last executing test programs: 8.295422276s ago: executing program 2 (id=2614): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x100, 0x8}) 4.386233126s ago: executing program 2 (id=2654): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0) 4.314483449s ago: executing program 2 (id=2658): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r1, 0x0, 0x0}, 0x10) 4.243184832s ago: executing program 2 (id=2662): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x100, 0x8}) 2.214725823s ago: executing program 1 (id=2679): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001200)="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", 0x108}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d20", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd", 0x73}, {&(0x7f0000000dc0)="820b29dccf3af022d0ddfd370dd8dda2b3c897775aa4271e7408cbb5fc7a467db67cf69e4d0ca224168a742027b22d028398e2081f5073b0de5fe30bed50bff712f316616f1a07ed002285d38f37a69cd3e20801077b681e38e9a369ce4af2856278cb1a492401eb6d0d39ffaa17590cf0cc2fb9b8a61f4bb50c7a43", 0x7c}], 0x2}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0xfe}], 0x1}}], 0x1, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.213808088s ago: executing program 1 (id=2680): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="020700"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) 2.213607241s ago: executing program 1 (id=2681): r0 = socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 2.211963793s ago: executing program 1 (id=2683): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) socket$inet6(0xa, 0x80002, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) r8 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) dup2(r5, r0) getpid() 1.484026649s ago: executing program 3 (id=2686): unshare(0x2c060000) unshare(0x2c020400) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x22102, 0x0) write$rfkill(r0, 0x0, 0x0) 1.407498932s ago: executing program 3 (id=2687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.284117067s ago: executing program 0 (id=2688): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) write$uinput_user_dev(r0, &(0x7f0000006180)={'syz0\x00', {0x185e, 0xd7fd, 0x7fff, 0x9}, 0x28, [0x0, 0xff, 0x353800, 0x0, 0xea, 0x3, 0x6, 0xd95e, 0x0, 0x4, 0x2, 0xffff0001, 0xfe0d, 0x5, 0x5, 0x86d, 0x5, 0x1, 0x400, 0x1, 0x9, 0xa, 0xffffffff, 0x3, 0x4, 0x2, 0xfffffff7, 0x4690, 0xfffff963, 0x0, 0x8, 0x1, 0x6, 0x5832a189, 0x3, 0xc5a, 0xb, 0x5, 0x6, 0x5, 0x5, 0xb, 0x9, 0x9, 0x626, 0x7f, 0x3000, 0x3fb, 0x8000, 0x3ff, 0x6, 0x1, 0x0, 0x7fff, 0x9, 0x1, 0x0, 0x0, 0x7, 0x8f, 0x1, 0x9, 0x4, 0xd4], [0xffffff80, 0x3, 0x101, 0x5, 0xd, 0xd80, 0x8, 0x9, 0x1, 0x6, 0x6, 0x4, 0xffff, 0x6, 0xd5f, 0x1ff, 0x7, 0x37c, 0x240, 0x9, 0x45, 0x2, 0xa185, 0xc8a, 0x8, 0x9, 0x141, 0x3, 0x10, 0x6, 0x0, 0x5, 0x5, 0x2, 0xffffff80, 0x15, 0x7, 0xfffffff7, 0x0, 0x401, 0x2, 0x2, 0x4, 0x5, 0x6, 0x7fff, 0x8, 0x0, 0x1, 0x1ff, 0x81, 0x80000001, 0xa1, 0x6, 0x7ff, 0x8000, 0x9207, 0x9, 0xfffffffb, 0x4, 0x700, 0x0, 0x5, 0xfff], [0x3000000, 0xfffffff3, 0xf7dd, 0x5a, 0x7, 0x2, 0x1, 0x3, 0x41c, 0xdf96, 0xf, 0x5, 0x1, 0x4000, 0x4, 0x6, 0xfffffffb, 0x6, 0x8, 0xf, 0x4, 0x8, 0x2f, 0x4, 0x3, 0xb, 0x100, 0x3ff, 0x7, 0xfffffffd, 0x7, 0x7ff, 0x0, 0x2, 0x8, 0x9, 0x6, 0x4, 0x800, 0x2, 0x29d, 0x7, 0xfffffffc, 0x2, 0x80000001, 0x9, 0x7, 0xfff, 0xd3f0, 0xd, 0x4, 0x3, 0x89a, 0x6b, 0xf85f, 0xd, 0x764, 0x87f, 0x4, 0xe5b, 0x2, 0x47, 0x5, 0x5], [0x9b63, 0xe7, 0x10001, 0xdfd, 0xc, 0x4, 0x3, 0xc, 0x9, 0x8, 0x5, 0x1, 0x43, 0x182, 0x5, 0x5, 0x9fa4, 0x1, 0x8, 0x1800000, 0x0, 0x8, 0x5, 0x2, 0x4, 0x8, 0xe062, 0x7fffffff, 0x7, 0x1, 0x1, 0x6, 0x4b, 0x7, 0xf7, 0x2, 0x9e, 0x0, 0xb, 0x5, 0x0, 0x9, 0xb1b3, 0x800, 0x6, 0x5, 0x8, 0x10, 0x8001, 0x5, 0x238, 0x8001, 0x5c, 0x5, 0x23a1, 0x2, 0x8, 0x93, 0x5, 0x8b, 0x3, 0x9, 0x3, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.19500231s ago: executing program 0 (id=2689): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001200)="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", 0x108}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d20", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbebf704e9c42cd", 0x73}, {&(0x7f0000000dc0)="820b29dccf3af022d0ddfd370dd8dda2b3c897775aa4271e7408cbb5fc7a467db67cf69e4d0ca224168a742027b22d028398e2081f5073b0de5fe30bed50bff712f316616f1a07ed002285d38f37a69cd3e20801077b681e38e9a369ce4af2856278cb1a492401eb6d0d39ffaa17590cf0cc2fb9b8a61f4bb50c7a43", 0x7c}], 0x2}}], 0x2, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="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", 0xfe}], 0x1}}], 0x1, 0x4000900) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 515.236277ms ago: executing program 3 (id=2690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x2, 0x2f, 0x1000000111}) 514.894111ms ago: executing program 1 (id=2691): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x61) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0xffffffff, 0x1000000, 0x102550, 0xffffffffffffffff, 0x20000000) r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r0, 0xa) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "01000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='he', 0x2}], 0x1, &(0x7f0000000700)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000c00)=""/100, 0x64}, 0x0) 514.735056ms ago: executing program 2 (id=2692): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0xffeffffb, 0x0, 0xd}, 0x10) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) mkdir(0x0, 0x49) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='48:8f:5a:00:00:12\x00', 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x0, &(0x7f00000006c0)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x2, 0x32}, @fd, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009702caed68d399a24fb707", @ANYRES16=r0], 0x2c}}, 0x40000) 513.042021ms ago: executing program 2 (id=2693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000511000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xa00000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) inotify_rm_watch(r4, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) syz_usb_connect$uac3(0x5, 0xb1, &(0x7f0000000600)=ANY=[@ANYBLOB="c0010102000000401e04df3040000102030109029f0003017fc008080b0001010130630904000000010130000a2401083b00a6f00000092410020a"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 253.013551ms ago: executing program 0 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000078c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd24, 0x0, {0x2, 0x20, 0x14, 0x0, 0xff, 0x0, 0x0, 0x7, 0x2400}}, 0x1c}}, 0xea5bc50b4199d7ae) 252.752836ms ago: executing program 3 (id=2695): setns(0xc9, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x402c0c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x400c840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, 0x0, 0x20006004}, 0x4050) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44005}, 0x4000000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) close(r2) read$FUSE(r3, &(0x7f0000005040)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0xffffffffffffff29) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000100081050000", @ANYRES32=0x0], 0x40}}, 0x0) ftruncate(r5, 0x4) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x0, 0x7) 252.683484ms ago: executing program 0 (id=2696): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0xa, 0x0, 0x64, 0x90, 0x8}, 0xc) 184.969711ms ago: executing program 0 (id=2697): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000000c0)={0x713b, 0x6, [{0xb}, {0xe}, {0x2, 0x1}, {0x1, 0x1}, {0x9}, {0xf, 0x1}]}) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x200202) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 184.242171ms ago: executing program 3 (id=2698): r0 = epoll_create1(0x80000) r1 = socket(0xa, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000009}) 184.093877ms ago: executing program 3 (id=2699): syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d0009058103000200001209040100"], 0x0) 169.92873ms ago: executing program 1 (id=2700): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x1) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x20002) socket$inet6(0xa, 0x80002, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) r8 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) dup2(r5, r0) getpid() 0s ago: executing program 0 (id=2701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x0, 0x1, 0x7}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x100, 0x8}) kernel console output (not intermixed with test programs): te type 13 has an invalid length. [ 128.044158][ T5884] IPVS: starting estimator thread 0... [ 128.046419][ T8915] netlink: 'syz.2.1135': attribute type 13 has an invalid length. [ 128.141412][ T8920] IPVS: using max 45 ests per chain, 108000 per kthread [ 128.415773][ T43] audit: type=1400 audit(1785803066.216:1056): avc: denied { bind } for pid=8932 comm="syz.0.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.420703][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1142'. [ 128.554571][ T8935] tipc: Enabling of bearer rejected, failed to enable media [ 128.877460][ T8888] Set syz1 is full, maxelem 65536 reached [ 129.244313][ T8967] syzkaller0: entered promiscuous mode [ 129.246932][ T8967] syzkaller0: entered allmulticast mode [ 129.257204][ T8967] tipc: Enabled bearer , priority 0 [ 129.266136][ T8966] tipc: Resetting bearer [ 129.297922][ T8966] tipc: Disabling bearer [ 129.523868][ T8984] netlink: 'syz.0.1162': attribute type 2 has an invalid length. [ 129.527171][ T8984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1162'. [ 129.994094][ T8998] syzkaller0: entered promiscuous mode [ 129.996673][ T8998] syzkaller0: entered allmulticast mode [ 130.004881][ T8998] tipc: Enabled bearer , priority 0 [ 130.426977][ T9033] tipc: Enabled bearer , priority 0 [ 130.438678][ T9032] tipc: Disabling bearer [ 130.464383][ T43] audit: type=1400 audit(1785803068.266:1057): avc: denied { mounton } for pid=9015 comm="syz.3.1174" path="/290/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 130.552584][ T9037] netlink: 'syz.1.1180': attribute type 2 has an invalid length. [ 130.556093][ T9037] __nla_validate_parse: 2 callbacks suppressed [ 130.556109][ T9037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1180'. [ 130.596334][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 130.706667][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 130.755653][ T9050] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 130.803783][ T9054] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 130.999624][ T56] tipc: Node number set to 990120810 [ 131.050652][ T9068] tipc: Enabling of bearer rejected, already enabled [ 131.055165][ T9068] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 131.406923][ T9089] tipc: Enabling of bearer rejected, already enabled [ 131.445185][ T9092] tipc: Enabling of bearer rejected, already enabled [ 131.464897][ T9092] tipc: Resetting bearer [ 132.279612][ T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 132.456339][ T56] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.460913][ T56] usb 8-1: config 0 has no interface number 0 [ 132.466900][ T56] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 132.471045][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.474447][ T56] usb 8-1: Product: syz [ 132.476277][ T56] usb 8-1: Manufacturer: syz [ 132.478434][ T56] usb 8-1: SerialNumber: syz [ 132.488187][ T56] usb 8-1: config 0 descriptor?? [ 132.591090][ T43] audit: type=1400 audit(1785803070.396:1058): avc: denied { watch } for pid=9105 comm="syz.1.1203" path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dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.698477][ T56] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 132.710050][ T56] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.713461][ T56] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 132.716727][ T56] usb 8-1: media controller created [ 132.725273][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.731507][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.735066][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903459][ T56] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 132.932243][ T56] usb 8-1: USB disconnect, device number 9 [ 133.394198][ T9122] tipc: Enabling of bearer rejected, failed to enable media [ 133.676825][ T43] audit: type=1400 audit(1785803071.476:1059): avc: denied { watch } for pid=9132 comm="syz.3.1210" path="pipe:[22612]" dev="pipefs" ino=22612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 133.869007][ T9139] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 134.039621][ T56] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 134.189645][ T56] usb 8-1: Using ep0 maxpacket: 16 [ 134.192841][ T56] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.196899][ T56] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.202592][ T56] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.205680][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.208438][ T56] usb 8-1: Product: syz [ 134.212965][ T56] usb 8-1: Manufacturer: syz [ 134.215379][ T56] usb 8-1: SerialNumber: syz [ 134.224521][ T56] usb 8-1: 0:2 : does not exist [ 134.634493][ T9165] tipc: Enabled bearer , priority 0 [ 134.649064][ T9164] tipc: Disabling bearer [ 135.133180][ T9182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1229'. [ 135.137390][ T9182] netlink: 'syz.2.1229': attribute type 13 has an invalid length. [ 135.250552][ T9188] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 136.209389][ T9207] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 136.392234][ T9224] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 136.810103][ T56] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 136.837192][ T56] usb 8-1: USB disconnect, device number 10 [ 136.858067][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.906337][ T9257] netlink: 'syz.1.1260': attribute type 2 has an invalid length. [ 136.908884][ T9257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1260'. [ 136.939619][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 136.981379][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 137.512361][ T9271] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1263'. [ 137.516738][ T9271] bridge_slave_0: left allmulticast mode [ 137.519209][ T9271] bridge_slave_0: left promiscuous mode [ 137.524024][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.528980][ T9271] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1263'. [ 137.575293][ T43] audit: type=1400 audit(1785803075.376:1060): avc: denied { transfer } for pid=9272 comm="syz.1.