last executing test programs: 3m1.843156066s ago: executing program 3 (id=4149): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005bd000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000018c0)="66b9a80900000f3266b9800000c00f326635008000000f300f30ba2100b80300ef66b8f19700000f23d80f21f86635400000100f23f80f2304b8c30a8ee8660f15290f0666b8004800000f23d00f21f86635300000060f23f8", 0x59}], 0x1, 0x18, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001a00)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001a40)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m1.791691743s ago: executing program 3 (id=4152): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, @val=@netfilter={0x5f3feda90979a21c, 0x0, 0x4ad6}}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004d00), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004d40)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004d80)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000004dc0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000004f40)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x7}, {0xd, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xf, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff}, {0x7, 0xab5d, 0x47b, 0x7e000000}}}]}]}]}}]}, 0x74}}, 0x0) write$tun(r0, &(0x7f0000004fc0)=ANY=[], 0x46) 3m1.790997852s ago: executing program 3 (id=4154): syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x4bb, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000980)=""/4112) 3m0.413140181s ago: executing program 3 (id=4164): mkdirat(0xffffffffffffff9c, &(0x7f0000003800)='./file0\x00', 0x0) mount$bind(&(0x7f0000003840)='.\x00', &(0x7f0000003880)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000038c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000003900)='./file0/../file0\x00', &(0x7f0000003940)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 3m0.365678935s ago: executing program 3 (id=4166): openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400), 0x1, 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="009489c2a0e50c6b9590d4c7790f3f294b3efe7720ce04f1454e9d704706af0c759d6fb692b854eb868eb5616539141fc949e26e484198a23bd0622703c0dfd9b351cb676fe7a34ced4c9d3378f70e0ffd55a1af32127a5f5661bf31a1fbe2494ce1ba", 0x63}], 0x1, 0x2, 0x80000000, 0xa) 2m59.752185896s ago: executing program 3 (id=4172): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], 0x0, 0x0, 0x2, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0) 2m59.606867531s ago: executing program 32 (id=4172): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], 0x0, 0x0, 0x2, 0x1}}, 0x40) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r3, 0x0) 1.442055681s ago: executing program 0 (id=7193): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r0, @ANYBLOB="01002dbd7000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="18003080140001800800040059400000080001000200000068013080840001800c00050008000000000000000c000500000800000000000028000380080002000000000008000200020000000c0004000201aaaaaaaaaaaa06000100ffff000014000380060001000000000008000200000080000800040006000000050002000300000005000200020000000c0005000000000070700d0008000400000000002400030082274fe44bb67498c523a9b0ec7c0f031a2f385e167dc28e729e665ca05b3b846400018008000400050000000c0005000600000000000000100003800c0004000203aaaaaaaaaaaa0500020000000000080001"], 0x1a4}}, 0x0) 1.391192416s ago: executing program 0 (id=7194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="010530000a0028000600000060000000003011402001000000000000"], 0x64) 1.261913847s ago: executing program 0 (id=7198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(0xffffffffffffffff, 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000200000100001c1122334400080000000500050000000500060008"], 0x4a) 1.228857337s ago: executing program 2 (id=7201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}, {0x2, 0x5, 0x8}]}]}, {0x0, [0x61, 0x0, 0x0, 0x2e]}}, 0x0, 0x42, 0x0, 0x8}, 0x28) 1.171595871s ago: executing program 2 (id=7203): unshare(0x8040480) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000440)) 1.171095929s ago: executing program 2 (id=7205): socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003100)={{r1}, &(0x7f0000003140), &(0x7f0000003180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000031c0)={{r1, 0xffffffffffffffff}, &(0x7f0000003200)=0x2, &(0x7f0000003240)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003280)={r2, &(0x7f00000032c0)}, 0x20) 1.111726666s ago: executing program 2 (id=7206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="010530000a0028000600000060000000003011402001000000000000"], 0x64) 1.111172978s ago: executing program 0 (id=7207): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000c00d2bc992ede8045bb00ba"], 0x28}}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 1.110589663s ago: executing program 1 (id=7209): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="1c0000005e00010000000000000000000000000002", 0x15}], 0x1}, 0x0) 1.052077342s ago: executing program 0 (id=7210): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0xdc, r0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x4e, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a521da0}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70bf969a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c1072af}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.051645401s ago: executing program 1 (id=7212): pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) 1.051574463s ago: executing program 0 (id=7213): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 991.641476ms ago: executing program 2 (id=7216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000001c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000200000100001c1122334400080000000500050000000500060008"], 0x4a) 791.933056ms ago: executing program 2 (id=7220): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000780)={'syzkaller1\x00', 0xc201}) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000800)=0x9, 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 727.816526ms ago: executing program 4 (id=7222): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x2, &(0x7f00000001c0)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 659.143996ms ago: executing program 4 (id=7223): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 658.913424ms ago: executing program 4 (id=7224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="010530000a0028000600000060000000003011402001000000000000"], 0x64) 441.84547ms ago: executing program 4 (id=7225): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r0, @ANYBLOB="01002dbd7000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="18003080140001800800040059400000080001000200000068013080840001800c00050008000000000000000c000500000800000000000028000380080002000000000008000200020000000c0004000201aaaaaaaaaaaa06000100ffff000014000380060001000000000008000200000080000800040006000000050002000300000005000200020000000c0005000000000070700d0008000400000000002400030082274fe44bb67498c523a9b0ec7c0f031a2f385e167dc2"], 0x1a4}}, 0x0) 441.420258ms ago: executing program 4 (id=7226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0xdc, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa4, 0x8, 0x0, 0x1, [{0x4e, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x4}, {0x4}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xffffffff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a521da0}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70bf969a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c1072af}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 391.946019ms ago: executing program 4 (id=7227): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0xc00, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000300)='\x04]{!\x00', 0x5) setsockopt$inet_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000340)=0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0x1007, &(0x7f0000000540)=""/4103, 0x40f00, 0x58, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$radio(&(0x7f0000001580), 0x2, 0x2) r6 = syz_open_dev$radio(&(0x7f00000015c0), 0x2, 0x2) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000001600)={0x0, 0xffffffffffffff08}) sched_getattr(0x0, 0x0, 0x0, 0x0) read(r6, &(0x7f0000001640)=""/108, 0x6c) r7 = syz_open_dev$vim2m(&(0x7f00000016c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000001700)={0xf0f000, 0x1}) listns(&(0x7f0000001740)={0x20, 0x0, 0x5, 0x80}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYRES16=r5], 0x54}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 171.907778ms ago: executing program 1 (id=7228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000001c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000200000100001c1122334400080000000500050000000500060008"], 0x4a) 171.739826ms ago: executing program 1 (id=7229): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x48, r0, 0xc25, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x240488c1}, 0x800) 59.397452ms ago: executing program 1 (id=7230): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020605000000000000000000000000000c00d2bc992ede8045bb00ba"], 0x28}}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) 0s ago: executing program 1 (id=7231): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) kernel console output (not intermixed with test programs): has an invalid length. [ 385.557939][T18542] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4871'. [ 385.741780][T18551] TCP: TCP_TX_DELAY enabled [ 385.926046][T18570] fuse: Unknown parameter '0x0000000000000003' [ 385.953894][T18574] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4883'. [ 386.270921][ T1809] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 386.428781][ T1809] usb 7-1: Using ep0 maxpacket: 32 [ 386.429333][ T1809] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 386.430637][ T1809] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 386.430662][ T1809] usb 7-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 386.432193][ T1809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.432205][ T1809] usb 7-1: Product: syz [ 386.432213][ T1809] usb 7-1: Manufacturer: syz [ 386.432220][ T1809] usb 7-1: SerialNumber: syz [ 386.438955][ T1809] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 386.438993][ T1809] imon 7-1:155.0: unable to initialize intf0, err -19 [ 386.439001][ T1809] imon:imon_probe: failed to initialize context! [ 386.439007][ T1809] imon 7-1:155.0: unable to register, err -19 [ 386.558776][ T6154] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 386.721790][T18593] : renamed from bond0 (while UP) [ 386.740802][ T6154] usb 5-1: not running at top speed; connect to a high speed hub [ 386.740835][ T6154] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 386.741786][ T6154] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.741847][ T6154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.757734][ T6154] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 386.991624][ T43] audit: type=1400 audit(1792763707.593:2627): avc: denied { execute } for pid=18614 comm="syz.1.4904" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=65522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 387.060836][T18622] xt_hashlimit: size too large, truncated to 1048576 [ 387.149704][ T6154] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 387.150046][ T6154] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 387.150084][ T6154] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 387.151675][ T6154] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 387.163833][ T6154] usb 5-1: USB disconnect, device number 82 [ 387.290789][ T43] audit: type=1326 audit(1792763707.893:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.290993][ T43] audit: type=1326 audit(1792763707.893:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.291177][ T43] audit: type=1326 audit(1792763707.893:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.291260][ T43] audit: type=1326 audit(1792763707.893:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.291395][ T43] audit: type=1326 audit(1792763707.893:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.291524][ T43] audit: type=1326 audit(1792763707.893:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.291633][ T43] audit: type=1326 audit(1792763707.893:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.291760][ T43] audit: type=1326 audit(1792763707.893:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18635 comm="syz.1.4911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff67ed9f559 code=0x7ffc0000 [ 387.445239][T18645] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 387.530617][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4917'. [ 387.556499][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4918'. [ 387.556523][T18651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4918'. [ 387.671072][T18651] fuse: fd is not a fuse device [ 388.316892][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4931'. [ 388.638684][ T5928] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 388.754337][T18699] netlink: 'syz.1.4939': attribute type 12 has an invalid length. [ 388.754352][T18699] netlink: 'syz.1.4939': attribute type 29 has an invalid length. [ 388.754360][T18699] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4939'. [ 388.789229][ T5928] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.790991][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.791009][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.791022][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 