: left promiscuous mode [ 790.451451][ T3757] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.465522][ T3757] bridge_slave_0: left allmulticast mode [ 790.472049][ T3757] bridge_slave_0: left promiscuous mode [ 790.478839][ T3757] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.722155][ T30] audit: type=1326 audit(2000000476.520:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.0.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb090f79e79 code=0x7fc00000 [ 791.200790][ T30] audit: type=1400 audit(2000000477.000:423): avc: denied { write } for pid=9764 comm="syz.0.705" name="ppp" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 791.296340][ T30] audit: type=1400 audit(2000000477.060:424): avc: denied { ioctl } for pid=9764 comm="syz.0.705" path="/dev/ppp" dev="devtmpfs" ino=695 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 791.600341][ T5228] Bluetooth: hci2: command tx timeout [ 791.960651][ T3757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.031265][ T3757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.064621][ T3757] bond0 (unregistering): Released all slaves [ 792.363336][ T9717] chnl_net:caif_netlink_parms(): no params data found [ 792.452538][ T3757] hsr_slave_0: left promiscuous mode [ 792.485391][ T3757] hsr_slave_1: left promiscuous mode [ 792.498141][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.523351][ T30] audit: type=1326 audit(2000000478.320:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9783 comm="syz.0.706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb090f79e79 code=0x0 [ 792.523414][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.574462][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.590152][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.633184][ T3757] veth1_macvtap: left promiscuous mode [ 792.652290][ T3757] veth0_macvtap: left promiscuous mode [ 792.658484][ T3757] veth1_vlan: left promiscuous mode [ 792.663893][ T3757] veth0_vlan: left promiscuous mode [ 793.319834][ T9787] Falling back ldisc for ttynull. [ 793.676262][ T5228] Bluetooth: hci2: command tx timeout [ 793.721895][ T3757] team0 (unregistering): Port device team_slave_1 removed [ 793.818443][ T5673] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 793.852656][ T3757] team0 (unregistering): Port device team_slave_0 removed [ 794.346037][ T5673] usb 1-1: device descriptor read/64, error -71 [ 794.641424][ T5673] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 794.830263][ T6320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.849979][ T6320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.905216][ T5673] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 794.914832][ T5673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.928769][ T5673] usb 1-1: Product: syz [ 794.933065][ T5673] usb 1-1: Manufacturer: syz [ 794.937806][ T5673] usb 1-1: SerialNumber: syz [ 794.963949][ T5673] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 795.142420][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.173784][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.188886][ T9717] bridge_slave_0: entered allmulticast mode [ 795.204170][ T8] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 795.215299][ T9717] bridge_slave_0: entered promiscuous mode [ 795.236750][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.244156][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.262129][ T9717] bridge_slave_1: entered allmulticast mode [ 795.279187][ T9717] bridge_slave_1: entered promiscuous mode [ 795.312700][ T4596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.368515][ T4596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.509648][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.564892][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.641979][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.768327][ T5228] Bluetooth: hci2: command tx timeout [ 795.867497][ T9717] team0: Port device team_slave_0 added [ 795.889576][ T9717] team0: Port device team_slave_1 added [ 796.326282][ T8] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 796.354341][ T8] ath9k_htc: Failed to initialize the device [ 799.059382][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 799.106103][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.113290][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.180296][ T5277] usb 1-1: USB disconnect, device number 27 [ 799.226009][ T9717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.245980][ T5278] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 799.436411][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 799.464495][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.474005][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.516123][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.542154][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.542245][ T5278] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 799.629461][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.691604][ T5278] usb 3-1: config 0 descriptor?? [ 799.704787][ T9717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.892750][ T9409] veth0_vlan: entered promiscuous mode [ 799.976673][ T5278] usbhid 3-1:0.0: can't add hid device: -71 [ 799.984482][ T5278] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 799.990530][ T9409] veth1_vlan: entered promiscuous mode [ 800.022530][ T5278] usb 3-1: USB disconnect, device number 21 [ 800.090529][ T9457] veth0_vlan: entered promiscuous mode [ 800.575087][ T9457] veth1_vlan: entered promiscuous mode [ 801.537297][ T9717] hsr_slave_0: entered promiscuous mode [ 801.544728][ T9717] hsr_slave_1: entered promiscuous mode [ 801.555416][ T9717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.563234][ T9717] Cannot create hsr debugfs directory [ 801.732157][ T9409] veth0_macvtap: entered promiscuous mode [ 801.854733][ T9409] veth1_macvtap: entered promiscuous mode [ 809.371832][ T9457] veth0_macvtap: entered promiscuous mode [ 809.510504][ T9457] veth1_macvtap: entered promiscuous mode [ 809.845424][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 809.889398][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 809.961177][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.066503][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.169470][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.330964][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.382552][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.449459][ T9457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.516052][ T9457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.555512][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.940067][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 810.955722][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 810.966296][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 810.980682][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 810.989056][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 810.996656][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 811.504201][ T30] audit: type=1400 audit(2000000497.270:426): avc: denied { execute } for pid=9875 comm="syz.2.717" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 812.739605][ T5228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 812.753725][ T5228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 812.784651][ T5228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 812.809280][ T5228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 812.836695][ T5228] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 812.846840][ T5228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 813.024352][ T5673] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 813.123886][ T5241] Bluetooth: hci3: command tx timeout [ 813.217838][ T5673] usb 3-1: Using ep0 maxpacket: 8 [ 813.227531][ T5673] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.235145][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 813.249140][ T5673] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.261676][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 813.273531][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 813.313599][ T5673] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.329634][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 813.375250][ T5673] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.456339][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 813.534251][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 813.583016][ T5673] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 813.606432][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 813.618940][ T5673] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 813.632749][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 813.648068][ T5673] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 813.678396][ T5673] usb 3-1: string descriptor 0 read error: -22 [ 813.729787][ T5673] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 813.745625][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.404355][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.410852][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.451175][ T5673] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 