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 137.653340][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.658443][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.154305][ T9295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.322408][ T9309] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 139.368771][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 139.826037][ T9253] workqueue: Failed to create a rescuer kthread for wq "dio/fuse": -EINTR [ 140.808347][ T9359] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1299'. [ 140.814260][ T9359] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1299'. [ 140.930565][ T9373] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 141.083136][ T9394] tipc: Enabled bearer , priority 0 [ 141.087925][ T9394] tipc: Resetting bearer [ 141.103063][ T9392] tipc: Disabling bearer [ 141.294447][ T9408] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 142.059022][ T9426] tipc: Enabling of bearer rejected, already enabled [ 142.558519][ T9446] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 142.597522][ T9451] netlink: 'syz.1.1326': attribute type 2 has an invalid length. [ 142.601054][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1326'. [ 142.603503][ T9449] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1327'. [ 142.609227][ T9449] netlink: 'syz.3.1327': attribute type 13 has an invalid length. [ 142.659145][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 142.682822][ T9457] tipc: Enabling of bearer rejected, already enabled [ 143.100110][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 143.251868][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.256655][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.260879][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.265410][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.268477][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.275125][ T24] usb 8-1: config 0 descriptor?? [ 143.651356][ T9477] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 143.665920][ T43] audit: type=1400 audit(1785803081.466:1061): avc: denied { getopt } for pid=9480 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.702749][ T24] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 143.731636][ T9484] tipc: Enabling of bearer rejected, already enabled [ 143.775348][ T9486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1340'. [ 143.780756][ T9486] netlink: 'syz.2.1340': attribute type 13 has an invalid length. [ 144.245423][ T9497] netlink: 'syz.1.1345': attribute type 2 has an invalid length. [ 144.248051][ T9497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1345'. [ 144.276094][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 144.464656][ T9504] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1347'. [ 144.469215][ T9504] bridge_slave_0: left allmulticast mode [ 144.471784][ T9504] bridge_slave_0: left promiscuous mode [ 144.475277][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.483625][ T9504] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1347'. [ 144.836875][ T9511] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 144.909840][ T9519] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 145.048350][ T9528] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.088091][ T9530] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1356'. [ 145.091463][ T9530] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1356'. [ 145.307185][ T9538] netlink: 'syz.0.1360': attribute type 2 has an invalid length. [ 145.567764][ T9546] tipc: Enabling of bearer rejected, already enabled [ 145.834313][ T9554] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 145.890537][ T9560] tipc: Enabling of bearer rejected, already enabled [ 145.934275][ T9563] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 145.939195][ T9563] bond1 (unregistering): Released all slaves [ 146.040012][ T24] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 146.047707][ T24] usb 8-1: device reset changed ep0 maxpacket size! [ 146.056648][ T1351] usb 8-1: USB disconnect, device number 11 [ 146.058775][ T9577] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 146.210001][ T1351] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 146.369673][ T1351] usb 8-1: Using ep0 maxpacket: 16 [ 146.373323][ T1351] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.377593][ T1351] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.383704][ T1351] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.387570][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.392608][ T1351] usb 8-1: Product: syz [ 146.394422][ T1351] usb 8-1: Manufacturer: syz [ 146.396348][ T1351] usb 8-1: SerialNumber: syz [ 146.406747][ T1351] usb 8-1: 0:2 : does not exist [ 147.249662][ T9585] tipc: Enabling of bearer rejected, already enabled [ 147.284852][ T9593] netlink: 'syz.2.1379': attribute type 2 has an invalid length. [ 147.455116][ T9606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 147.673522][ T9615] tipc: Enabling of bearer rejected, failed to enable media [ 147.977366][ T9624] __nla_validate_parse: 6 callbacks suppressed [ 147.977386][ T9624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1390'. [ 147.986299][ T9624] netlink: 'syz.2.1390': attribute type 13 has an invalid length. [ 148.151086][ T43] audit: type=1400 audit(1785803085.956:1062): avc: denied { getopt } for pid=9625 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.259879][ T9632] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 148.262157][ T9632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 148.265713][ T9632] vhci_hcd vhci_hcd.0: Device attached [ 148.270583][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.273470][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.277120][ T9633] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 148.282302][ T12] vhci_hcd vhci_hcd.1: stop threads [ 148.284266][ T12] vhci_hcd vhci_hcd.1: release socket [ 148.286876][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 148.289145][ T43] audit: type=1400 audit(1785803086.086:1063): avc: denied { read } for pid=9631 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 148.627786][ T1351] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 148.674715][ T1351] usb 8-1: USB disconnect, device number 12 [ 148.704381][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.021406][ T9650] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1399'. [ 149.026317][ T9650] netlink: 'syz.0.1399': attribute type 13 has an invalid length. [ 149.111328][ T9666] fuse: Bad value for 'fd' [ 150.913100][ T9694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1415'. [ 150.919303][ T9694] netlink: 'syz.2.1415': attribute type 13 has an invalid length. [ 151.011972][ T43] audit: type=1400 audit(1785803088.816:1064): avc: denied { map } for pid=9696 comm="syz.1.1416" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 151.082016][ T9708] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 151.962681][ T9719] netlink: 'syz.3.1423': attribute type 2 has an invalid length. [ 151.967162][ T9719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1423'. [ 151.993438][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1423'. [ 151.999134][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 152.136286][ T9727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1426'. [ 152.141622][ T9727] netlink: 'syz.0.1426': attribute type 13 has an invalid length. [ 152.526870][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1430'. [ 152.936539][ T9753] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1434'. [ 152.939824][ T9753] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1434'. [ 153.178630][ T9760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1435'. [ 153.185136][ T9760] netlink: 'syz.1.1435': attribute type 13 has an invalid length. [ 153.304078][ T9768] netlink: 'syz.1.1440': attribute type 2 has an invalid length. [ 153.319300][ T9768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1440'. [ 153.345895][ T9770] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.346105][ T9774] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1444'. [ 153.360797][ T9774] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1444'. [ 153.379085][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1440'. [ 153.483822][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'. [ 154.292399][ T9804] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1455'. [ 154.295658][ T9804] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1455'. [ 154.358124][ T9810] netlink: 'syz.0.1457': attribute type 2 has an invalid length. [ 154.362071][ T9810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1457'. [ 154.399899][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 155.151874][ T9838] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 155.252406][ T9846] netlink: 'syz.2.1469': attribute type 2 has an invalid length. [ 155.525940][ T9874] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 155.845680][ T9894] syzkaller0: left promiscuous mode [ 155.847446][ T9894] syzkaller0: left allmulticast mode [ 155.874886][ T9896] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 156.473923][ T9934] netlink: 'syz.2.1500': attribute type 2 has an invalid length. [ 156.544838][ T9940] netlink: 'syz.1.1501': attribute type 13 has an invalid length. [ 157.698526][ T43] audit: type=1400 audit(1785803095.496:1065): avc: denied { append } for pid=9974 comm="syz.3.1510" name="001" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 157.751738][ T43] audit: type=1400 audit(1785803095.556:1066): avc: denied { write } for pid=9984 comm="syz.1.1513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 158.426872][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b3a400: rx timeout, send abort [ 158.432910][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b3a400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.442286][ T43] audit: type=1400 audit(1785803096.246:1067): avc: denied { read } for pid=5129 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 158.464068][ T43] audit: type=1400 audit(1785803096.246:1068): avc: denied { search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.479478][ T43] audit: type=1400 audit(1785803096.246:1069): avc: denied { write search } for pid=5129 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.499803][ T43] audit: type=1400 audit(1785803096.246:1070): avc: denied { add_name } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.512347][ T43] audit: type=1400 audit(1785803096.246:1071): avc: denied { create } for pid=5129 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.523386][ T43] audit: type=1400 audit(1785803096.246:1072): avc: denied { append open } for pid=5129 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.533196][ T43] audit: type=1400 audit(1785803096.246:1073): avc: denied { getattr } for pid=5129 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 158.591203][ T9997] netlink: 'syz.2.1516': attribute type 2 has an invalid length. [ 158.593770][ T9997] __nla_validate_parse: 13 callbacks suppressed [ 158.593780][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1516'. [ 158.640487][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'. [ 158.686100][T10003] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1517'. [ 158.689494][T10003] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1517'. [ 158.701612][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 158.811636][ T43] audit: type=1400 audit(1785803096.616:1074): avc: denied { execute } for pid=10015 comm="syz.3.1520" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.047380][T10030] tipc: Enabling of bearer rejected, failed to enable media [ 159.156831][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.162016][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.379128][T10049] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1528'. [ 159.383528][T10049] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1528'. [ 159.572680][T10054] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 159.620255][T10063] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 159.852210][T10073] syzkaller0: entered promiscuous mode [ 159.854239][T10073] syzkaller0: entered allmulticast mode [ 159.858198][T10073] tipc: Enabling of bearer rejected, already enabled [ 160.215886][T10093] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1542'. [ 160.257869][T10093] nfs: Unknown parameter 'cgroup2' [ 160.343420][T10095] syzkaller0: entered promiscuous mode [ 160.346098][T10095] syzkaller0: entered allmulticast mode [ 160.354988][T10095] tipc: Enabled bearer , priority 0 [ 160.375053][T10095] tipc: Resetting bearer [ 160.384082][T10094] tipc: Resetting bearer [ 160.399336][T10094] tipc: Disabling bearer [ 160.800160][T10116] tipc: Enabling of bearer rejected, already enabled [ 161.347731][T10143] syzkaller0: entered promiscuous mode [ 161.350118][T10143] syzkaller0: entered allmulticast mode [ 161.356036][T10143] tipc: Enabled bearer , priority 0 [ 161.375885][T10143] tipc: Resetting bearer [ 161.379848][T10145] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1566'. [ 161.384218][T10142] tipc: Resetting bearer [ 161.387867][T10145] netlink: 'syz.3.1566': attribute type 13 has an invalid length. [ 161.406631][T10142] tipc: Disabling bearer [ 161.481569][T10151] netlink: 'syz.3.1568': attribute type 2 has an invalid length. [ 161.484998][T10151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1568'. [ 