388.791042][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.792405][ T5928] usb 5-1: config 0 descriptor?? [ 389.142833][ T64] usb 7-1: USB disconnect, device number 60 [ 389.202470][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 389.202563][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 389.216348][ T5928] usb 5-1: USB disconnect, device number 83 [ 389.490396][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 389.490410][ T43] audit: type=1400 audit(1792763710.093:2643): avc: denied { mounton } for pid=18710 comm="syz.4.4943" path="/192/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 389.715053][T18719] fuse: fd is not a fuse device [ 389.865062][ T43] audit: type=1400 audit(1792763710.463:2644): avc: denied { write } for pid=18728 comm="syz.2.4951" name="control" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 389.956885][T18738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4955'. [ 390.124128][ T43] audit: type=1400 audit(1792763710.723:2645): avc: denied { append } for pid=18751 comm="syz.4.4959" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 390.429141][T18765] tmpfs: Bad value for 'nr_inodes' [ 390.748835][ T3304] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 390.800867][T18778] overlayfs: failed to clone upperpath [ 390.867062][T18780] fuse: fd is not a fuse device [ 390.908694][ T3304] usb 7-1: Using ep0 maxpacket: 32 [ 390.909367][ T3304] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 390.910216][ T3304] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.910237][ T3304] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.912671][ T3304] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 390.912684][ T3304] usb 7-1: Product: syz [ 390.912691][ T3304] usb 7-1: Manufacturer: syz [ 390.912699][ T3304] usb 7-1: SerialNumber: syz [ 390.913903][ T3304] usb 7-1: config 0 descriptor?? [ 390.920274][ T3304] hub 7-1:0.0: bad descriptor, ignoring hub [ 390.920286][ T3304] hub 7-1:0.0: probe with driver hub failed with error -5 [ 390.972195][T18787] overlayfs: failed to clone upperpath [ 391.119068][T18799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4978'. [ 391.228904][ T5870] usb 7-1: USB disconnect, device number 61 [ 391.307672][T18810] Process accounting resumed [ 391.568837][ T5782] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 391.609433][ T3304] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 391.728912][ T5782] usb 7-1: Using ep0 maxpacket: 32 [ 391.729616][ T5782] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.730503][ T5782] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.730536][ T5782] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.733043][ T5782] usb 7-1: string descriptor 0 read error: -22 [ 391.733097][ T5782] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.734345][ T5782] usb 7-1: config 0 descriptor?? [ 391.735450][ T5782] hub 7-1:0.0: bad descriptor, ignoring hub [ 391.735462][ T5782] hub 7-1:0.0: probe with driver hub failed with error -5 [ 391.760984][ T3304] usb 5-1: Using ep0 maxpacket: 32 [ 391.765597][ T3304] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 391.771444][ T3304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.771461][ T3304] usb 5-1: config 0 has no interfaces? [ 391.773659][ T3304] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 391.773680][ T3304] usb 5-1: Product: syz [ 391.773693][ T3304] usb 5-1: Manufacturer: syz [ 391.773701][ T3304] usb 5-1: SerialNumber: syz [ 391.778296][ T3304] usb 5-1: config 0 descriptor?? [ 391.894939][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4995'. [ 391.903546][T18835] bond1: option ad_actor_sys_prio: invalid value (0) [ 391.903561][T18835] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 391.904418][T18835] bond1 (unregistering): Released all slaves [ 391.984305][ T3304] usb 5-1: USB disconnect, device number 84 [ 392.058946][ T5782] usb 7-1: USB disconnect, device number 62 [ 392.237724][T18859] ip6gre2: entered promiscuous mode [ 392.375925][T18865] netlink: 'syz.4.5009': attribute type 10 has an invalid length. [ 392.375946][T18865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5009'. [ 392.376344][T18865] batadv0: entered promiscuous mode [ 392.376363][T18865] batadv0: entered allmulticast mode [ 392.376997][T18865] bridge0: port 3(batadv0) entered blocking state [ 392.377116][T18865] bridge0: port 3(batadv0) entered disabled state [ 392.418757][ T5870] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 392.449647][T18867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5010'. [ 392.490374][T18871] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5012'. [ 392.556912][T18877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 392.579003][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 392.579458][ T5870] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 392.580239][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.580252][ T5870] usb 5-1: config 0 has no interfaces? [ 392.582385][ T5870] usb 5-1: string descriptor 0 read error: -22 [ 392.582447][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 392.586579][ T5870] usb 5-1: config 0 descriptor?? [ 392.794881][ T5870] usb 5-1: USB disconnect, device number 85 [ 392.858879][ T5860] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 392.858896][ T5860] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 393.362474][T18903] fuse: fd is not a fuse device [ 393.467073][T18909] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5027'. [ 393.467084][ T43] audit: type=1400 audit(1792763714.063:2646): avc: denied { nlmsg_read } for pid=18907 comm="syz.2.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 393.537218][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5033'. [ 393.574543][T18926] netlink: 'syz.4.5035': attribute type 1 has an invalid length. [ 393.574557][T18926] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5035'. [ 393.636371][ T43] audit: type=1400 audit(1792763714.233:2647): avc: denied { getopt } for pid=18933 comm="syz.1.5039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 393.641849][T18926] xt_IDLETIMER: timeout value is zero [ 393.714580][T10803] udevd[10803]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 395.086438][T18987] fuse: fd is not a fuse device [ 395.232609][T19005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.259959][T19009] netlink: 'syz.1.5069': attribute type 13 has an invalid length. [ 395.556779][T19030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19030 comm=syz.1.5075 [ 395.557575][T19030] __nla_validate_parse: 1 callbacks suppressed [ 395.557590][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5075'. [ 395.628930][T19034] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5077'. [ 397.046955][ T43] audit: type=1400 audit(1792763717.643:2648): avc: denied { listen } for pid=19042 comm="syz.2.