814.667775][ T9885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.703071][ T9885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.722452][ T8] usb 3-1: USB disconnect, device number 22 [ 814.876683][ T5241] Bluetooth: hci4: command tx timeout [ 814.963294][ T9717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 814.978089][ T9717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 815.128598][ T9717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 815.201088][ T5241] Bluetooth: hci3: command tx timeout [ 815.213299][ T9717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 815.218266][ T9904] Bluetooth: MGMT ver 1.23 [ 815.272923][ T6320] bridge_slave_1: left allmulticast mode [ 815.286106][ T6320] bridge_slave_1: left promiscuous mode [ 815.304125][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.351535][ T6320] bridge_slave_0: left allmulticast mode [ 815.386066][ T6320] bridge_slave_0: left promiscuous mode [ 815.392094][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.429985][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.482140][ T9920] cgroup: fork rejected by pids controller in /syz0 [ 816.491419][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.527157][ T6320] bond0 (unregistering): Released all slaves [ 816.788385][ T9870] chnl_net:caif_netlink_parms(): no params data found [ 816.862913][ T6320] hsr_slave_0: left promiscuous mode [ 816.870026][ T6320] hsr_slave_1: left promiscuous mode [ 816.879576][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.892816][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.927755][ T6320] veth1_macvtap: left promiscuous mode [ 816.933443][ T6320] veth0_macvtap: left promiscuous mode [ 816.940759][ T6320] veth1_vlan: left promiscuous mode [ 816.947709][ T6320] veth0_vlan: left promiscuous mode [ 816.958607][ T5241] Bluetooth: hci4: command tx timeout [ 817.294535][ T5241] Bluetooth: hci3: command tx timeout [ 817.908393][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 817.929686][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 817.955455][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 817.990809][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 818.004712][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 818.014075][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 818.121986][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 818.194570][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 819.057114][ T5241] Bluetooth: hci4: command tx timeout [ 819.356029][ T5241] Bluetooth: hci3: command tx timeout [ 819.573630][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.590706][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.612294][ T9870] bridge_slave_0: entered allmulticast mode [ 819.621061][ T9870] bridge_slave_0: entered promiscuous mode [ 819.669179][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 819.750199][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.767426][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.774697][ T9870] bridge_slave_1: entered allmulticast mode [ 819.805692][ T9870] bridge_slave_1: entered promiscuous mode [ 819.994990][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.086234][ T5241] Bluetooth: hci0: command tx timeout [ 820.124549][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.264635][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 820.281504][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 820.292408][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.318711][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.334492][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 820.344272][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.359463][ T9870] team0: Port device team_slave_0 added [ 820.488005][ T9870] team0: Port device team_slave_1 added [ 820.538882][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.546302][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.553549][ T9886] bridge_slave_0: entered allmulticast mode [ 820.563837][ T9886] bridge_slave_0: entered promiscuous mode [ 820.652263][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.659941][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.687240][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.701696][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.724213][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.731674][ T9886] bridge_slave_1: entered allmulticast mode [ 820.739625][ T9886] bridge_slave_1: entered promiscuous mode [ 820.788707][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.795727][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.858741][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.917380][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.938572][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.062617][ T9924] chnl_net:caif_netlink_parms(): no params data found [ 821.092090][ T9886] team0: Port device team_slave_0 added [ 821.116231][ T5228] Bluetooth: hci4: command tx timeout [ 821.159949][ T9870] hsr_slave_0: entered promiscuous mode [ 821.170030][ T9870] hsr_slave_1: entered promiscuous mode [ 821.179061][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 821.187215][ T9870] Cannot create hsr debugfs directory [ 821.220091][ T9886] team0: Port device team_slave_1 added [ 821.272497][ T4596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.515925][ T4596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.538160][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.545182][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.571534][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.592921][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.600228][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.629009][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.707256][ T4596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.878282][ T4596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.979402][ T9886] hsr_slave_0: entered promiscuous mode [ 821.989536][ T9886] hsr_slave_1: entered promiscuous mode [ 821.997892][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.005526][ T9886] Cannot create hsr debugfs directory [ 822.057482][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.111281][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.125349][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.133367][ T9924] bridge_slave_0: entered allmulticast mode [ 822.141766][ T9924] bridge_slave_0: entered promiscuous mode [ 822.156039][ T5228] Bluetooth: hci0: command tx timeout [ 822.248761][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.257956][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.265534][ T9924] bridge_slave_1: entered allmulticast mode [ 822.274679][ T9924] bridge_slave_1: entered promiscuous mode [ 822.398387][ T5228] Bluetooth: hci1: command tx timeout [ 822.440033][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.633254][ T9924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.660714][ T9924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.772771][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.780130][ T9083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.890328][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 823.022947][ T4596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.084206][ T9924] team0: Port device team_slave_0 added [ 823.104511][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.111829][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.183621][ T9924] team0: Port device team_slave_1 added [ 823.281444][ T4596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.434022][ T4596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.540685][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.547933][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.574237][ T9924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.615043][ T4596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.695778][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.707839][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.734177][ T9924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.876252][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.883633][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.891680][ T9934] bridge_slave_0: entered allmulticast mode [ 823.904342][ T9934] bridge_slave_0: entered promiscuous mode [ 823.917022][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.924257][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.932326][ T9934] bridge_slave_1: entered allmulticast mode [ 823.944889][ T9934] bridge_slave_1: entered promiscuous mode [ 824.064537][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.085436][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.236160][ T5228] Bluetooth: hci0: command tx timeout [ 824.255128][ T9934] team0: Port device team_slave_0 added [ 824.268752][ T9934] team0: Port device team_slave_1 added [ 824.314559][ T9924] hsr_slave_0: entered promiscuous mode [ 824.323013][ T9924] hsr_slave_1: entered promiscuous mode [ 824.330320][ T9924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.342707][ T9924] Cannot create hsr debugfs directory [ 824.476790][ T5228] Bluetooth: hci1: command tx timeout [ 824.736597][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.743622][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.771533][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.787003][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.794026][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.823506][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.868108][ T4596] bridge_slave_1: left allmulticast mode [ 824.873933][ T4596] bridge_slave_1: left promiscuous mode [ 824.880196][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.891184][ T4596] bridge_slave_0: left allmulticast mode [ 824.897109][ T4596] bridge_slave_0: left promiscuous mode [ 824.903040][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.919722][ T4596] bridge_slave_1: left allmulticast mode [ 824.925547][ T4596] bridge_slave_1: left promiscuous mode [ 824.934785][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.945613][ T4596] bridge_slave_0: left allmulticast mode [ 824.952986][ T4596] bridge_slave_0: left promiscuous mode [ 824.960574][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.977424][ T4596] bridge_slave_1: left allmulticast mode [ 824.983177][ T4596] bridge_slave_1: left promiscuous mode [ 824.989258][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.001073][ T4596] bridge_slave_0: left allmulticast mode [ 825.007444][ T4596] bridge_slave_0: left promiscuous mode [ 825.013289][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.316175][ T5228] Bluetooth: hci0: command tx timeout [ 826.442432][ T4596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.455639][ T4596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.468629][ T4596] bond0 (unregistering): Released all slaves [ 826.562118][ T5228] Bluetooth: hci1: command tx timeout [ 826.683921][ T4596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.704319][ T4596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.727301][ T4596] bond0 (unregistering): Released all slaves [ 826.920663][ T4596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.933169][ T4596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.950096][ T4596] bond0 (unregistering): Released all slaves [ 827.364220][ T9934] hsr_slave_0: entered promiscuous mode [ 827.373833][ T9934] hsr_slave_1: entered promiscuous mode [ 827.391508][ T9934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 827.400688][ T9934] Cannot create hsr debugfs directory [ 827.723826][ T9886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 827.817844][ T9886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 827.831789][ T9886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 827.891215][ T9886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.144876][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.336398][ T4596] hsr_slave_0: left promiscuous mode [ 828.342882][ T4596] hsr_slave_1: left promiscuous mode [ 828.352280][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.361999][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.371694][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.379428][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.396225][ T4596] hsr_slave_0: left promiscuous mode [ 828.402627][ T4596] hsr_slave_1: left promiscuous mode [ 828.411314][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.419096][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.433818][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.441904][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.461196][ T4596] hsr_slave_0: left promiscuous mode [ 828.471532][ T4596] hsr_slave_1: left promiscuous mode [ 828.480977][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.489889][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.501700][ T4596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.509896][ T4596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.589386][ T4596] veth1_macvtap: left promiscuous mode [ 828.595017][ T4596] veth0_macvtap: left promiscuous mode [ 828.600926][ T4596] veth1_vlan: left promiscuous mode [ 828.606598][ T4596] veth0_vlan: left promiscuous mode [ 828.613900][ T4596] veth1_macvtap: left promiscuous mode [ 828.619752][ T4596] veth0_macvtap: left promiscuous mode [ 828.625529][ T4596] veth1_vlan: left promiscuous mode [ 828.632716][ T4596] veth0_vlan: left promiscuous mode [ 828.638170][ T5228] Bluetooth: hci1: command tx timeout [ 828.645356][ T4596] veth1_macvtap: left promiscuous mode [ 828.653169][ T4596] veth0_macvtap: left promiscuous mode [ 828.659374][ T4596] veth1_vlan: left promiscuous mode [ 828.664807][ T4596] veth0_vlan: left promiscuous mode [ 829.967263][ T4596] team0 (unregistering): Port device team_slave_1 removed [ 830.075199][ T4596] team0 (unregistering): Port device team_slave_0 removed [ 831.660093][ T4596] team0 (unregistering): Port device team_slave_1 removed [ 831.745062][ T4596] team0 (unregistering): Port device team_slave_0 removed [ 833.146177][ T4596] team0 (unregistering): Port device team_slave_1 removed [ 833.222400][ T4596] team0 (unregistering): Port device team_slave_0 removed [ 834.016179][ T9870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.147797][ T9870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.279136][ T9870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.394747][ T9870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 834.529043][ T9717] veth0_vlan: entered promiscuous mode [ 834.635753][ T9717] veth1_vlan: entered promiscuous mode [ 834.914911][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.971940][ T9717] veth0_macvtap: entered promiscuous mode [ 835.106219][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.164343][ T9717] veth1_macvtap: entered promiscuous mode [ 835.204283][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.211611][ T9083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.253622][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.260909][ T9083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.332870][ T9924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 835.520244][ T9924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 835.564076][ T9924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 835.598856][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.672212][ T9924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 835.739098][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.933331][ T9717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.949986][ T9717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.962253][ T9717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.975591][ T9717] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.635221][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 836.644105][ T2510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.703684][ T2510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.826274][ T9934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 836.840704][ T9083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.842551][ T9934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 836.851099][ T9083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.873735][ T9934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 836.892959][ T9934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 836.931739][ T9870] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.013864][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.056435][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.101326][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.108614][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.214508][ T2510] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.221782][ T2510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.413879][ T9924] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.615921][ T2510] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.623148][ T2510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.709918][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.717282][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.889475][ T9886] veth0_vlan: entered promiscuous mode [ 838.134430][ T9886] veth1_vlan: entered promiscuous mode [ 838.250441][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.400167][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.505276][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.512662][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.562374][ T9886] veth0_macvtap: entered promiscuous mode [ 838.631142][ T9886] veth1_macvtap: entered promiscuous mode [ 838.680894][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.688252][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.082153][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.097911][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.111695][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.201943][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.221102][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.239952][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.270094][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.343072][ T9886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.362668][ T9886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.376358][ T9886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.385158][ T9886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.454526][ T9924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.536007][ T1848] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 839.791444][ T1848] usb 4-1: string descriptor 0 read error: -22 [ 839.798142][ T1848] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 839.830234][ T1848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.859706][ T1848] usb 4-1: config 0 descriptor?? [ 839.881432][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.926993][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.023218][ T9924] veth0_vlan: entered promiscuous mode [ 840.129459][ T5363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.196823][ T5363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.212189][ T9924] veth1_vlan: entered promiscuous mode [ 840.582419][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.698222][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.724685][ T9870] veth0_vlan: entered promiscuous mode [ 840.773874][ T9924] veth0_macvtap: entered promiscuous mode [ 840.788734][ T1848] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 841.699963][ T1848] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 841.729659][ T1848] dib0700: firmware download failed at 7 with -22 [ 841.742717][ T9870] veth1_vlan: entered promiscuous mode [ 841.776789][ T1848] usb 4-1: USB disconnect, device number 15 [ 841.871695][ T9924] veth1_macvtap: entered promiscuous mode [ 842.018627][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.029999][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.042706][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.053478][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.072890][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.089103][ T9934] veth0_vlan: entered promiscuous mode [ 842.123857][T10028] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 842.136236][T10028] dvmrp1: linktype set to 821 [ 842.150528][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.186115][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.203533][ T9924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.222662][ T9924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.235758][ T9924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.268905][ T9870] veth0_macvtap: entered promiscuous mode [ 842.353509][ T9924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.396773][ T9924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.425902][ T9924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.434695][ T9924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.503503][ T30] audit: type=1400 audit(2000000528.300:427): avc: denied { connect } for pid=10035 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 842.521776][ T9934] veth1_vlan: entered promiscuous mode [ 842.552871][ T9870] veth1_macvtap: entered promiscuous mode [ 842.717806][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 842.810997][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.857075][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.877342][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.887091][ T1848] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 842.905977][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.928990][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.955888][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.986409][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.077527][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.101553][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.107297][ T1848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.116320][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.149629][ T1848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.164923][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.198298][ T1848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.210039][ T1848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.219310][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 843.249990][ T1848] usb 2-1: Product: 씱뷱䅮᩼袪픋㝱ᨪษ햜뗑⤙㪝댻톍ⲳ灲ⰺﱹ㎝࠴᥾鰴ྖ膞뿽ꘅ钲燀㱪듡똗⓱뚤䁛禘ㄇ첌㱹ᓖ豙XⅠ彏瞝ꟻᄰ໏ꊘ꺵易貰琫귛ພ탖᭰叵訡띋篥䊶ꤌĒឈ羚ᶙ䉌깤駡஌曵샨㮊뗜违ﾈ틢ᙫ♽瓦䣤讚ㅂ [ 843.295946][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.318267][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.324962][ T1848] usb 2-1: Manufacturer: ꅉ轌饖䚀虾ᄦ㴅ᓚ蓆ᚅ㰦䢺㾒萘ꂽ貳ڄ鋊蛊盵맏厹ᜌ䵕ꌯ謃咐镄堏ꠖ憡鐀㧱㷌茍╈萙嶵⼆乐ゴ [ 843.374704][ T1848] usb 2-1: SerialNumber: syz [ 843.470977][ T9934] veth0_macvtap: entered promiscuous mode [ 843.518210][ T5673] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 843.543051][ T9870] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.565305][ T9870] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.592466][ T9870] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.618034][ T9870] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.659956][ T9083] tipc: Subscription rejected, illegal request [ 843.662278][ T9934] veth1_macvtap: entered promiscuous mode [ 843.707712][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.715701][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.745099][ T1848] usb 2-1: 0:2 : does not exist [ 843.748390][ T5673] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.826170][ T5673] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 843.866667][ T1848] usb 2-1: USB disconnect, device number 14 [ 843.882660][ T5673] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 843.919421][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.974631][ T5673] usb 4-1: Product: 씱뷱䅮᩼袪픋㝱ᨪษ햜뗑⤙㪝댻톍ⲳ灲ⰺﱹ㎝࠴᥾鰴ྖ膞뿽ꘅ钲燀㱪듡똗⓱뚤䁛禘ㄇ첌㱹ᓖ豙XⅠ彏瞝ꟻᄰ໏ꊘ꺵易貰琫귛ພ탖᭰叵訡띋篥䊶ꤌĒឈ羚ᶙ䉌깤駡஌曵샨㮊뗜违ﾈ틢ᙫ♽瓦䣤讚ㅂ [ 844.055366][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.080607][ T5673] usb 4-1: Manufacturer: ꅉ轌饖䚀虾ᄦ㴅ᓚ蓆ᚅ㰦䢺㾒萘ꂽ貳ڄ鋊蛊盵맏厹ᜌ䵕ꌯ謃咐镄堏ꠖ憡鐀㧱㷌茍╈萙嶵⼆乐ゴ [ 844.094246][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.118417][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.118530][ T5673] usb 4-1: SerialNumber: syz [ 844.140583][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.153514][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.182002][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.202870][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.228661][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.253667][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.272102][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.328553][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.339549][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.355397][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.374604][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.385574][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.396102][ T62] tipc: Subscription rejected, illegal request [ 844.419187][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.456315][ T5673] usb 4-1: 0:2 : does not exist [ 844.461673][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.482209][ T9934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.500944][ T9934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.515439][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.536096][ T5673] usb 4-1: USB disconnect, device number 16 [ 844.622913][ T9956] udevd[9956]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.641982][ T9934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.671814][ T9934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.695996][ T9934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.711621][ T9934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.989265][ T9083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.042177][ T9083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.402931][ T9083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.526919][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.535049][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.384396][ T9083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.445641][T10070] loop7: detected capacity change from 0 to 16384 [ 850.351017][ T9083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.444861][ T30] audit: type=1400 audit(2000000536.240:428): avc: denied { watch } for pid=10081 comm="syz.4.747" path="/1/file1" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 850.467305][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.620875][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 850.632958][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 850.648917][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 850.673585][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 850.685688][ T9083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.712000][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 850.725164][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 850.792129][ T5363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.801608][ T5363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.957389][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.990574][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.766010][ T5232] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 851.867494][T10110] netlink: 'syz.4.752': attribute type 12 has