161.560899][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.569648][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.202241][T10165] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 162.532514][T10177] tipc: Enabling of bearer rejected, already enabled [ 162.649736][T10181] netlink: 'syz.2.1580': attribute type 2 has an invalid length. [ 163.249623][ T1351] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 163.365401][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 163.365421][ T43] audit: type=1326 audit(1785803101.166:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.378599][ T43] audit: type=1326 audit(1785803101.166:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.387645][ T43] audit: type=1326 audit(1785803101.166:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.395888][ T43] audit: type=1326 audit(1785803101.166:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.404808][ T43] audit: type=1326 audit(1785803101.166:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.414128][ T43] audit: type=1326 audit(1785803101.166:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.421301][ T43] audit: type=1326 audit(1785803101.166:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.428634][ T43] audit: type=1326 audit(1785803101.166:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.430986][ T1351] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.435871][ T43] audit: type=1326 audit(1785803101.166:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.441475][ T1351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 163.447711][ T43] audit: type=1326 audit(1785803101.166:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10199 comm="syz.2.1587" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7ffc0000 [ 163.459153][ T1351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 163.465713][ T1351] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 163.468755][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.471354][ T1351] usb 8-1: Product: syz [ 163.472678][ T1351] usb 8-1: Manufacturer: syz [ 163.474367][ T1351] usb 8-1: SerialNumber: syz [ 163.478979][ T1351] usb 8-1: config 0 descriptor?? [ 163.481592][T10185] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 163.529650][ T1351] rc_core: IR keymap rc-streamzap not found [ 163.532067][ T1351] Registered IR keymap rc-empty [ 163.536398][ T1351] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 163.542020][ T1351] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input21 [ 164.127005][T10215] __nla_validate_parse: 5 callbacks suppressed [ 164.127026][T10215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1590'. [ 164.134391][T10215] netlink: 'syz.0.1590': attribute type 13 has an invalid length. [ 165.330855][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1602'. [ 165.336209][T10244] netlink: 'syz.1.1602': attribute type 13 has an invalid length. [ 165.797525][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. [ 166.038477][ T41] usb 8-1: USB disconnect, device number 13 [ 166.386963][T10291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1612'. [ 166.391774][T10291] netlink: 'syz.1.1612': attribute type 13 has an invalid length. [ 166.407040][T10294] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 166.465772][T10310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.470767][T10310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.459906][T10339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1626'. [ 167.463972][T10339] netlink: 'syz.0.1626': attribute type 13 has an invalid length. [ 167.709675][ T41] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 167.859646][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 167.862964][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.866186][ T41] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.869043][ T41] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.875188][ T41] usb 8-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 167.878107][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.880955][ T41] usb 8-1: Product: syz [ 167.882312][ T41] usb 8-1: Manufacturer: syz [ 167.883984][ T41] usb 8-1: SerialNumber: syz [ 167.959995][T10354] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 168.834463][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1639'. [ 168.839191][T10373] netlink: 'syz.2.1639': attribute type 13 has an invalid length. [ 169.242771][T10390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.877721][T10397] netlink: 'syz.0.1648': attribute type 2 has an invalid length. [ 169.881012][T10397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1648'. [ 169.914067][T10399] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1651'. [ 169.919952][T10399] netlink: 'syz.2.1651': attribute type 13 has an invalid length. [ 169.921367][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'. [ 170.018603][T10411] lo: Caught tx_queue_len zero misconfig [ 170.027473][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 170.070144][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.074133][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.544913][ T41] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 170.556796][ T41] usb 8-1: USB disconnect, device number 14 [ 170.568621][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.948553][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1661'. [ 170.952281][T10426] netlink: 'syz.2.1661': attribute type 13 has an invalid length. [ 170.979162][T10436] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 171.048219][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.050308][T10452] netlink: 'syz.2.1669': attribute type 2 has an invalid length. [ 171.052724][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.053480][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1669'. [ 171.073413][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1669'. [ 171.167245][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 171.998282][T10468] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 172.015673][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1675'. [ 172.020969][T10474] netlink: 'syz.1.1675': attribute type 13 has an invalid length. [ 172.113759][T10483] netlink: 'syz.1.1680': attribute type 2 has an invalid length. [ 172.116339][T10483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1680'. [ 172.419653][ T41] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 172.572167][ T41] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.575805][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 172.579247][ T41] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 172.584449][ T41] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 172.587339][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.590024][ T41] usb 8-1: Product: syz [ 172.591543][ T41] usb 8-1: Manufacturer: syz [ 172.593033][ T41] usb 8-1: SerialNumber: syz [ 172.596605][ T41] usb 8-1: config 0 descriptor?? [ 172.599248][T10486] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 172.659669][ T41] rc_core: IR keymap rc-streamzap not found [ 172.662208][ T41] Registered IR keymap rc-empty [ 172.665696][ T41] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 172.672092][ T41] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input22 [ 173.084090][T10502] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 173.162827][T10512] netlink: 'syz.0.1690': attribute type 13 has an invalid length. [ 173.208618][T10516] netlink: 'syz.0.1692': attribute type 2 has an invalid length. [ 174.229293][T10538] netlink: 'syz.2.1701': attribute type 13 has an invalid length. [ 174.306116][T10547] netlink: 'syz.0.1706': attribute type 2 has an invalid length. [ 175.178256][ T41] usb 8-1: USB disconnect, device number 15 [ 175.277416][T10564] __nla_validate_parse: 9 callbacks suppressed [ 175.277429][T10564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1711'. [ 175.285906][T10564] syzkaller0: left promiscuous mode [ 175.287748][T10564] syzkaller0: left allmulticast mode [ 175.288765][T10568] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1713'. [ 175.294428][T10568] netlink: 'syz.0.1713': attribute type 13 has an invalid length. [ 175.332032][T10572] netlink: 'syz.0.1716': attribute type 2 has an invalid length. [ 175.334690][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1716'. [ 175.358632][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 175.385324][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.389373][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.450535][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1716'. [ 175.913584][ T43] kauditd_printk_skb: 549 callbacks suppressed [ 175.913598][ T43] audit: type=1400 audit(1785803113.716:1636): avc: denied { create } for pid=10587 comm="syz.3.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 175.922054][ T43] audit: type=1400 audit(1785803113.726:1637): avc: denied { sys_admin } for pid=10587 comm="syz.3.1719" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 176.345060][T10599] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 176.378070][T10603] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 176.383703][T10603] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 176.387699][T10605] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.392316][T10603] tipc: Enabled bearer , priority 0 [ 176.450443][T10612] netlink: 'syz.2.1729': attribute type 2 has an invalid length. [ 176.462247][T10612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1729'. [ 176.510562][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 176.510874][T10614] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 176.516708][T10614] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 176.589658][ T1351] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 176.614997][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 176.665408][ T43] audit: type=1400 audit(1785803114.466:1638): avc: denied { map } for pid=10622 comm="syz.1.1732" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.739600][ T1351] usb 8-1: Using ep0 maxpacket: 8 [ 176.744767][ T1351] usb 8-1: config 1 has too many interfaces: 48, using maximum allowed: 32 [ 176.750112][ T1351] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 48 [ 176.755364][ T1351] usb 8-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 176.762868][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.982887][ T1351] usb 8-1: string descriptor 0 read error: -71 [ 176.991974][ T1351] usb 8-1: USB disconnect, device number 16 [ 177.158527][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'. [ 177.203104][T10636] tipc: Enabling of bearer rejected, already enabled [ 177.511079][ T1351] tipc: Node number set to 1634228174 [ 177.595068][T10646] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.696162][T10651] netlink: 'syz.1.1743': attribute type 13 has an invalid length. [ 177.749879][T10656] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 177.753839][T10656] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 177.760599][T10656] tipc: Enabling of bearer rejected, already enabled [ 177.866555][ T43] audit: type=1400 audit(1785803115.666:1639): avc: denied { write } for pid=10661 comm="syz.1.1748" name="usb_gadget" dev="configfs" ino=3204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.881712][ T43] audit: type=1400 audit(1785803115.686:1640): avc: denied { add_name } for pid=10661 comm="syz.1.1748" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.894415][ T43] audit: type=1400 audit(1785803115.686:1641): avc: denied { create } for pid=10661 comm="syz.1.1748" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 177.906432][ T43] audit: type=1400 audit(1785803115.686:1642): avc: denied { write } for pid=10661 comm="syz.1.1748" name="functions" dev="configfs" ino=27601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.914531][ T43] audit: type=1400 audit(1785803115.706:1643): avc: denied { write } for pid=10661 comm="syz.1.1748" name="UDC" dev="configfs" ino=27607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 177.922333][ T43] audit: type=1400 audit(1785803115.706:1644): avc: denied { open } for pid=10661 comm="syz.1.1748" path="/412/config/usb_gadget/g1/UDC" dev="configfs" ino=27607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 178.741031][T10682] netlink: 'syz.2.1754': attribute type 13 has an invalid length. [ 178.774159][T10687] tipc: Enabled bearer , priority 0 [ 178.854694][T10704] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 179.782291][ T1351] tipc: Node number set to 288745928 [ 179.807179][T10716] netlink: 'syz.1.1768': attribute type 13 has an invalid length. [ 179.831209][T10722] tipc: Enabling of bearer rejected, already enabled [ 179.889483][T10727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.848663][T10741] SELinux: policydb string S does not match my string SE Linux [ 180.849111][ T43] audit: type=1400 audit(1785803118.646:1645): avc: denied { load_policy } for pid=10739 comm="syz.1.1777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.854670][T10741] SELinux: failed to load policy [ 180.909037][T10749] tipc: Enabling of bearer rejected, already enabled [ 180.909135][T10747] __nla_validate_parse: 4 callbacks suppressed [ 180.909151][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1782'. [ 180.926739][T10747] netlink: 'syz.1.1782': attribute type 13 has an invalid length. [ 180.976557][T10737] kvm: kvm [10735]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000099 [ 180.997504][T10737] kvm: kvm [10735]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8001000040d6 [ 181.004989][T10762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.053419][T10737] kvm: kvm [10735]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x280000006883 [ 181.058914][T10737] kvm: kvm [10735]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 181.961051][T10778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1796'. [ 181.966080][ T43] audit: type=1400 audit(1785803119.776:1646): avc: denied { mount } for pid=10775 comm="syz.0.1793" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 