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.674601][T18973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.757001][ T43] audit: type=1400 audit(1792763718.353:2649): avc: denied { write } for pid=19053 comm="syz.4.5086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.778320][T19054] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5085'. [ 397.936876][T19067] ip_tables: iptables: counters copy to user failed while replacing table [ 398.246056][ T43] audit: type=1400 audit(1792763718.843:2650): avc: denied { connect } for pid=19079 comm="syz.1.5095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 398.460579][T19086] fuse: fd is not a fuse device [ 398.828518][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828531][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828538][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828543][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828548][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828552][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828557][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828562][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828567][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828571][T19100] tc action pedit offset must be on 32 bit boundaries [ 398.828581][T19100] 0: reclassify loop, rule prio 0, protocol 800 [ 400.974313][T19069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.006274][ T43] audit: type=1400 audit(1792763721.603:2651): avc: denied { accept } for pid=19125 comm="syz.0.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 401.010835][T19126] tipc: Enabling of bearer rejected, failed to enable media [ 401.018835][T19128] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 401.086586][T19136] 0: reclassify loop, rule prio 0, protocol 800 [ 401.123533][T19144] syzkaller0: entered promiscuous mode [ 401.123555][T19144] syzkaller0: entered allmulticast mode [ 401.130797][T19144] tipc: Started in network mode [ 401.130821][T19144] tipc: Node identity 6ee50a6a283b, cluster identity 4711 [ 401.132541][T19144] tipc: Enabled bearer , priority 0 [ 401.137201][T19144] tipc: Resetting bearer [ 401.152695][T19142] tipc: Resetting bearer [ 401.167086][T19142] tipc: Disabling bearer [ 401.358097][T19175] fuse: fd is not a fuse device [ 401.708072][ T43] audit: type=1800 audit(1792763722.303:2652): pid=19212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5149" name="blkio.bfq.time_recursive" dev="tmpfs" ino=536 res=0 errno=-22 [ 401.790052][ T43] audit: type=1400 audit(1792763722.393:2653): avc: denied { getopt } for pid=19215 comm="syz.0.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 402.157391][T19231] syzkaller0: entered promiscuous mode [ 402.157409][T19231] syzkaller0: entered allmulticast mode [ 402.262640][ T43] audit: type=1400 audit(1792763722.863:2654): avc: denied { read } for pid=19232 comm="syz.1.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 404.216105][T19154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.380993][T19298] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 404.623443][ T43] audit: type=1400 audit(1792763725.223:2655): avc: denied { bind } for pid=19343 comm="syz.2.5205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 404.719514][T19364] netlink: 'syz.2.5213': attribute type 1 has an invalid length. [ 404.729969][T19364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.736408][T19364] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 404.737868][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5213'. [ 404.743238][T19364] bridge1: entered promiscuous mode [ 404.745601][T19364] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 405.020210][T19393] syzkaller0: entered promiscuous mode [ 405.020231][T19393] syzkaller0: entered allmulticast mode [ 405.023645][T19393] tipc: Started in network mode [ 405.023661][T19393] tipc: Node identity 0eef336988d, cluster identity 4711 [ 405.023793][T19393] tipc: Enabled bearer , priority 0 [ 405.027547][T19393] tipc: Resetting bearer [ 405.030380][T19392] tipc: Resetting bearer [ 405.049090][T19392] tipc: Disabling bearer [ 405.189994][T19397] netlink: 'syz.0.5224': attribute type 24 has an invalid length. [ 405.193725][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5224'. [ 405.193747][T19397] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 405.218699][ T3304] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 405.378791][ T3304] usb 7-1: Using ep0 maxpacket: 32 [ 405.379546][ T3304] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 405.380490][ T3304] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 405.380532][ T3304] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 405.380553][ T3304] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 405.380573][ T3304] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 405.380592][ T3304] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 405.382454][ T3304] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.382473][ T3304] usb 7-1: Product: syz [ 405.382485][ T3304] usb 7-1: Manufacturer: syz [ 405.382497][ T3304] usb 7-1: SerialNumber: syz [ 405.393095][ T3304] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 405.393167][ T3304] imon 7-1:155.0: unable to initialize intf0, err -90 [ 405.393180][ T3304] imon:imon_probe: failed to initialize context! [ 405.393190][ T3304] imon 7-1:155.0: unable to register, err -19 [ 405.440209][T19414] syzkaller0: entered promiscuous mode [ 405.440223][T19414] syzkaller0: entered allmulticast mode [ 405.443717][T19414] tipc: Enabled bearer , priority 0 [ 405.445701][T19414] tipc: Resetting bearer [ 405.446842][T19413] tipc: Resetting bearer [ 405.463627][T19413] tipc: Disabling bearer [ 405.856714][T19450] tipc: Enabling of bearer rejected, failed to enable media [ 405.928776][ T7629] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 406.078785][ T7629] usb 9-1: Using ep0 maxpacket: 32 [ 406.079633][ T7629] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 406.080737][ T7629] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.082937][ T7629] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 406.082957][ T7629] usb 9-1: Product: syz [ 406.082970][ T7629] usb 9-1: Manufacturer: syz [ 406.082983][ T7629] usb 9-1: SerialNumber: syz [ 406.085213][ T7629] usb 9-1: config 0 descriptor?? [ 406.089218][ T7629] hub 9-1:0.0: bad descriptor, ignoring hub [ 406.089239][ T7629] hub 9-1:0.0: probe with driver hub failed with error -5 [ 406.398993][ T5870] usb 9-1: USB disconnect, device number 6 [ 406.638938][T17485] Bluetooth: hci4: command