an invalid length. [ 852.326029][ T5232] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 852.334276][ T5232] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 852.352612][ T5232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 852.385670][ T9083] bridge_slave_1: left allmulticast mode [ 852.418368][ T9083] bridge_slave_1: left promiscuous mode [ 852.482953][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.498816][ T5232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 852.499896][ T30] audit: type=1400 audit(2000000538.300:429): avc: denied { read } for pid=10112 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 852.556342][ T9083] bridge_slave_0: left allmulticast mode [ 852.562081][ T9083] bridge_slave_0: left promiscuous mode [ 852.610618][ T5232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 852.638792][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.655271][ T5232] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.665243][ T5232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.700614][ T5232] usb 4-1: config 0 descriptor?? [ 852.722899][T10101] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 852.799946][ T5228] Bluetooth: hci0: command tx timeout [ 853.161980][ T5232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 853.169779][ T5232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.171420][ T30] audit: type=1400 audit(2000000538.970:430): avc: denied { bind } for pid=10123 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 853.180655][ T5232] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 853.197215][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.238267][ T5232] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 853.338198][ T5232] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 853.562507][ T5308] usb 4-1: USB disconnect, device number 17 [ 854.602091][ T9083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.653073][ T9083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.697714][ T9083] bond0 (unregistering): Released all slaves [ 854.876533][ T5228] Bluetooth: hci0: command tx timeout [ 856.977003][ T5228] Bluetooth: hci0: command tx timeout [ 858.231457][ T9083] hsr_slave_0: left promiscuous mode [ 858.287667][ T9083] hsr_slave_1: left promiscuous mode [ 858.323355][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.364666][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.381202][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.393213][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.408135][T10215] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.792'. [ 858.495015][ T9083] veth1_macvtap: left promiscuous mode [ 858.522246][ T9083] veth0_macvtap: left promiscuous mode [ 858.522527][ T30] audit: type=1400 audit(2000000544.320:431): avc: denied { getopt } for pid=10217 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 858.543092][ T9083] veth1_vlan: left promiscuous mode [ 858.586378][ T9083] veth0_vlan: left promiscuous mode [ 859.050388][ T5228] Bluetooth: hci0: command tx timeout [ 860.770369][ T5277] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 860.855514][ T9083] team0 (unregistering): Port device team_slave_1 removed [ 860.947454][ T9083] team0 (unregistering): Port device team_slave_0 removed [ 860.997682][ T5277] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 861.008362][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.026566][ T5277] usb 4-1: Product: syz [ 861.030964][ T5277] usb 4-1: Manufacturer: syz [ 861.037082][ T5277] usb 4-1: SerialNumber: syz [ 861.057313][ T5277] usb 4-1: config 0 descriptor?? [ 861.203630][ T5308] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 861.288409][ T5277] hso 4-1:0.0: Failed to find INT IN ep [ 861.296761][ T5277] usb-storage 4-1:0.0: USB Mass Storage device detected [ 861.415927][ T5308] usb 1-1: Using ep0 maxpacket: 8 [ 861.457645][ T5308] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 861.470917][ T5308] usb 1-1: config 0 has no interface number 0 [ 861.478058][ T5308] usb 1-1: config 0 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.495382][ T5308] usb 1-1: config 0 interface 230 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 861.515724][ T5308] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 861.534029][ T5277] usb 4-1: USB disconnect, device number 18 [ 861.552653][ T5308] usb 1-1: config 0 interface 230 altsetting 0 endpoint 0x87 has invalid maxpacket 50274, setting to 1024 [ 861.586052][ T5308] usb 1-1: config 0 interface 230 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.607613][ T5308] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 861.624243][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.652706][ T5308] usb 1-1: config 0 descriptor?? [ 861.664376][T10247] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 861.695281][ T5308] metro_usb 1-1:0.230: Metrologic USB to Serial converter detected [ 861.715463][ T5308] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 861.905360][ T5308] usb 1-1: USB disconnect, device number 28 [ 861.957490][ T5308] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 861.971826][ T5308] metro_usb 1-1:0.230: device disconnected [ 862.037808][T10088] chnl_net:caif_netlink_parms(): no params data found [ 862.476175][ T5232] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 862.669306][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.689705][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.707573][T10088] bridge_slave_0: entered allmulticast mode [ 862.724884][ T5232] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 862.727048][T10088] bridge_slave_0: entered promiscuous mode [ 862.759899][ T5232] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 862.791614][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.795940][ T5232] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 862.802015][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.820074][T10088] bridge_slave_1: entered allmulticast mode [ 862.828076][ T5232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.837080][ T5277] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 862.853040][T10088] bridge_slave_1: entered promiscuous mode [ 862.856937][ T5232] usb 4-1: config 0 descriptor?? [ 862.904734][ T5232] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 863.015351][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.031007][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.078786][ T5277] usb 5-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 863.125546][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.166994][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.246108][ T5277] usb 5-1: config 0 descriptor?? [ 863.692364][T10088] team0: Port device team_slave_0 added [ 863.783507][T10088] team0: Port device team_slave_1 added [ 864.012625][ T5277] aquacomputer_d5next 0003:0C70:F001.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.4-1/input0 [ 864.264105][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.303384][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.425510][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.463309][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.472731][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.489464][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.521703][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.533344][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.793672][T10088] hsr_slave_0: entered promiscuous mode [ 864.807906][ T5277] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 864.820576][T10088] hsr_slave_1: entered promiscuous mode [ 865.019356][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.039570][ T5277] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 865.058919][T10290] syzkaller0: entered promiscuous mode [ 865.065893][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.070017][T10290] syzkaller0: entered allmulticast mode [ 865.093022][ T5277] usb 1-1: config 0 descriptor?? [ 865.275326][ T30] audit: type=1400 audit(2000000551.060:432): avc: denied { relabelfrom } for pid=10288 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 865.280246][ T25] usb 4-1: USB disconnect, device number 19 [ 865.394541][ T30] audit: type=1400 audit(2000000551.100:433): avc: denied { relabelto } for pid=10288 comm="syz.1.