181.966951][T10778] netlink: 'syz.3.1796': attribute type 13 has an invalid length. [ 182.107062][T10799] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.041138][T10812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1809'. [ 183.046354][T10812] netlink: 'syz.1.1809': attribute type 13 has an invalid length. [ 183.065211][ T43] audit: type=1400 audit(1785803120.866:1647): avc: denied { ioctl } for pid=10807 comm="syz.3.1808" path="socket:[29762]" dev="sockfs" ino=29762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.102341][T10820] tipc: Enabling of bearer rejected, already enabled [ 183.176837][T10830] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 184.107495][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 184.117928][T10840] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 184.121348][T10840] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 184.161768][T10850] tipc: Enabling of bearer rejected, already enabled [ 184.273574][T10861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.135779][ T43] audit: type=1400 audit(1785803122.936:1648): avc: denied { execute_no_trans } for pid=10877 comm="syz.1.1836" path="/file0" dev="ramfs" ino=29462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 185.150489][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1835'. [ 185.227466][T10895] veth0_macvtap: entered allmulticast mode [ 185.229457][T10895] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 186.382349][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1857'. [ 187.330807][T10953] veth0_macvtap: entered allmulticast mode [ 187.335566][T10953] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 187.393184][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1867'. [ 187.434280][T10966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1869'. [ 187.437984][T10966] netlink: 'syz.0.1869': attribute type 13 has an invalid length. [ 188.099435][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1877'. [ 188.457974][ T43] audit: type=1400 audit(1785803126.256:1649): avc: denied { watch watch_reads } for pid=10990 comm="syz.3.1880" path="/425" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.631793][T11004] tc_dump_action: action bad kind [ 189.026540][T11017] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1888'. [ 189.424284][T11030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.428598][T11030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.849461][T11034] netlink: 'syz.3.1895': attribute type 2 has an invalid length. [ 189.852536][T11034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1895'. [ 189.858183][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 189.958718][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 190.009920][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1897'. [ 190.112472][T11050] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.189817][T11052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.197865][T11052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.739015][T11058] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 190.741863][T11058] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 190.836395][T11073] netlink: 'syz.1.1909': attribute type 2 has an invalid length. [ 190.839707][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1909'. [ 191.027764][T11090] batadv_slave_1: entered promiscuous mode [ 191.031926][T11089] batadv_slave_1: left promiscuous mode [ 191.233978][T11103] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.455199][T11107] syzkaller0: entered promiscuous mode [ 191.457064][T11107] syzkaller0: entered allmulticast mode [ 191.912387][T11128] __nla_validate_parse: 3 callbacks suppressed [ 191.912400][T11128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 191.918689][T11128] syzkaller0: left promiscuous mode [ 191.923092][T11128] syzkaller0: left allmulticast mode [ 192.082809][ T43] audit: type=1400 audit(1785803129.886:1650): avc: denied { connect } for pid=11142 comm="syz.3.1934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.217427][T11154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1939'. [ 192.309300][T11157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 192.923431][T11171] netlink: 'syz.2.1946': attribute type 2 has an invalid length. [ 192.925949][T11171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1946'. [ 192.930379][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1946'. [ 193.003750][T11178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1948'. [ 193.017333][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'. [ 193.128127][ T43] audit: type=1400 audit(1785803130.926:1651): avc: denied { create } for pid=11185 comm="syz.0.1951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 193.589889][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1957'. [ 193.664443][T11203] netlink: 'syz.2.1959': attribute type 4 has an invalid length. [ 193.740489][T11210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1962'. [ 193.745598][T11203] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 193.753814][T11210] netlink: 'syz.0.1962': attribute type 13 has an invalid length. [ 193.813448][T11214] netlink: 'syz.2.1964': attribute type 2 has an invalid length. [ 193.816228][T11214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1964'. [ 193.820976][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1964'. [ 194.182114][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184177][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.879684][T11254] netlink: 'syz.1.1978': attribute type 2 has an invalid length. [ 195.418976][ T43] audit: type=1400 audit(1785803133.216:1652): avc: denied { execute } for pid=11271 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 195.426352][ T43] audit: type=1400 audit(1785803133.216:1653): avc: denied { execute_no_trans } for pid=11271 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 195.504468][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.513825][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.518574][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.522506][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.525888][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.629597][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 195.654605][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 195.669050][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 195.673531][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 195.691643][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 195.694837][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 195.712482][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 195.716814][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 195.738302][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 195.742406][T11275] kvm: kvm [11273]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 195.965244][ T43] audit: type=1400 audit(1785803133.766:1654): avc: denied { write } for pid=11294 comm="syz.3.1988" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 196.149769][T11301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.261052][T11272] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.263808][T11272] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.266016][T11272] bridge_slave_0: entered allmulticast mode [ 196.269907][T11272] bridge_slave_0: entered promiscuous mode [ 196.276577][T11272] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.279878][T11272] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.283464][T11272] bridge_slave_1: entered allmulticast mode [ 196.287609][T11272] bridge_slave_1: entered promiscuous mode [ 196.293154][T11310] netlink: 'syz.3.1993': attribute type 4 has an invalid length. [ 196.327065][T11272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.333911][T11272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.370530][T11310] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 196.376508][T11272] team0: Port device team_slave_0 added [ 196.380547][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.383570][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.389983][T11272] team0: Port device team_slave_1 added [ 196.409495][T11272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.417184][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.426754][T11272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.435998][T11272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.440078][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.450519][T11272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.461788][T11313] syzkaller0: entered promiscuous mode [ 196.463700][T11313] syzkaller0: entered allmulticast mode [ 196.487123][T11313] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 196.494177][T11272] hsr_slave_0: entered promiscuous mode [ 196.496902][T11272] hsr_slave_1: entered promiscuous mode [ 196.499424][T11272] debugfs: 'hsr0' already exists in 'hsr' [ 196.501878][T11272] Cannot create hsr debugfs directory [ 196.505206][T11315] tipc: Enabling of bearer rejected, failed to enable media [ 196.533809][T11315] tipc: Resetting bearer [ 196.596768][ T43] audit: type=1400 audit(1785803134.396:1655): avc: denied { sys_nice } for pid=11316 comm="syz.3.1996" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 196.621796][T11272] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.634583][T11323] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.635188][T11325] netlink: 'syz.2.1999': attribute type 13 has an invalid length. [ 196.713963][T11272] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.817833][T11272] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.907121][T11272] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.981078][T11342] tipc: Enabling of bearer rejected, failed to enable media [ 197.024898][T11272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.029292][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.040347][T11272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 197.044308][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.047130][T11272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.053720][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.056463][T11272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 197.060695][T11272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.101419][T11272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.111530][T11272] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.118232][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.121325][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.130478][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.133541][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.409301][T11272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.438947][T11272] veth0_vlan: entered promiscuous mode [ 197.446888][T11272] veth1_vlan: entered promiscuous mode [ 197.469190][T11272] veth0_macvtap: entered promiscuous mode [ 197.475028][T11272] veth1_macvtap: entered promiscuous mode [ 197.487911][T11272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.495330][T11272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.560429][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.563909][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.581171][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.584419][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.598719][ T43] audit: type=1400 audit(1785803135.396:1656): avc: denied { mounton } for pid=11272 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 197.606944][ T43] audit: type=1400 audit(1785803135.406:1657): avc: denied { mounton } for pid=11272 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 197.610174][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.614668][ T5744] Bluetooth: hci4: command tx timeout [ 197.617470][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.617495][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.617515][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.662277][T11368] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 197.751049][ T43] audit: type=1400 audit(1785803135.556:1658): avc: denied { write } for pid=11376 comm="syz.1.2012" name="configs" dev="configfs" ino=27602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.758801][ T43] audit: type=1400 audit(1785803135.556:1659): avc: denied { write } for pid=11376 comm="syz.1.2012" name="functions" dev="configfs" ino=27601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.767382][ T43] audit: type=1400 audit(1785803135.556:1660): avc: denied { write } for pid=11376 comm="syz.1.2012" name="c.1" dev="configfs" ino=30670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.776813][ T43] audit: type=1400 audit(1785803135.556:1661): avc: denied { create } for pid=11376 comm="syz.1.2012" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 198.158047][T11385] tipc: Enabling of bearer rejected, failed to enable media [ 198.554068][T11391] __nla_validate_parse: 7 callbacks suppressed [ 198.554085][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'. [ 198.567694][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2016'. [ 198.915978][T11404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2021'. [ 198.922049][T11404] netlink: 'syz.2.2021': attribute type 13 has an invalid length. [ 199.003948][T11408] tipc: Enabling of bearer rejected, failed to enable media [ 199.519764][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 199.679679][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 199.684086][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.688400][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.693780][ T5744] Bluetooth: hci4: command tx timeout [ 199.696028][ T5884] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 199.701823][ T5884] usb 5-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40 [ 199.704768][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.707285][ T5884] usb 5-1: Product: syz [ 199.708618][ T5884] usb 5-1: Manufacturer: syz [ 199.710256][ T5884] usb 5-1: SerialNumber: syz [ 199.935674][ T5884] usb 5-1: cannot find UAC_HEADER [ 200.035436][T11434] tipc: Enabling of bearer rejected, failed to enable media [ 200.095131][ T5884] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 200.126232][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.433351][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2038'. [ 200.524628][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2038'. [ 200.905079][T11457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 201.084285][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 201.084303][ T43] audit: type=1400 audit(1785803138.886:1663): avc: denied { mount } for pid=11467 comm="syz.3.2042" name="/" dev="rpc_pipefs" ino=31491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 201.106056][ T43] audit: type=1400 audit(1785803138.906:1664): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 201.769718][ T5744] Bluetooth: hci4: command tx timeout [ 201.846738][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 201.944778][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 202.202314][T11500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2054'. [ 202.207321][T11500] syzkaller0: left promiscuous mode [ 202.210324][T11500] syzkaller0: left allmulticast mode [ 202.218091][T11500] tipc: Resetting bearer [ 202.285642][ T9] usb 5-1: USB disconnect, device number 2 [ 202.316523][ T43] audit: type=1400 audit(1785803140.116:1665): avc: denied { read } for pid=11504 comm="syz.0.2056" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.325671][ T43] audit: type=1400 audit(1785803140.116:1666): avc: denied { open } for pid=11504 comm="syz.0.2056" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.335160][ T43] audit: type=1400 audit(1785803140.116:1667): avc: denied { ioctl } for pid=11504 comm="syz.0.2056" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 202.570628][ T34] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 202.719719][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 202.724398][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 202.728978][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.733367][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.737536][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 202.742252][ T34] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 202.745804][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.752192][ T34] usb 8-1: config 0 descriptor?? [ 202.758665][T11506] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.839271][T11528] bridge1: entered promiscuous mode [ 202.974890][ T5744] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 202.977065][ T29] usb 8-1: USB disconnect, device number 17 [ 203.525704][T11544] syzkaller0: entered promiscuous mode [ 203.528204][T11544] syzkaller0: entered allmulticast mode [ 203.533103][T11544] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 203.850287][ T5744] Bluetooth: hci4: command tx timeout [ 203.858852][T11562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.308636][T11584] syzkaller0: entered promiscuous mode [ 204.310988][T11584] syzkaller0: entered allmulticast mode [ 204.795680][T11605] netlink: 'syz.3.2093': attribute type 1 has an invalid length. [ 205.545882][T11633] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 205.644020][ T43] audit: type=1400 audit(1785803143.446:1668): avc: denied { unmount } for pid=11272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 206.410861][T11664] tipc: Enabling of bearer rejected, failed to enable media [ 206.906443][T11690] tipc: Enabling of bearer rejected, failed to enable media [ 207.394413][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2129'. [ 207.447321][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 207.507538][T11713] tipc: Enabling of bearer rejected, failed to enable media [ 207.541123][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 209.317417][T11778] netlink: 'syz.2.2158': attribute type 1 has an invalid length. [ 209.322113][T11778] tipc: Enabling of bearer rejected, failed to enable media [ 209.355018][ T43] audit: type=1400 audit(1785803147.156:1669): avc: denied { write } for pid=11779 comm="syz.0.2159" path="socket:[33447]" dev="sockfs" ino=33447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.424285][ T43] audit: type=1400 audit(1785803147.226:1670): avc: denied { search } for pid=11785 comm="syz.0.2161" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 209.433546][ T43] audit: type=1400 audit(1785803147.226:1671): avc: denied { search } for pid=11785 comm="syz.0.2161" name="events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 209.442990][ T43] audit: type=1400 audit(1785803147.226:1672): avc: denied { search } for pid=11785 comm="syz.0.2161" name="task" dev="tracefs" ino=34172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 209.452277][ T43] audit: type=1400 audit(1785803147.226:1673): avc: denied { search } for pid=11785 comm="syz.0.2161" name="task_rename" dev="tracefs" ino=34174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 210.340152][ T34] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 210.513557][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.518999][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.526316][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 210.530436][ T34] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 210.533998][ T34] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.541778][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.545925][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.549415][ T34] usb 8-1: Product: syz [ 210.554021][ T34] usb 8-1: Manufacturer: syz [ 210.556176][ T34] usb 8-1: SerialNumber: syz [ 210.570459][T11821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.779981][T11821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.389907][T11821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.417646][T11853] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 211.420134][T11853] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 211.578393][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.583549][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.587379][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.591299][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.595031][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.596567][ T34] cdc_ncm 8-1:1.0: bind() failure [ 211.598218][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.604216][T11868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2195'. [ 211.615284][ T34] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 211.623838][ T34] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 211.636038][ T34] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 211.648849][ T34] usb 8-1: USB disconnect, device number 18 [ 212.444524][T11898] __nla_validate_parse: 13 callbacks suppressed [ 212.444537][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2206'. [ 212.509852][T11903] syzkaller0: left promiscuous mode [ 212.511630][T11903] syzkaller0: left allmulticast mode [ 212.869630][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 213.029620][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 213.033699][ T24] usb 8-1: config 0 has an invalid interface number: 84 but max is 0 [ 213.037219][ T24] usb 8-1: config 0 has no interface number 0 [ 213.040162][ T24] usb 8-1: config 0 interface 84 has no altsetting 0 [ 213.045811][ T24] usb 8-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=91.33 [ 213.051311][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.054731][ T24] usb 8-1: Product: syz [ 213.056485][ T24] usb 8-1: Manufacturer: syz [ 213.058485][ T24] usb 8-1: SerialNumber: syz [ 213.066814][ T24] usb 8-1: config 0 descriptor?? [ 213.100980][ T43] audit: type=1326 audit(1785803150.906:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.2.2204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7a19e019 code=0x7fc00000 [ 213.352125][ T24] uvcvideo 8-1:0.84: probe with driver uvcvideo failed with error -22 [ 213.363446][ T24] usb 8-1: USB disconnect, device number 19 [ 213.411174][T11921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 213.756760][T11936] cgroup: Unknown subsys name 'cpuset' [ 213.879387][ T43] audit: type=1400 audit(1785803151.676:1675): avc: denied { mount } for pid=11942 comm="syz.2.2223" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 213.931969][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2224'. [ 213.980634][ T43] audit: type=1400 audit(1785803151.786:1676): avc: denied { setopt } for pid=11947 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 213.990053][ T43] audit: type=1400 audit(1785803151.796:1677): avc: denied { module_request } for pid=11947 comm="syz.3.2225" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 214.040520][ T43] audit: type=1400 audit(1785803151.846:1678): avc: denied { accept } for pid=11947 comm="syz.3.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 214.242301][T11961] tipc: Enabling of bearer rejected, already enabled [ 214.363831][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2232'. [ 214.371422][T11972] netlink: 'syz.1.2232': attribute type 13 has an invalid length. [ 214.433690][T11980] syzkaller0: entered promiscuous mode [ 214.436120][T11980] syzkaller0: entered allmulticast mode [ 214.443191][T11980] tipc: Enabling of bearer rejected, already enabled [ 214.507422][T11989] Bluetooth: MGMT ver 1.23 [ 214.510231][T11989] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 215.456362][T12009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2247'. [ 215.480866][T12011] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 215.482903][T12009] netlink: 'syz.3.2247': attribute type 13 has an invalid length. [ 215.484172][T12011] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 215.503465][T12011] tipc: Enabling of bearer rejected, already enabled [ 215.666471][T12019] kvm_pr_unimpl_wrmsr: 40 callbacks suppressed [ 215.666558][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.701131][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.733338][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.765247][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.792000][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.815708][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.839285][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.864063][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.887644][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 215.911779][T12019] kvm: kvm [12018]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 216.517156][T12034] tipc: Enabling of bearer rejected, already enabled [ 216.522976][ T43] audit: type=1400 audit(1785803154.316:1679): avc: denied { setopt } for pid=12032 comm="syz.1.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.564187][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'. [ 216.566207][T12040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2264'. [ 216.579251][T12040] netlink: 'syz.3.2264': attribute type 13 has an invalid length. [ 216.635732][ T43] audit: type=1400 audit(1785803154.436:1680): avc: denied { write } for pid=12049 comm="syz.3.2267" name="functions" dev="configfs" ino=27601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.645731][ T43] audit: type=1400 audit(1785803154.456:1681): avc: denied { mount } for pid=12049 comm="syz.3.2267" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 216.648368][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2265'. [ 216.656527][T12050] zram0: detected capacity change from 0 to 8 [ 216.668479][ T43] audit: type=1400 audit(1785803154.466:1682): avc: denied { unmount } for pid=5740 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 216.731382][ T5744] Bluetooth: hci0: Zero size dump init pkt [ 216.760964][T12061] tipc: Enabling of bearer rejected, already enabled [ 216.788542][ T43] audit: type=1400 audit(1785803154.586:1683): avc: denied { mounton } for pid=12062 comm="syz.0.2273" path="/proc/139/task" dev="proc" ino=36216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 217.744289][T12085] tipc: Enabling of bearer rejected, already enabled [ 217.748265][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'. [ 217.758877][ T43] audit: type=1400 audit(1785803155.556:1684): avc: denied { read } for pid=12088 comm="syz.1.2285" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 217.865002][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2284'. [ 217.933268][T12112] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 217.935887][T12112] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 217.940683][T12112] tipc: Started in network mode [ 217.942455][T12112] tipc: Node identity 080211000001, cluster identity 4711 [ 217.944916][T12112] tipc: Enabled bearer , priority 0 [ 217.948564][T12112] tipc: Resetting bearer [ 218.103068][T12138] tipc: Enabling of bearer rejected, already enabled [ 218.133411][ T43] audit: type=1400 audit(1785803155.936:1685): avc: denied { write } for pid=12135 comm="syz.1.2306" name="os_desc" dev="configfs" ino=27604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.144951][ T43] audit: type=1400 audit(1785803155.936:1686): avc: denied { write } for pid=12135 comm="syz.1.2306" name="os_desc" dev="configfs" ino=27604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.299693][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 218.308253][T12157] tipc: Enabling of bearer rejected, already enabled [ 218.344522][T12161] netlink: 'syz.1.2318': attribute type 3 has an invalid length. [ 218.347723][T12161] netlink: 'syz.1.2318': attribute type 3 has an invalid length. [ 218.481655][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.485683][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 218.488500][ T24] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 218.492115][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.500075][ T24] usb 5-1: config 0 descriptor?? [ 218.533648][T12187] tipc: Enabling of bearer rejected, already enabled [ 