tx timeout [ 406.728895][ T5928] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 406.878712][ T5928] usb 9-1: Using ep0 maxpacket: 32 [ 406.879550][ T5928] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 406.880675][ T5928] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 406.883875][ T5928] usb 9-1: string descriptor 0 read error: -22 [ 406.883975][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 406.888553][ T5928] usb 9-1: config 0 descriptor?? [ 406.901618][ T5928] hub 9-1:0.0: bad descriptor, ignoring hub [ 406.901640][ T5928] hub 9-1:0.0: probe with driver hub failed with error -5 [ 407.218887][ T9] usb 9-1: USB disconnect, device number 7 [ 407.327946][T19490] tipc: Enabling of bearer rejected, failed to enable media [ 407.714866][T19528] 0: reclassify loop, rule prio 0, protocol 03 [ 407.832345][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 408.069185][ T6154] usb 7-1: USB disconnect, device number 63 [ 408.081355][ T1809] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 408.228869][ T1809] usb 9-1: Using ep0 maxpacket: 32 [ 408.229469][ T1809] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 408.230436][ T1809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 408.230457][ T1809] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 408.232479][ T1809] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 408.232498][ T1809] usb 9-1: Product: syz [ 408.232511][ T1809] usb 9-1: Manufacturer: syz [ 408.232522][ T1809] usb 9-1: SerialNumber: syz [ 408.234738][ T1809] usb 9-1: config 0 descriptor?? [ 408.236694][ T1809] hub 9-1:0.0: bad descriptor, ignoring hub [ 408.236714][ T1809] hub 9-1:0.0: probe with driver hub failed with error -5 [ 408.561438][ T7629] usb 9-1: USB disconnect, device number 8 [ 408.858901][ T1809] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 408.898894][ T7629] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 409.009786][ T1809] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 409.010577][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.010593][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.010604][ T1809] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 409.010623][ T1809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.011878][ T1809] usb 7-1: config 0 descriptor?? [ 409.048779][ T7629] usb 9-1: Using ep0 maxpacket: 32 [ 409.049614][ T7629] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.050450][ T7629] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 409.050468][ T7629] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 409.053265][ T7629] usb 9-1: string descriptor 0 read error: -22 [ 409.053345][ T7629] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.054969][ T7629] usb 9-1: config 0 descriptor?? [ 409.056016][ T7629] hub 9-1:0.0: bad descriptor, ignoring hub [ 409.056029][ T7629] hub 9-1:0.0: probe with driver hub failed with error -5 [ 409.328685][T17919] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 409.369033][ T855] usb 9-1: USB disconnect, device number 9 [ 409.417498][ T1809] hid_parser_main: 5 callbacks suppressed [ 409.417522][ T1809] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 409.417536][ T1809] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 409.417549][ T1809] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 409.417561][ T1809] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 409.417573][ T1809] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 409.417585][ T1809] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 409.428019][ T1809] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 409.478927][T17919] usb 5-1: Using ep0 maxpacket: 32 [ 409.479389][T17919] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 409.480194][T17919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 409.480210][T17919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 409.481743][T17919] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 409.481757][T17919] usb 5-1: Product: syz [ 409.481766][T17919] usb 5-1: Manufacturer: syz [ 409.481775][T17919] usb 5-1: SerialNumber: syz [ 409.483088][T17919] usb 5-1: config 0 descriptor?? [ 409.484107][T17919] hub 5-1:0.0: bad descriptor, ignoring hub [ 409.484120][T17919] hub 5-1:0.0: probe with driver hub failed with error -5 [ 409.619362][ T1809] usb 7-1: USB disconnect, device number 64 [ 409.788838][T17919] usb 5-1: USB disconnect, device number 86 [ 409.857048][ T43] audit: type=1400 audit(1792763730.453:2656): avc: denied { bind } for pid=19603 comm="syz.4.5296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 410.068902][T19610] fuse: fd is not a fuse device [ 410.140490][T17919] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 410.158870][ T6154] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 410.288708][T17919] usb 5-1: Using ep0 maxpacket: 32 [ 410.289197][T17919] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 410.289994][T17919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 410.290009][T17919] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 410.292178][T17919] usb 5-1: string descriptor 0 read error: -22 [ 410.292237][T17919] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 410.293647][T17919] usb 5-1: config 0 descriptor?? [ 410.295283][T17919] hub 5-1:0.0: bad descriptor, ignoring hub [ 410.295295][T17919] hub 5-1:0.0: probe with driver hub failed with error -5 [ 410.318827][ T6154] usb 9-1: Using ep0 maxpacket: 32 [ 410.319254][ T6154] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 410.320489][ T6154] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 410.320511][ T6154] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 410.320524][ T6154] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.320538][ T6154] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 410.322041][ T6154] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.322054][ T6154] usb 9-1: Product: syz [ 410.322061][ T6154] usb 9-1: Manufacturer: syz [ 410.322069][ T6154] usb 9-1: SerialNumber: syz [ 410.325893][ C3] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 410.327073][ T6154] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input81 [ 410.548750][ T6154] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 410.548763][ T6154] (id 0x00) [ 410.588846][ T6154] rc_core: IR keymap rc-imon-pad not found [ 410.588858][ T6154] Registered IR keymap rc-empty [ 410.588897][ T6154] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 410.588907][ T6154] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 410.608904][ T5869] usb 5-1: USB disconnect, device number 87 [ 410.749604][ T6154] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 410.750535][ T6154] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input82 [ 410.753268][ T6154] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:10> initialized [ 411.166941][T19633] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 411.989151][T19642] imon:vfd_write: invalid payload size [ 412.699663][ T7629] usb 9-1: USB disconnect, device number 10 [ 413.161982][T19618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.256105][T19655] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 413.276404][T19658] netlink: 'syz.1.5307': attribute type 1 has an invalid length. [ 413.283944][ T43] audit: type=1400 audit(1792763733.883:2657): avc: denied { ioctl } for pid=19654 comm="syz.4.5311" path="socket:[70405]" dev="sockfs" ino=70405 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 413.402438][T19671] syzkaller0: entered promiscuous mode [ 413.402459][T19671] syzkaller0: entered allmulticast mode [ 416.452518][T19676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.524653][ T43] audit: type=1400 audit(1792763737.123:2658): avc: denied { create } for pid=19712 comm="syz.0.5334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.526314][ T43] audit: type=1400 audit(1792763737.123:2659): avc: denied { ioctl } for pid=19712 comm="syz.0.5334" path="socket:[70471]" dev="sockfs" ino=70471 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.553022][T19718] syzkaller0: entered promiscuous mode [ 416.553037][T19718] syzkaller0: entered allmulticast mode [ 416.558020][T19718] tipc: Started in network mode [ 416.558047][T19718] tipc: Node identity 86a721331b44, cluster identity 4711 [ 416.558270][T19718] tipc: Enabled bearer , priority 0 [ 416.581554][T19715] tipc: Resetting bearer [ 416.596024][T19715] tipc: Disabling bearer [ 416.771798][ T7629] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 416.781934][T19745] syzkaller0: entered promiscuous mode [ 416.781947][T19745] syzkaller0: entered allmulticast mode [ 416.841321][T19749] tipc: Enabling of bearer rejected, failed to enable media [ 416.938724][ T7629] usb 9-1: Using ep0 maxpacket: 32 [ 416.939233][ T7629] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 416.940110][ T7629] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 416.940131][ T7629] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 416.940145][ T7629] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.940158][ T7629] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 416.941838][ T7629] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.941850][ T7629] usb 9-1: Product: syz [ 416.941858][ T7629] usb 9-1: Manufacturer: syz [ 416.941865][ T7629] usb 9-1: SerialNumber: syz [ 416.948537][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 416.983880][ T7629] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input83 [ 417.064820][ T43] audit: type=1400 audit(1792763737.663:2660): avc: denied { getopt } for pid=19784 comm="syz.2.5365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.067676][T19783] syzkaller0: entered promiscuous mode [ 417.067689][T19783] syzkaller0: entered allmulticast mode [ 417.092667][T19786] tipc: Enabling of bearer rejected, failed to enable media [ 417.158715][ T7629] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 417.158733][ T7629] (id 0x00) [ 417.208805][ T7629] rc_core: IR keymap rc-imon-pad not found [ 417.208818][ T7629] Registered IR keymap rc-empty [ 417.208853][ T7629] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 417.208862][ T7629] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 417.221477][ T43] audit: type=1400 audit(1792763737.823:2661): avc: denied { getopt } for pid=19798 comm="syz.0.5370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 417.369490][ T7629] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 417.370286][ T7629] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input84 [ 417.371755][ T7629] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:11> initialized [ 417.414150][T19816] syzkaller0: entered promiscuous mode [ 417.414172][T19816] syzkaller0: entered allmulticast mode [ 417.420363][T19816] tipc: Enabled bearer , priority 0 [ 417.426209][T19815] tipc: Resetting bearer [ 417.451619][T19815] tipc: Disabling bearer [ 417.551841][T19821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5380'. [ 417.590796][ T43] audit: type=1400 audit(1792763738.193:2662): avc: denied { getopt } for pid=19822 comm="syz.2.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 417.732627][T19829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5384'. [ 417.783842][T19832] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 417.809373][T19834] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 417.892386][T19836] syzkaller0: entered promiscuous mode [ 417.892400][T19836] syzkaller0: entered allmulticast mode [ 418.083913][T19842] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5389'. [ 418.201210][T19851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5392'. [ 418.347264][T19866] syzkaller0: entered promiscuous mode [ 418.347278][T19866] syzkaller0: entered allmulticast mode [ 418.389782][T19870] netlink: 'syz.1.5398': attribute type 10 has an invalid length. [ 418.394127][T19870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.396191][T19870] team0: Port device netdevsim1 added [ 418.514688][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 418.541070][T19884] team0: entered promiscuous mode [ 418.541086][T19884] team_slave_0: entered promiscuous mode [ 418.541194][T19884] team_slave_1: entered promiscuous mode [ 418.541308][T19884] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 418.541505][T19884] team0: entered allmulticast mode [ 418.541514][T19884] team_slave_0: entered allmulticast mode [ 418.541523][T19884] team_slave_1: entered allmulticast mode [ 418.541534][T19884] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 418.606435][T19893] imon:vfd_write: invalid payload size [ 419.178859][ T6154] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 419.317655][ T855] usb 9-1: USB disconnect, device number 11 [ 419.328755][ T6154] usb 7-1: Using ep0 maxpacket: 32 [ 419.330461][ T6154] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 419.331703][ T6154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 419.331718][ T6154] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 419.333446][ T6154] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 419.333459][ T6154] usb 7-1: Product: syz [ 419.333466][ T6154] usb 7-1: Manufacturer: syz [ 419.333474][ T6154] usb 7-1: SerialNumber: syz [ 419.339550][ T6154] usb 7-1: config 0 descriptor?? [ 419.341459][ T6154] hub 7-1:0.0: bad descriptor, ignoring hub [ 419.341479][ T6154] hub 7-1:0.0: probe with driver hub failed with error -5 [ 419.584966][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5413'. [ 419.611264][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5414'. [ 