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 865.624568][ T5673] usb 5-1: USB disconnect, device number 14 [ 865.640347][ T5277] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 865.710035][ T5277] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input8 [ 866.025989][ T30] audit: type=1400 audit(2000000551.810:434): avc: denied { ioctl } for pid=4655 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2579 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 866.101997][ T5277] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 866.176407][ T5277] usb 1-1: USB disconnect, device number 29 [ 870.641161][T10314] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.820'. [ 871.627751][ T30] audit: type=1400 audit(2000000557.420:435): avc: denied { setopt } for pid=10340 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 871.697747][ T30] audit: type=1400 audit(2000000557.460:436): avc: denied { listen } for pid=10340 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 872.579633][T10365] syz.3.836 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 872.786542][ T5673] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 872.916481][T10088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 872.938591][T10088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 872.984725][T10088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 873.002477][T10088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 873.012750][ T5673] usb 5-1: Using ep0 maxpacket: 32 [ 873.026173][ T5673] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 873.036588][ T5673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.061907][ T5673] usb 5-1: Product: syz [ 873.075889][ T5673] usb 5-1: Manufacturer: syz [ 873.080584][ T5673] usb 5-1: SerialNumber: syz [ 873.417291][ T5277] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 873.437726][ T5673] usb 5-1: config 0 descriptor?? [ 873.461402][ T5673] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 873.606052][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 873.754537][ T5277] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 873.978231][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.019932][ T5673] gspca_ov534_9: reg_w failed -110 [ 874.056562][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.153262][ T5277] usb 4-1: config 0 descriptor?? [ 874.213748][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.247257][ T5277] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 874.298228][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.305660][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.400416][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.407761][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.696095][ T5673] gspca_ov534_9: Unknown sensor 0000 [ 874.697123][ T5673] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 874.826890][ T5277] gspca_vc032x: reg_r err -110 [ 874.922120][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.032617][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.361511][ T5673] usb 5-1: USB disconnect, device number 15 [ 875.368026][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.425716][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.472759][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.528596][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.554669][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.580773][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.615658][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.656465][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.683076][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.699234][ T30] audit: type=1400 audit(2000000561.500:437): avc: denied { shutdown } for pid=10394 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 875.715952][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.746336][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.767101][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.772471][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 875.888003][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.895083][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.140631][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 876.147419][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 876.153773][ T5277] gspca_vc032x: I2c Bus Busy Wait 00 [ 876.161384][ T5277] gspca_vc032x: Unknown sensor... [ 876.167504][ T5277] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 876.284935][ T30] audit: type=1400 audit(2000000562.070:438): avc: denied { call } for pid=10397 comm="syz.1.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 877.107205][ T5349] usb 4-1: USB disconnect, device number 20 [ 877.302924][T10415] usb usb8: usbfs: process 10415 (syz.0.846) did not claim interface 0 before use [ 879.513270][ T30] audit: type=1400 audit(2000000565.310:439): avc: denied { ioctl } for pid=10423 comm="syz.0.850" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 879.605092][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.128932][T10088] veth0_vlan: entered promiscuous mode [ 880.722652][T10088] veth1_vlan: entered promiscuous mode [ 881.046558][T10088] veth0_macvtap: entered promiscuous mode [ 881.129823][T10088] veth1_macvtap: entered promiscuous mode [ 881.273790][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.305234][ T30] audit: type=1400 audit(2000000567.090:440): avc: denied { read } for pid=10456 comm="syz.4.859" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 881.338010][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.361523][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.379553][ T30] audit: type=1400 audit(2000000567.090:441): avc: denied { open } for pid=10456 comm="syz.4.859" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 881.406243][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.423447][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.463776][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.476265][ T30] audit: type=1400 audit(2000000567.100:442): avc: denied { map } for pid=10456 comm="syz.4.859" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 881.514073][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 881.573433][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.589176][ T30] audit: type=1400 audit(2000000567.150:443): avc: denied { write } for pid=10458 comm="syz.1.858" name="nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 881.618934][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.753429][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.807593][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.832508][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.885225][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.916820][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.948536][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.972683][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.997661][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 882.031204][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.312485][T10088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.363073][T10088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.426847][T10088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.435646][T10088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.062831][ T9083] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.464775][ T9083] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.632292][ T9083] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.716564][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 883.750169][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.775852][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.837664][ T9083] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.944753][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 883.971360][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.001392][ T25] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 884.031148][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.058026][ T25] usb 5-1: Product: syz [ 884.062312][ T25] usb 5-1: Manufacturer: syz [ 884.091353][ T25] usb 5-1: SerialNumber: syz [ 884.123085][ T25] usb 5-1: config 0 descriptor?? [ 884.130974][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.193050][ T25] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 884.206169][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.236600][ T25] usb 5-1: selecting invalid altsetting 1 [ 884.453558][ T25] gspca_stk014: init reg: 0x00 [ 884.467374][ T25] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 884.571774][ T9083] bridge_slave_1: left allmulticast mode [ 884.596828][ T9083] bridge_slave_1: left promiscuous mode [ 884.602806][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.669860][ T46] usb 5-1: USB disconnect, device number 16 [ 884.677630][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 884.706345][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 884.706384][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 884.728516][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 884.742339][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 884.761594][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 884.778945][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 884.785564][ T9083] bridge_slave_0: left allmulticast mode [ 884.799984][ T9083] bridge_slave_0: left promiscuous mode [ 884.818054][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.251406][ T30] audit: type=1400 audit(2000000571.050:444): avc: denied { name_bind } for pid=10517 comm="syz.1.871" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 886.411232][ T9083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.425657][ T9083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.444308][ T9083] bond0 (unregistering): Released all slaves [ 886.626703][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.871'. [ 886.699352][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.719222][T10550] syz.4.876 (10550): attempted to duplicate a private mapping with mremap. This is not supported. [ 886.888043][ T5228] Bluetooth: hci2: command tx timeout [ 887.454804][ T9083] hsr_slave_0: left promiscuous mode [ 887.539269][ T9083] hsr_slave_1: left promiscuous mode [ 887.568768][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.586838][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 887.632666][ T9083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.661367][ T9083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.825438][ T9083] veth1_macvtap: left promiscuous mode [ 887.856839][ T9083] veth0_macvtap: left promiscuous mode [ 887.880098][ T9083] veth1_vlan: left promiscuous mode [ 887.902413][ T9083] veth0_vlan: left promiscuous mode [ 888.103093][ T30] audit: type=1400 audit(2000000573.890:445): avc: denied { getopt } for pid=10562 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 888.148691][ T1848] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 888.341298][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.386246][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.406390][ T1848] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 888.439856][ T1848] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 888.474863][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.515043][ T1848] usb 5-1: config 0 descriptor?? [ 888.746249][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.774374][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.822921][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.838427][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.867861][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.878563][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 888.886623][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.955955][ T5241] Bluetooth: hci2: command tx timeout [ 888.972436][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.008646][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.062353][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.088439][ T1848] usbhid 5-1:0.0: can't add hid device: -71 [ 889.107521][ T1848] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 889.128582][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 889.166166][ T1848] usb 5-1: USB disconnect, device number 17 [ 889.650704][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 889.708952][ T1848] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 889.781676][ T9083] team0 (unregistering): Port device team_slave_1 removed [ 889.845930][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 889.854454][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 889.863929][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.874517][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.884395][ T9083] team0 (unregistering): Port device team_slave_0 removed [ 889.902169][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.907360][ T1848] usb 5-1: Using ep0 maxpacket: 8 [ 889.924108][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.929087][ T1848] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 889.946451][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 889.955576][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.958531][ T1848] usb 5-1: config 0 has no interface number 0 [ 889.986021][ T1848] usb 5-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 890.021709][ T1848] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 890.032018][ T1848] usb 5-1: config 0 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 890.042209][ T1848] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 890.054255][ T1848] usb 5-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 890.070921][ T1848] usb 5-1: config 0 interface 1 has no altsetting 0 [ 890.081273][ T1848] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 890.114257][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.126818][ T1848] usb 5-1: config 0 descriptor?? [ 890.145921][ T1848] hso 5-1:0.1: Failed to find BULK OUT ep [ 890.229702][ T8] usb 2-1: usb_control_msg returned -71 [ 890.235425][ T8] usbtmc 2-1:16.0: can't read capabilities [ 890.294686][ T8] usb 2-1: USB disconnect, device number 15 [ 890.390499][ T5277] usb 5-1: USB disconnect, device number 18 [ 890.966198][ T5241] Bluetooth: hci0: command tx timeout [ 891.035938][ T5241] Bluetooth: hci2: command tx timeout [ 891.234238][ T30] audit: type=1400 audit(2000000577.030:446): avc: denied { mounton } for pid=10595 comm="syz.4.888" path="/41/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 891.305952][ T30] audit: type=1400 audit(2000000577.070:447): avc: denied { unmount } for pid=10595 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 891.325720][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.395739][T10511] chnl_net:caif_netlink_parms(): no params data found [ 893.097576][ T5241] Bluetooth: hci0: command tx timeout [ 893.116774][ T5228] Bluetooth: hci2: command tx timeout [ 894.453951][T10648] netlink: zone id is out of range [ 894.514005][T10648] netlink: zone id is out of range [ 894.622701][T10651] syz.1.898 uses obsolete (PF_INET,SOCK_PACKET) [ 894.666694][T10511] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.703120][T10648] netlink: set zone limit has 4 unknown bytes [ 894.734504][T10511] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.786205][T10511] bridge_slave_0: entered allmulticast mode [ 894.796606][T10511] bridge_slave_0: entered promiscuous mode [ 894.817302][T10511] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.824867][T10511] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.832568][T10511] bridge_slave_1: entered allmulticast mode [ 894.844343][T10511] bridge_slave_1: entered promiscuous mode [ 895.099820][T10511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.137243][ T30] audit: type=1400 audit(2000000580.940:448): avc: denied { name_bind } for pid=10654 comm="syz.0.900" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 895.157984][ C1] vkms_vblank_simulate: vblank timer overrun [ 895.168250][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 895.173614][T10583] chnl_net:caif_netlink_parms(): no params data found [ 895.202177][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 895.206004][ T5241] Bluetooth: hci0: command tx timeout [ 895.215578][ T30] audit: type=1400 audit(2000000580.940:449): avc: denied { listen } for pid=10654 comm="syz.0.900" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 895.292923][ T30] audit: type=1400 audit(2000000581.070:450): avc: denied { write } for pid=10654 comm="syz.0.900" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 895.371999][T10511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.637117][T10511] team0: Port device team_slave_0 added [ 895.974729][ T9083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.080113][T10511] team0: Port device team_slave_1 added [ 896.186048][ T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 896.386294][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 896.394815][ T25] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 896.408872][ T25] usb 1-1: config 0 has no interface number 0 [ 896.450143][ T25] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 896.480179][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.522864][ T25] usb 1-1: Product: syz [ 896.527423][ T25] usb 1-1: Manufacturer: syz [ 896.532069][ T25] usb 1-1: SerialNumber: syz [ 896.565470][ T9083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.609224][ T25] usb 1-1: config 0 descriptor?? [ 896.634911][T10676] netlink: 44 bytes leftover after parsing attributes in process `syz.4.906'. [ 896.753143][T10511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.760897][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.791365][T10511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.925410][ T25] radio-si470x 1-1:0.35: this is not a si470x device. [ 897.077082][ T9083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.124909][T10511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.130216][ T25] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 897.179596][ T25] usb 1-1: USB disconnect, device number 30 [ 897.190454][T10511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.216504][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.276500][ T5241] Bluetooth: hci0: command tx timeout [ 897.336325][T10511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.379101][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.390085][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.399032][T10583] bridge_slave_0: entered allmulticast mode [ 897.409956][T10583] bridge_slave_0: entered promiscuous mode [ 897.484466][ T9083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.735088][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.794237][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.816325][T10583] bridge_slave_1: entered allmulticast mode [ 897.844550][T10583] bridge_slave_1: entered promiscuous mode [ 897.954820][T10511] hsr_slave_0: entered promiscuous mode [ 898.011764][T10511] hsr_slave_1: entered promiscuous mode [ 898.044380][T10511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.056062][T10511] Cannot create hsr debugfs directory [ 898.405150][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.621333][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.925936][ T1848] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 899.156449][ T1848] usb 5-1: Using ep0 maxpacket: 32 [ 899.171213][ T1848] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.183687][ T1848] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.223011][ T1848] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 899.255436][ T1848] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 899.265219][ T1848] usb 5-1: Product: syz [ 899.292536][ T1848] usb 5-1: Manufacturer: syz [ 899.314613][T10583] team0: Port device team_slave_0 added [ 899.349762][ T1848] hub 5-1:4.0: USB hub found [ 899.397192][ T9083] bridge_slave_1: left allmulticast mode [ 899.402942][ T9083] bridge_slave_1: left promiscuous mode [ 899.427709][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.446725][ T9083] bridge_slave_0: left allmulticast mode [ 899.454794][ T9083] bridge_slave_0: left promiscuous mode [ 899.477900][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.558953][ T1848] hub 5-1:4.0: 2 ports detected [ 899.793827][ T1848] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 899.806947][ T1848] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 899.930516][ T1848] usb 5-1: USB disconnect, device number 19 [ 900.454853][T10738] ------------[ cut here ]------------ [ 900.461257][T10738] WARNING: CPU: 0 PID: 10738 at kernel/bpf/helpers.c:132 bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.471687][T10738] Modules linked in: [ 900.475651][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.1.921 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 900.486825][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 900.497019][T10738] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.503447][T10738] Code: 41 5c 41 5d ff e0 cc 66 90 e8 84 1d e5 ff e8 5f 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 69 1d e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 bb 49 42 00 eb 93 e8 b4 49 42 00 eb ae [ 900.523420][T10738] RSP: 0018:ffffc90003ff7a80 EFLAGS: 00010287 [ 900.530267][T10738] RAX: 000000000000036a RBX: ffff88806176c800 RCX: ffffc9000b8e0000 [ 900.539740][T10738] RDX: 0000000000040000 RSI: ffffffff81a55b37 RDI: 0000000000000005 [ 900.548722][T10738] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 900.556927][T10738] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 900.564967][T10738] R13: ffffc90003ff7b38 R14: 0000000000000000 R15: 0000000000000000 [ 900.573438][T10738] FS: 00007f8bf5eda6c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 900.582798][T10738] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.589503][T10738] CR2: 000000110c3bdf9d CR3: 0000000078da0000 CR4: 00000000003506f0 [ 900.597595][T10738] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 900.605639][T10738] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 900.613734][T10738] Call Trace: [ 900.617689][T10738] [ 900.620702][T10738] ? show_regs+0x8c/0xa0 [ 900.625060][T10738] ? __warn+0xe5/0x3c0 [ 900.629278][T10738] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.635135][T10738] ? report_bug+0x3c0/0x580 [ 900.640908][T10738] ? handle_bug+0x3d/0x70 [ 900.645364][T10738] ? exc_invalid_op+0x17/0x50 [ 900.650976][T10738] ? asm_exc_invalid_op+0x1a/0x20 [ 900.656139][T10738] ? bpf_map_lookup_percpu_elem+0xa7/0xc0 [ 900.661950][T10738] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.667801][T10738] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10 [ 900.674213][T10738] ___bpf_prog_run+0x3e51/0xabd0 [ 900.679301][T10738] __bpf_prog_run32+0xc1/0x100 [ 900.684162][T10738] ? __pfx___bpf_prog_run32+0x10/0x10 [ 900.689658][T10738] ? __pfx_lock_acquire+0x10/0x10 [ 900.694729][T10738] ? __pfx_lock_release+0x10/0x10 [ 900.699826][T10738] ? __pfx___cant_migrate+0x10/0x10 [ 900.705111][T10738] ? migrate_disable+0x106/0x160 [ 900.710118][T10738] bpf_prog_test_run_syscall+0x3ae/0x770 [ 900.715846][T10738] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 900.722093][T10738] ? fput+0x32/0x390 [ 900.726236][T10738] ? __bpf_prog_get+0xa0/0x2f0 [ 900.731090][T10738] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 900.737416][T10738] __sys_bpf+0x10d2/0x4a00 [ 900.742619][T10738] ? __pfx___sys_bpf+0x10/0x10 [ 900.748221][T10738] ? do_user_addr_fault+0xdc7/0x13f0 [ 900.753626][T10738] ? reacquire_held_locks+0x20b/0x4c0 [ 900.759192][T10738] ? do_futex+0x123/0x350 [ 900.763604][T10738] ? __pfx_do_futex+0x10/0x10 [ 900.768468][T10738] ? xfd_validate_state+0x5d/0x180 [ 900.773677][T10738] __x64_sys_bpf+0x78/0xc0 [ 900.778290][T10738] ? lockdep_hardirqs_on+0x7c/0x110 [ 900.783587][T10738] do_syscall_64+0xcd/0x250 [ 900.788264][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.794260][T10738] RIP: 0033:0x7f8bf5179e79 [ 900.799554][T10738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.819446][T10738] RSP: 002b:00007f8bf5eda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.827991][T10738] RAX: ffffffffffffffda RBX: 00007f8bf5316058 RCX: 00007f8bf5179e79 [ 900.835553][ T30] audit: type=1400 audit(2000000586.630:451): avc: denied { setopt } for pid=10735 comm="syz.1.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 900.836054][T10738] RDX: 0000000000000010 RSI: 0000000020000740 RDI: 000000000000000a [ 900.836121][T10738] RBP: 00007f8bf51e7916 R08: 0000000000000000 R09: 0000000000000000 [ 900.836154][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.836179][T10738] R13: 0000000000000000 R14: 00007f8bf5316058 R15: 00007ffe48e74d28 [ 900.889423][T10738] [ 900.892510][T10738] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 900.899851][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.1.921 Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 900.910607][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 900.920722][T10738] Call Trace: [ 900.924061][T10738] [ 900.927051][T10738] dump_stack_lvl+0x3d/0x1f0 [ 900.931711][T10738] panic+0x6dc/0x7c0 [ 900.935677][T10738] ? __pfx_panic+0x10/0x10 [ 900.940166][T10738] ? show_trace_log_lvl+0x363/0x500 [ 900.945464][T10738] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.951259][T10738] check_panic_on_warn+0xab/0xb0 [ 900.956275][T10738] __warn+0xf1/0x3c0 [ 900.960246][T10738] ? bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.966043][T10738] report_bug+0x3c0/0x580 [ 900.970430][T10738] handle_bug+0x3d/0x70 [ 900.974642][T10738] exc_invalid_op+0x17/0x50 [ 900.979201][T10738] asm_exc_invalid_op+0x1a/0x20 [ 900.984094][T10738] RIP: 0010:bpf_map_lookup_percpu_elem+0xa8/0xc0 [ 900.990475][T10738] Code: 41 5c 41 5d ff e0 cc 66 90 e8 84 1d e5 ff e8 5f 83 ca ff 31 ff 41 89 c4 89 c6 e8 b3 1f e5 ff 45 85 e4 75 8c e8 69 1d e5 ff 90 <0f> 0b 90 eb 81 48 89 df e8 bb 49 42 00 eb 93 e8 b4 49 42 00 eb ae [ 901.010132][T10738] RSP: 0018:ffffc90003ff7a80 EFLAGS: 00010287 [ 901.016238][T10738] RAX: 000000000000036a RBX: ffff88806176c800 RCX: ffffc9000b8e0000 [ 901.024257][T10738] RDX: 0000000000040000 RSI: ffffffff81a55b37 RDI: 0000000000000005 [ 901.032274][T10738] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 901.040284][T10738] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 901.048291][T10738] R13: ffffc90003ff7b38 R14: 0000000000000000 R15: 0000000000000000 [ 901.056318][T10738] ? bpf_map_lookup_percpu_elem+0xa7/0xc0 [ 901.062104][T10738] ? __pfx_bpf_map_lookup_percpu_elem+0x10/0x10 [ 901.068396][T10738] ___bpf_prog_run+0x3e51/0xabd0 [ 901.073390][T10738] __bpf_prog_run32+0xc1/0x100 [ 901.078214][T10738] ? __pfx___bpf_prog_run32+0x10/0x10 [ 901.083678][T10738] ? __pfx_lock_acquire+0x10/0x10 [ 901.088752][T10738] ? __pfx_lock_release+0x10/0x10 [ 901.093827][T10738] ? __pfx___cant_migrate+0x10/0x10 [ 901.099083][T10738] ? migrate_disable+0x106/0x160 [ 901.104090][T10738] bpf_prog_test_run_syscall+0x3ae/0x770 [ 901.109804][T10738] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 901.116026][T10738] ? fput+0x32/0x390 [ 901.119982][T10738] ? __bpf_prog_get+0xa0/0x2f0 [ 901.124788][T10738] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 901.130995][T10738] __sys_bpf+0x10d2/0x4a00 [ 901.135467][T10738] ? __pfx___sys_bpf+0x10/0x10 [ 901.140280][T10738] ? do_user_addr_fault+0xdc7/0x13f0 [ 901.145619][T10738] ? reacquire_held_locks+0x20b/0x4c0 [ 901.151041][T10738] ? do_futex+0x123/0x350 [ 901.155443][T10738] ? __pfx_do_futex+0x10/0x10 [ 901.160199][T10738] ? xfd_validate_state+0x5d/0x180 [ 901.165393][T10738] __x64_sys_bpf+0x78/0xc0 [ 901.169872][T10738] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.175122][T10738] do_syscall_64+0xcd/0x250 [ 901.179681][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.185653][T10738] RIP: 0033:0x7f8bf5179e79 [ 901.190104][T10738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.209767][T10738] RSP: 002b:00007f8bf5eda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 901.218224][T10738] RAX: ffffffffffffffda RBX: 00007f8bf5316058 RCX: 00007f8bf5179e79 [ 901.226227][T10738] RDX: 0000000000000010 RSI: 0000000020000740 RDI: 000000000000000a [ 901.234238][T10738] RBP: 00007f8bf51e7916 R08: 0000000000000000 R09: 0000000000000000 [ 901.242245][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 901.250261][T10738] R13: 0000000000000000 R14: 00007f8bf5316058 R15: 00007ffe48e74d28 [ 901.258291][T10738] [ 901.261627][T10738] Kernel Offset: disabled [ 901.266058][T10738] Rebooting in 86400 seconds..