218.598356][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 218.709045][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2333'. [ 218.777573][T12214] tipc: Enabling of bearer rejected, already enabled [ 218.912344][ T24] Bluetooth: Can't get version to change to load ram patch err [ 218.914969][ T24] Bluetooth: Loading patch file failed [ 218.917167][ T24] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 218.924336][ T24] usb 5-1: USB disconnect, device number 3 [ 218.939604][ T1351] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 218.940422][ T29] tipc: Node number set to 134418688 [ 219.002522][ T43] audit: type=1400 audit(1785803156.806:1687): avc: denied { wake_alarm } for pid=12221 comm="syz.1.2345" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.103471][ T1351] usb 8-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 219.108019][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.112941][ T1351] usb 8-1: Product: syz [ 219.114740][ T1351] usb 8-1: Manufacturer: syz [ 219.116722][ T1351] usb 8-1: SerialNumber: syz [ 219.155737][T12232] tipc: Enabling of bearer rejected, already enabled [ 219.301315][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'. [ 219.327775][ T1351] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.330141][ T1351] usb 8-1: MIDIStreaming interface descriptor not found [ 219.357581][T12248] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.359734][ T1351] usb 8-1: USB disconnect, device number 20 [ 219.360163][T12248] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.401465][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.473308][T12253] tipc: Enabling of bearer rejected, already enabled [ 219.489839][ T5815] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.494065][ T5815] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.497798][ T5815] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.501755][ T5815] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.513376][T12261] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2363'. [ 219.514918][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 219.556928][ T43] audit: type=1400 audit(1785803157.356:1688): avc: denied { ioctl } for pid=12266 comm="syz.0.2365" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 219.604400][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 219.823898][T12282] tipc: Enabling of bearer rejected, already enabled [ 220.293204][T12304] tipc: Enabling of bearer rejected, already enabled [ 220.455521][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 220.560176][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'. [ 220.569864][ T5885] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 220.610031][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.719625][ T5885] usb 8-1: Using ep0 maxpacket: 8 [ 220.724364][ T5885] usb 8-1: unable to get BOS descriptor or descriptor too short [ 220.728963][ T5885] usb 8-1: config 1 interface 0 altsetting 123 bulk endpoint 0x82 has invalid maxpacket 1023 [ 220.733486][ T5885] usb 8-1: config 1 interface 0 has no altsetting 0 [ 220.738832][ T5885] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.742768][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.746326][ T5885] usb 8-1: Product: syz [ 220.748309][ T5885] usb 8-1: Manufacturer: syz [ 220.750486][ T5885] usb 8-1: SerialNumber: syz [ 220.756573][T12306] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 220.771234][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.775786][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.779745][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.784311][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.787107][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.792702][ T24] usb 5-1: config 0 descriptor?? [ 220.967231][ T5885] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 220.977903][ T5885] usb 8-1: USB disconnect, device number 21 [ 221.200673][ C2] raw-gadget.2 gadget.0: ignoring, device is not running [ 221.209259][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 221.211943][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.220432][ T24] usb 5-1: USB disconnect, device number 4 [ 221.414956][T12332] tipc: Enabling of bearer rejected, already enabled [ 221.665724][T12353] tipc: Enabling of bearer rejected, already enabled [ 221.711831][T12361] warning: `syz.1.2401' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.722915][T12363] fuse: Bad value for 'fd' [ 221.959600][T12385] tipc: Enabling of bearer rejected, already enabled [ 222.239632][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 222.401421][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.405689][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.411563][ T34] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.416804][ T34] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.420799][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.425925][ T34] usb 5-1: config 0 descriptor?? [ 222.739703][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 222.739722][ T43] audit: type=1400 audit(1785803160.536:1690): avc: denied { mmap_zero } for pid=12414 comm="syz.1.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 222.782134][T12421] __nla_validate_parse: 4 callbacks suppressed [ 222.782156][T12421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2420'. [ 222.791442][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 222.903996][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2420'. [ 223.030363][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 223.032949][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.038575][ T34] usb 5-1: USB disconnect, device number 5 [ 223.689679][ T24] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 223.743249][T12455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2434'. [ 223.749754][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 223.841238][ T24] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.845202][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.853756][ T24] usb 8-1: config 0 descriptor?? [ 223.860317][ T24] cp210x 8-1:0.0: cp210x converter detected [ 223.860975][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'. [ 224.172156][ T43] audit: type=1400 audit(1785803161.976:1691): avc: denied { watch_reads } for pid=12466 comm="syz.2.2437" path="/596/blkio.bfq.dequeue" dev="tmpfs" ino=3058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 224.264203][ T24] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.266982][ T24] cp210x 8-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 224.269442][ T24] cp210x 8-1:0.0: GPIO initialisation failed: -71 [ 224.276303][ T24] usb 8-1: cp210x converter now attached to ttyUSB0 [ 224.280661][ T24] usb 8-1: USB disconnect, device number 22 [ 224.287623][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.290596][ T24] cp210x 8-1:0.0: device disconnected [ 224.569736][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 224.731787][ T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 224.734718][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.738363][ T9] usb 5-1: config 0 has no interface number 0 [ 224.740795][ T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 224.744481][ T9] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 224.748987][ T9] usb 5-1: config 0 interface 255 has no altsetting 0 [ 224.754405][ T9] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 224.757539][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.761150][ T9] usb 5-1: Product: syz [ 224.762604][ T9] usb 5-1: Manufacturer: syz [ 224.764294][ T9] usb 5-1: SerialNumber: syz [ 224.768029][ T9] usb 5-1: config 0 descriptor?? [ 224.772025][ T9] streamzap 5-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 224.806203][T12483] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 224.809675][T12483] SELinux: failed to load policy [ 224.845735][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2445'. [ 224.851914][T12485] syzkaller0: left promiscuous mode [ 224.853844][T12485] syzkaller0: left allmulticast mode [ 224.923713][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2447'. [ 224.963341][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2448'. [ 224.968900][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 225.373676][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.376554][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.379396][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.384151][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.388048][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.806875][T12502] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.809840][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.812331][T12502] bridge_slave_0: entered allmulticast mode [ 225.815462][T12502] bridge_slave_0: entered promiscuous mode [ 225.819061][T12502] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.821440][T12502] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.823765][T12502] bridge_slave_1: entered allmulticast mode [ 225.826543][T12502] bridge_slave_1: entered promiscuous mode [ 225.842372][T12502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.868293][T12502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.886795][T12502] team0: Port device team_slave_0 added [ 225.890221][T12502] team0: Port device team_slave_1 added [ 225.918395][T12502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.920997][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.930119][T12502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.934733][T12502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.937049][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.945244][T12502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.974911][T12502] hsr_slave_0: entered promiscuous mode [ 225.977631][T12502] hsr_slave_1: entered promiscuous mode [ 225.980501][T12502] debugfs: 'hsr0' already exists in 'hsr' [ 225.982912][T12502] Cannot create hsr debugfs directory [ 226.143233][ T5815] bridge_slave_1: left allmulticast mode [ 226.145901][ T5815] bridge_slave_1: left promiscuous mode [ 226.150717][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.157184][ T5815] bridge_slave_0: left allmulticast mode [ 226.159301][ T5815] bridge_slave_0: left promiscuous mode [ 226.163387][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.311376][ T5815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.317053][ T5815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.321397][ T5815] bond0 (unregistering): Released all slaves [ 226.330958][ T43] audit: type=1326 audit(1785803164.136:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.1.2453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164259e019 code=0x7fc00000 [ 226.357598][ T43] audit: type=1326 audit(1785803164.136:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.1.2453" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f164259e019 code=0x7fc00000 [ 226.446294][ T43] audit: type=1326 audit(1785803164.246:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.1.2453" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f164253f399 code=0x7fc00000 [ 226.463691][ T43] audit: type=1326 audit(1785803164.246:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.1.2453" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f164253f45d code=0x7fc00000 [ 226.473952][ T43] audit: type=1326 audit(1785803164.246:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.1.2453" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f164259e019 code=0x7fc00000 [ 226.518726][ T5815] tipc: Disabling bearer [ 226.524905][ T5815] tipc: Left network mode [ 226.560021][ T43] audit: type=1400 audit(1785803164.366:1697): avc: denied { write } for pid=12532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.659439][ T43] audit: type=1400 audit(1785803164.456:1698): avc: denied { write } for pid=12535 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.726594][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 226.839401][ T43] audit: type=1400 audit(1785803164.636:1699): avc: denied { write } for pid=12540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.853589][ T5815] hsr_slave_0: left promiscuous mode [ 226.856645][ T5815] hsr_slave_1: left promiscuous mode [ 226.998816][ T5815] team0 (unregistering): Port device team_slave_1 removed [ 227.015923][ T5815] team0 (unregistering): Port device team_slave_0 removed [ 227.147676][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.355996][ T34] usb 5-1: USB disconnect, device number 6 [ 227.449468][T12502] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.451992][ T64] Bluetooth: hci3: command tx timeout [ 227.456758][T12502] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.459503][T12502] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.466112][T12502] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.469359][T12502] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.483769][T12502] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.487034][T12502] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.502083][T12502] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.566392][T12502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.583278][T12502] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.593461][T12568] kvm_pr_unimpl_wrmsr: 21 callbacks suppressed [ 227.593484][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.596599][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.602359][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.616540][ T5815] IPVS: stop unused estimator thread 0... [ 227.623851][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.626934][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.628229][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.661563][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.690355][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.692458][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.699022][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.720678][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.750821][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.780103][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.809867][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.839832][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.870334][T12568] kvm: kvm [12567]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 227.904458][T12598] __nla_validate_parse: 5 callbacks suppressed [ 227.904477][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2461'. [ 227.912052][T12598] netlink: 'syz.3.2461': attribute type 13 has an invalid length. [ 227.942884][T12502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.995483][T12502] veth0_vlan: entered promiscuous mode [ 228.007344][T12502] veth1_vlan: entered promiscuous mode [ 228.029546][T12502] veth0_macvtap: entered promiscuous mode [ 228.035750][T12502] veth1_macvtap: entered promiscuous mode [ 228.052958][T12502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.065666][T12502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.072761][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2463'. [ 228.122563][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.130143][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.168748][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.174116][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.179705][ T5549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.185010][ T5549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.211933][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.215308][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.390125][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 228.461226][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 228.461265][ T43] audit: type=1400 audit(1785803166.266:1707): avc: denied { bind } for pid=12607 comm="syz.2.