419.648949][ T6154] usb 7-1: USB disconnect, device number 65 [ 419.674489][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5416'. [ 419.785824][T19932] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5419'. [ 419.978840][ T1809] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 420.011645][T19945] batman_adv: batadv0: Adding interface: syzkaller0 [ 420.011663][T19945] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.011691][T19945] batman_adv: batadv0: Interface activated: syzkaller0 [ 420.032175][T19944] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 420.049107][T19944] batman_adv: batadv0: Removing interface: syzkaller0 [ 420.138745][ T1809] usb 7-1: Using ep0 maxpacket: 32 [ 420.139284][ T1809] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 420.140332][ T1809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 420.140352][ T1809] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 420.145324][ T1809] usb 7-1: string descriptor 0 read error: -22 [ 420.145416][ T1809] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 420.147376][ T1809] usb 7-1: config 0 descriptor?? [ 420.150381][ T1809] hub 7-1:0.0: bad descriptor, ignoring hub [ 420.150399][ T1809] hub 7-1:0.0: probe with driver hub failed with error -5 [ 420.216358][T19951] 0: reclassify loop, rule prio 0, protocol 03 [ 420.439651][T19959] syzkaller0: entered promiscuous mode [ 420.439672][T19959] syzkaller0: entered allmulticast mode [ 420.472775][ T5870] usb 7-1: USB disconnect, device number 66 [ 420.651418][T19972] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.779586][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5438'. [ 420.792476][T19983] netlink: 'syz.1.5438': attribute type 5 has an invalid length. [ 421.738135][T19997] syzkaller0: entered promiscuous mode [ 421.738152][T19997] syzkaller0: entered allmulticast mode [ 423.686749][T19976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.810093][T20026] __nla_validate_parse: 1 callbacks suppressed [ 423.810113][T20026] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5454'. [ 424.985778][T20085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5476'. [ 425.488767][ T64] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 425.639576][ T64] usb 5-1: not running at top speed; connect to a high speed hub [ 425.639596][ T64] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 425.640387][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.640430][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.648846][ T64] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 426.062497][ T64] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 426.084384][ T64] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 426.084417][ T64] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 426.084777][ T64] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 426.089075][ T64] usb 5-1: USB disconnect, device number 88 [ 426.599161][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5512'. [ 426.910816][T20219] netlink: 'syz.2.5522': attribute type 1 has an invalid length. [ 426.910838][T20219] netlink: 'syz.2.5522': attribute type 2 has an invalid length. [ 426.955406][T20223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5525'. [ 427.189303][T20237] tipc: Enabling of bearer rejected, failed to enable media [ 427.287149][T20245] nbd: must specify at least one socket [ 427.460265][T20268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5544'. [ 427.748950][ T855] page_pool_release_retry() stalled pool shutdown: id 62, 1 inflight 60 sec [ 428.068805][ T64] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 428.219021][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 428.220349][ T64] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 428.221425][ T64] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 428.221461][ T64] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 428.221483][ T64] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.221503][ T64] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 428.223432][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.223452][ T64] usb 7-1: Product: syz [ 428.223465][ T64] usb 7-1: Manufacturer: syz [ 428.223478][ T64] usb 7-1: SerialNumber: syz [ 428.228526][ C3] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 428.231328][ T64] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input85 [ 428.448718][ T64] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 428.448737][ T64] (id 0x00) [ 428.488746][ T64] rc_core: IR keymap rc-imon-pad not found [ 428.488803][ T64] Registered IR keymap rc-empty [ 428.488841][ T64] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 428.488854][ T64] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 428.650607][ T64] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 428.652184][ T64] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input86 [ 428.656697][ T64] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:67> initialized [ 429.888494][T20282] imon:vfd_write: invalid payload size [ 430.406549][T20261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.601349][ T855] usb 7-1: USB disconnect, device number 67 [ 431.238945][ T43] audit: type=1400 audit(1792763751.843:2663): avc: denied { setopt } for pid=20327 comm="syz.1.5564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 433.627918][T20310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.881934][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5574'. [ 433.958575][T20365] netlink: 'syz.4.5578': attribute type 1 has an invalid length. [ 433.958590][T20365] netlink: 'syz.4.5578': attribute type 2 has an invalid length. [ 434.918719][ T5870] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 435.078891][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 435.079558][ T5870] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 435.080383][ T5870] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 435.082147][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 435.082162][ T5870] usb 5-1: Product: syz [ 435.082170][ T5870] usb 5-1: Manufacturer: syz [ 435.082178][ T5870] usb 5-1: SerialNumber: syz [ 435.084415][ T5870] usb 5-1: config 0 descriptor?? [ 435.084865][T20412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 435.085622][ T5870] hub 5-1:0.0: bad descriptor, ignoring hub [ 435.085635][ T5870] hub 5-1:0.0: probe with driver hub failed with error -5 [ 435.678766][T20412] usb 5-1: reset high-speed USB device number 89 using dummy_hcd [ 435.835272][T20420] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 436.692420][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 436.758788][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 436.783030][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 