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 228.469733][ T43] audit: type=1400 audit(1785803166.266:1708): avc: denied { name_bind } for pid=12607 comm="syz.2.2450" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 228.476146][ T43] audit: type=1400 audit(1785803166.266:1709): avc: denied { node_bind } for pid=12607 comm="syz.2.2450" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 228.541771][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 228.545121][ T24] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 228.550504][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 228.553636][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.556233][ T24] usb 8-1: Product: syz [ 228.557638][ T24] usb 8-1: Manufacturer: syz [ 228.559153][ T24] usb 8-1: SerialNumber: syz [ 228.651752][ T1351] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 228.772370][ T24] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 228.801412][ T1351] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 228.805369][ T1351] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.817110][ T1351] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 228.821231][ T1351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.824538][ T1351] usb 5-1: Product: syz [ 228.826326][ T1351] usb 5-1: Manufacturer: syz [ 228.828295][ T1351] usb 5-1: SerialNumber: syz [ 228.833182][ T1351] usb 5-1: config 0 descriptor?? [ 228.973128][ T24] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 228.977729][ T24] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 229.043593][ T1351] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 229.048859][ T1351] usb 5-1: USB disconnect, device number 7 [ 229.374290][ T24] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 229.446624][ T24] usb 8-1: USB disconnect, device number 23 [ 229.484225][ T5747] udevd[5747]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.532133][ T64] Bluetooth: hci3: command tx timeout [ 229.710848][ T43] audit: type=1400 audit(1785803167.516:1710): avc: denied { bpf } for pid=12630 comm="syz.0.2470" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.719975][ T43] audit: type=1400 audit(1785803167.516:1711): avc: denied { perfmon } for pid=12630 comm="syz.0.2470" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.968431][T12635] netlink: 'syz.3.2471': attribute type 13 has an invalid length. [ 230.079018][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 230.530753][ T1351] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 230.691669][ T1351] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 230.695049][ T1351] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.700760][ T1351] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 230.703718][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.706267][ T1351] usb 8-1: Product: syz [ 230.707598][ T1351] usb 8-1: Manufacturer: syz [ 230.709094][ T1351] usb 8-1: SerialNumber: syz [ 230.712730][ T1351] usb 8-1: config 0 descriptor?? [ 230.921232][ T1351] streamzap 8-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 230.925661][ T1351] usb 8-1: USB disconnect, device number 24 [ 231.018333][ T1045] usb 6-1: USB disconnect, device number 12 [ 231.058421][T12655] netlink: 'syz.2.2481': attribute type 13 has an invalid length. [ 231.082538][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 231.089318][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 231.098649][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 231.102868][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 231.108570][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.222784][ T43] audit: type=1400 audit(1785803169.026:1712): avc: denied { bind } for pid=12666 comm="syz.0.2486" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.234733][ T43] audit: type=1400 audit(1785803169.026:1713): avc: denied { name_bind } for pid=12666 comm="syz.0.2486" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 231.243699][ T43] audit: type=1400 audit(1785803169.026:1714): avc: denied { node_bind } for pid=12666 comm="syz.0.2486" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 231.559182][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.561832][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.564226][T12658] bridge_slave_0: entered allmulticast mode [ 231.567318][T12658] bridge_slave_0: entered promiscuous mode [ 231.571566][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.573877][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.576180][T12658] bridge_slave_1: entered allmulticast mode [ 231.578823][T12658] bridge_slave_1: entered promiscuous mode [ 231.593804][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.598241][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.610423][ T64] Bluetooth: hci3: command tx timeout [ 231.613454][T12658] team0: Port device team_slave_0 added [ 231.615447][T12658] team0: Port device team_slave_1 added [ 231.633597][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.636577][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.647624][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.654101][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.657089][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.667791][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.700502][T12658] hsr_slave_0: entered promiscuous mode [ 231.703908][T12658] hsr_slave_1: entered promiscuous mode [ 231.822950][T12658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.953130][T12658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.062866][T12658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.189127][T12658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.301480][T12658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.305489][T12658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.308243][T12658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.312738][T12658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.315478][T12658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.319395][T12658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.322112][T12658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.325785][T12658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.385584][T12658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.396323][T12658] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.403012][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.405860][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.415742][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.418255][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.489685][ T1351] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 232.638943][ T43] audit: type=1400 audit(1785803170.436:1715): avc: denied { block_suspend } for pid=12727 comm="syz.2.2500" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 232.651020][ T1351] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 232.654391][ T1351] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.662481][ T1351] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 232.666433][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.670134][ T1351] usb 8-1: Product: syz [ 232.671865][ T1351] usb 8-1: Manufacturer: syz [ 232.674362][ T1351] usb 8-1: SerialNumber: syz [ 232.678640][ T1351] usb 8-1: config 0 descriptor?? [ 232.717550][T12658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.755462][T12658] veth0_vlan: entered promiscuous mode [ 232.763288][T12658] veth1_vlan: entered promiscuous mode [ 232.791832][T12658] veth0_macvtap: entered promiscuous mode [ 232.801746][T12658] veth1_macvtap: entered promiscuous mode [ 232.816222][T12658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.830295][T12658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.880114][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.892406][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.894837][ T1351] streamzap 8-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 232.904367][ T1351] usb 8-1: USB disconnect, device number 25 [ 232.960441][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.964671][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.974424][ T5549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.980026][ T5549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.001708][ T6018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.005050][ T6018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.067644][ T43] audit: type=1400 audit(1785803170.866:1716): avc: denied { lock } for pid=12748 comm="syz.1.2480" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.210133][ T64] Bluetooth: hci1: command tx timeout [ 233.228858][T12755] syzkaller0: entered promiscuous mode [ 233.231342][T12755] syzkaller0: entered allmulticast mode [ 233.236288][T12755] tipc: Started in network mode [ 233.238506][T12755] tipc: Node identity 0e6d73127594, cluster identity 4711 [ 233.248098][T12755] tipc: Enabled bearer , priority 0 [ 233.253704][T12754] tipc: Resetting bearer [ 233.271918][T12754] tipc: Disabling bearer [ 233.391699][T12759] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 233.413394][T12759] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 233.689718][ T64] Bluetooth: hci3: command tx timeout [ 234.389106][T12790] syzkaller0: entered promiscuous mode [ 234.391582][T12790] syzkaller0: entered allmulticast mode [ 234.396507][T12790] tipc: Enabling of bearer rejected, already enabled [ 234.483152][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2523'. [ 234.564663][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2523'. [ 234.687402][T12803] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2525'. [ 234.866409][T12815] syzkaller0: entered promiscuous mode [ 234.868269][T12815] syzkaller0: entered allmulticast mode [ 235.289613][ T64] Bluetooth: hci1: command tx timeout [ 235.887834][T12836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2539'. [ 235.894135][T12836] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 235.897082][T12836] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 235.903467][T12836] tipc: Resetting bearer [ 236.016997][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 236.111522][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2541'. [ 236.917677][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 236.917692][ T43] audit: type=1400 audit(1785803174.716:1718): avc: denied { audit_write } for pid=12856 comm="syz.1.2545" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.928816][ T43] audit: type=1400 audit(1785803174.726:1719): avc: denied { watch watch_reads } for pid=12856 comm="syz.1.2545" path="/proc/37/task" dev="proc" ino=41095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 237.001938][ T43] audit: type=1400 audit(1785803174.806:1720): avc: denied { read } for pid=12860 comm="syz.1.2547" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 237.011201][ T43] audit: type=1400 audit(1785803174.806:1721): avc: denied { open } for pid=12860 comm="syz.1.2547" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 237.058125][T12864] dummy_hcd dummy_hcd.0: remove, state 4 [ 237.060781][T12864] usb usb5: USB disconnect, device number 1 [ 237.074359][T12864] dummy_hcd dummy_hcd.0: stopped [ 237.077084][T12864] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 237.108115][ T43] audit: type=1400 audit(1785803174.906:1722): avc: denied { name_bind } for pid=12865 comm="syz.2.2549" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 237.215482][T12870] syzkaller0: entered promiscuous mode [ 237.217964][T12870] syzkaller0: entered allmulticast mode [ 237.379712][ T64] Bluetooth: hci1: command tx timeout [ 237.504748][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 237.523281][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 238.016425][T12882] xt_CONNSECMARK: invalid mode: 0 [ 238.224470][T12884] netlink: 'syz.1.2555': attribute type 13 has an invalid length. [ 238.391731][T12890] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 238.623253][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.629112][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.632804][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.639370][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.645515][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.970952][T12901] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.973338][T12901] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.975661][T12901] bridge_slave_0: entered allmulticast mode [ 238.978340][T12901] bridge_slave_0: entered promiscuous mode [ 238.983953][T12901] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.986309][T12901] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.988651][T12901] bridge_slave_1: entered allmulticast mode [ 238.991816][T12901] bridge_slave_1: entered promiscuous mode [ 239.006818][T12901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.011356][T12901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.025938][T12901] team0: Port device team_slave_0 added [ 239.029151][T12901] team0: Port device team_slave_1 added [ 239.043596][T12901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.046321][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.054682][T12901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.059920][T12901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.062648][T12901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.072760][T12901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.098248][T12901] hsr_slave_0: entered promiscuous mode [ 239.101183][T12901] hsr_slave_1: entered promiscuous mode [ 239.103267][T12901] debugfs: 'hsr0' already exists in 'hsr' [ 239.105068][T12901] Cannot create hsr debugfs directory [ 239.212514][T12901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.292330][T12901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.377112][T12901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.442725][T12926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2567'. [ 239.448397][T12926] netlink: 'syz.0.2567': attribute type 13 has an invalid length. [ 239.451737][ T64] Bluetooth: hci1: command tx timeout [ 239.467489][T12901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.509720][ T5526] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 239.537363][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2568'. [ 239.633547][T12901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.639368][T12901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.642827][T12901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.648389][T12901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.651821][T12901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.657657][T12901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.661593][T12901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.664807][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2568'. [ 239.669662][ T5526] usb 6-1: Using ep0 maxpacket: 16 [ 239.672428][T12901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.680223][ T5526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.684764][ T5526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.688756][ T5526] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 239.695561][ T5526] usb 6-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 239.706883][ T5526] usb 6-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 239.711118][ T5526] usb 6-1: Product: syz [ 239.717568][ T5526] usb 6-1: config 0 descriptor?? [ 239.745977][T12901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.762881][T12901] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.772368][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.775472][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.786330][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.789442][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.062252][T12901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.091696][T12901] veth0_vlan: entered promiscuous mode [ 240.097799][T12901] veth1_vlan: entered promiscuous mode [ 240.121759][T12901] veth0_macvtap: entered promiscuous mode [ 240.127398][T12901] veth1_macvtap: entered promiscuous mode [ 240.127988][ T5526] hid-generic 0003:045E:10DA.000B: ignoring exceeding usage max [ 240.132699][ T5526] hid-generic 0003:045E:10DA.000B: ignoring exceeding usage max [ 240.137039][ T5526] hid-generic 0003:045E:10DA.000B: unknown main item tag 0x0 [ 240.138725][T12901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.139756][ T5526] hid-generic 0003:045E:10DA.000B: unknown main item tag 0x0 [ 240.144862][ T5526] hid-generic 0003:045E:10DA.000B: unbalanced collection at end of report description [ 240.148429][ T5526] hid-generic 0003:045E:10DA.000B: probe with driver hid-generic failed with error -22 [ 240.148947][T12901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.171771][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.176261][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.220104][T12523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.224839][T12523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.244577][ T6030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.249307][ T6030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.276041][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.279051][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.328682][ T5823] usb 6-1: USB disconnect, device number 13 [ 240.387841][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2563'. [ 240.729672][ T64] Bluetooth: hci0: command tx timeout [ 240.860312][T12972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2575'. [ 240.865072][T12972] netlink: 'syz.3.2575': attribute type 13 has an invalid length. [ 240.917311][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 240.927010][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2577'. [ 241.896387][T12998] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2585'. [ 241.901580][T12998] gretap0: entered promiscuous mode [ 241.906283][T12998] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2585'. [ 241.909202][T12998] 0ªî{X¹¦: renamed from gretap0 [ 241.914836][T12998] 0ªî{X¹¦: left promiscuous mode [ 241.916718][T12998] 0ªî{X¹¦: entered allmulticast mode [ 241.920406][T12998] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 242.064218][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'. [ 242.150089][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2592'. [ 242.160230][ T1351] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 242.321847][ T1351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.326271][ T1351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.329415][ T1351] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.335033][ T1351] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.338341][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.343235][ T1351] usb 8-1: config 0 descriptor?? [ 242.820407][ T64] Bluetooth: hci0: command tx timeout [ 242.953597][ T1351] usbhid 8-1:0.0: can't add hid device: -71 [ 242.956483][ T1351] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 242.969837][ T1351] usb 8-1: USB disconnect, device number 26 [ 243.592606][T13069] binder_alloc: 13068: binder_alloc_buf, no vma [ 243.594748][ T43] audit: type=1400 audit(1785803181.396:1723): avc: denied { set_context_mgr } for pid=13068 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 243.608585][ T43] audit: type=1400 audit(1785803181.396:1724): avc: denied { call } for pid=13068 comm="syz.0.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 243.710616][T13078] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.164211][T13084] can: request_module (can-proto-0) failed. [ 244.441488][ T43] audit: type=1400 audit(1785803182.246:1725): avc: denied { watch } for pid=13089 comm="syz.1.2617" path="/37/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 244.449264][ T43] audit: type=1400 audit(1785803182.246:1726): avc: denied { watch_sb } for pid=13089 comm="syz.1.2617" path="/37/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 244.615100][T13100] netlink: 'syz.0.2622': attribute type 13 has an invalid length. [ 244.889685][ T64] Bluetooth: hci0: command tx timeout [ 245.696988][T13124] netlink: 'syz.1.2633': attribute type 13 has an invalid length. [ 245.735737][ T43] audit: type=1400 audit(1785803183.536:1727): avc: denied { name_bind } for pid=13128 comm="syz.0.2635" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 246.772289][T13152] netlink: 'syz.0.2646': attribute type 13 has an invalid length. [ 246.796750][T13154] syz.3.2647 (13154) used obsolete PPPIOCDETACH ioctl [ 246.970258][ T64] Bluetooth: hci0: command tx timeout [ 247.873983][T13177] netlink: 'syz.1.2657': attribute type 13 has an invalid length. [ 247.990709][T13196] SELinux: syz.1.2665 (13196) wrote to checkreqprot. This is no longer supported. [ 248.946600][T13210] netlink: 'syz.0.2672': attribute type 13 has an invalid length. [ 248.953006][T13213] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 248.977920][T13213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 249.209168][T13232] ip_tables: iptables: counters copy to user failed while replacing table [ 250.250929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 250.640070][T13247] __nla_validate_parse: 3 callbacks suppressed [ 250.640089][T13247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2685'. [ 250.647391][T13247] netlink: 'syz.3.2685': attribute type 13 has an invalid length. [ 250.939732][T13253] input: syz0 as /devices/virtual/input/input26 [ 251.171647][ T43] audit: type=1400 audit(1785803188.976:1728): avc: denied { write } for pid=13263 comm="syz.2.2692" name="functions" dev="configfs" ino=27601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 251.919073][T13274] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2695'. [ 251.924299][T13274] netlink: 'syz.3.2695': attribute type 13 has an invalid length. [ 252.212303][T13289] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 252.216884][T13289] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 252.220383][T13289] CPU: 0 UID: 0 PID: 13289 Comm: syz.0.2701 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.224717][T13289] Tainted: [L]=SOFTLOCKUP [ 252.226513][T13289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.230680][T13289] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 252.233082][T13289] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 252.240625][T13289] RSP: 0018:ffffc90003a17b48 EFLAGS: 00010246 [ 252.242990][T13289] RAX: dffffc0000000000 RBX: ffff88802be38c00 RCX: ffffc90030548000 [ 252.246221][T13289] RDX: 0000000000000000 RSI: ffffffff87d05827 RDI: ffff88802be39290 [ 252.249577][T13289] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 252.252851][T13289] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805f57a050 [ 252.256122][T13289] R13: 0000000000000000 R14: ffff88802d37e4f1 R15: ffff88802d37e008 [ 252.259409][T13289] FS: 00007fe39e1126c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 252.263039][T13289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.265806][T13289] CR2: 00007fe39d187640 CR3: 0000000034337000 CR4: 0000000000352ef0 [ 252.269154][T13289] Call Trace: [ 252.269616][ T5843] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 252.270451][T13289] [ 252.270464][T13289] gadget_bind_driver+0x4ac/0xbf0 [ 252.276175][T13289] ? __pfx_gadget_bind_driver+0x10/0x10 [ 252.278284][T13289] really_probe+0x241/0xa60 [ 252.279881][T13289] __driver_probe_device+0x20e/0x450 [ 252.282126][T13289] driver_probe_device+0x4a/0x140 [ 252.284265][T13289] __driver_attach+0x21f/0x5b0 [ 252.286318][T13289] ? __pfx___driver_attach+0x10/0x10 [ 252.288575][T13289] bus_for_each_dev+0x13e/0x1d0 [ 252.290654][T13289] ? __pfx_bus_for_each_dev+0x10/0x10 [ 252.292935][T13289] ? bus_add_driver+0x2b5/0x5b0 [ 252.295013][T13289] bus_add_driver+0x305/0x5b0 [ 252.296977][T13289] driver_register+0x1e2/0x360 [ 252.298922][T13289] ? rcu_is_watching+0x12/0xc0 [ 252.301071][T13289] usb_gadget_register_driver_owner+0x132/0x210 [ 252.303680][T13289] raw_ioctl+0x1a85/0x2b80 [ 252.305560][T13289] ? __pfx_raw_ioctl+0x10/0x10 [ 252.307637][T13289] ? selinux_file_ioctl+0x13b/0x290 [ 252.310038][T13289] ? selinux_file_ioctl+0xb6/0x290 [ 252.312222][T13289] ? __pfx_raw_ioctl+0x10/0x10 [ 252.314280][T13289] __x64_sys_ioctl+0x18e/0x210 [ 252.316348][T13289] do_syscall_64+0x115/0x870 [ 252.318410][T13289] ? clear_bhb_loop+0x40/0x90 [ 252.320400][T13289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.322895][T13289] RIP: 0033:0x7fe39d19dcab [ 252.324818][T13289] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 252.332788][T13289] RSP: 002b:00007fe39e10ff00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.336230][T13289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe39d19dcab [ 252.339512][T13289] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 252.342854][T13289] RBP: 00007fe39e110fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 252.346095][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.349323][T13289] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.352593][T13289] [ 252.353910][T13289] Modules linked in: [ 252.356626][T13289] ---[ end trace 0000000000000000 ]--- [ 252.359218][T13289] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 252.368732][T13289] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 252.382477][T13289] RSP: 0018:ffffc90003a17b48 EFLAGS: 00010246 [ 252.386997][T13289] RAX: dffffc0000000000 RBX: ffff88802be38c00 RCX: ffffc90030548000 [ 252.393078][T13289] RDX: 0000000000000000 RSI: ffffffff87d05827 RDI: ffff88802be39290 [ 252.400412][T13289] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 252.407846][T13289] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805f57a050 [ 252.414978][T13289] R13: 0000000000000000 R14: ffff88802d37e4f1 R15: ffff88802d37e008 [ 252.419687][T13289] FS: 00007fe39e1126c0(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 252.423486][T13289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.426260][T13289] CR2: 00007fe39d187640 CR3: 0000000034337000 CR4: 0000000000352ef0 [ 252.429749][T13289] Kernel panic - not syncing: Fatal exception [ 252.433056][T13289] Kernel Offset: disabled [ 252.434908][T13289] Rebooting in 86400 seconds..