436.848781][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 436.869936][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 436.949242][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 436.969979][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.038791][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.077621][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.138984][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.171267][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.238795][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.248870][T20391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.276812][ T1170] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.338829][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.360033][ T63] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.430660][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.462293][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.516623][T20443] tipc: Enabled bearer , priority 0 [ 437.519427][T20443] tipc: Resetting bearer [ 437.532256][T20442] tipc: Disabling bearer [ 437.538922][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.570761][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.658844][T20412] raw-gadget.0 gadget.0: failed to queue resume event [ 437.687840][ T63] raw-gadget.0 gadget.0: failed to queue suspend event [ 437.703277][T20412] raw-gadget.0 gadget.0: failed to queue disconnect event [ 437.809814][T17919] usb 5-1: USB disconnect, device number 89 [ 439.751924][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.751972][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.519820][T20446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.678896][T20504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5629'. [ 440.803098][T20522] tipc: Enabling of bearer rejected, failed to enable media [ 440.822089][T20526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 441.243694][T20551] tipc: Enabling of bearer rejected, failed to enable media [ 441.296678][T20563] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5649'. [ 441.570487][T16800] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 441.658899][T20584] netlink: 'syz.4.5658': attribute type 1 has an invalid length. [ 441.679146][ T43] audit: type=1400 audit(1792763762.283:2664): avc: denied { write } for pid=20585 comm="syz.2.5659" path="socket:[72253]" dev="sockfs" ino=72253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 441.718835][T16800] usb 5-1: Using ep0 maxpacket: 32 [ 441.720172][T16800] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 441.721213][T16800] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 441.724461][T16800] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 441.724481][T16800] usb 5-1: Product: syz [ 441.724495][T16800] usb 5-1: Manufacturer: syz [ 441.724509][T16800] usb 5-1: SerialNumber: syz [ 441.727652][T16800] usb 5-1: config 0 descriptor?? [ 441.728938][T20567] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 441.729983][T16800] hub 5-1:0.0: bad descriptor, ignoring hub [ 441.730001][T16800] hub 5-1:0.0: probe with driver hub failed with error -5 [ 441.771525][ T43] audit: type=1400 audit(1792763762.373:2665): avc: denied { bind } for pid=20581 comm="syz.1.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 441.875523][T20591] tipc: Enabling of bearer rejected, failed to enable media [ 442.013323][T20624] tipc: Failed to remove unknown binding: 66,0,2/0:2272374626/2272374627 [ 442.014145][T20624] tipc: Failed to remove unknown binding: 66,0,2/0:2272374626/2272374627 [ 442.062468][T20630] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.102449][T20634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5678'. [ 442.284981][ T43] audit: type=1400 audit(1792763762.883:2666): avc: denied { setopt } for pid=20660 comm="syz.1.5689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 442.306424][T20663] tipc: Enabled bearer , priority 7 [ 442.560020][ T43] audit: type=1400 audit(1792763763.163:2667): avc: denied { listen } for pid=20695 comm="syz.2.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 442.582606][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5702'. [ 442.629101][T20567] usb 5-1: reset high-speed USB device number 90 using dummy_hcd [ 442.756759][T20722] netlink: 'syz.4.5712': attribute type 1 has an invalid length. [ 442.786298][T20620] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 442.795454][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5713'. [ 442.818823][T20731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5716'. [ 442.940396][T20750] netlink: 'syz.2.5724': attribute type 1 has an invalid length. [ 442.940410][T20750] netlink: 'syz.2.5724': attribute type 2 has an invalid length. [ 443.164123][T20764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5729'. [ 443.354188][T20770] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 443.419444][T17919] tipc: Node number set to 2648908083 [ 443.609826][ T36] raw-gadget.0 gadget.0: failed to queue suspend event [ 443.678842][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 443.700877][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5738'. [ 443.702299][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 443.769256][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 443.790415][ T63] raw-gadget.0 gadget.0: failed to queue suspend event [ 443.868831][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 443.877455][T20794] netlink: 'syz.4.5743': attribute type 1 has an invalid length. [ 443.877470][T20794] netlink: 'syz.4.5743': attribute type 2 has an invalid length. [ 443.913039][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 443.989808][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 444.009802][ T63] raw-gadget.0 gadget.0: failed to queue suspend event [ 444.088950][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 444.095587][T20804] syzkaller0: entered promiscuous mode [ 444.095606][T20804] syzkaller0: entered allmulticast mode [ 444.127415][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 444.138841][T16800] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 444.188740][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 444.210400][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 444.268735][T16800] usb 7-1: device descriptor read/64, error -71 [ 444.288873][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 444.310135][T18624] raw-gadget.0 gadget.0: failed to queue suspend event [ 444.388993][T20567] raw-gadget.0 gadget.0: failed to queue resume event [ 444.409914][ T1165] raw-gadget.0 gadget.0: failed to queue suspend event [ 444.425394][T20567] raw-gadget.0 gadget.0: failed to queue disconnect event [ 444.429365][ T43] audit: type=1400 audit(1792763765.033:2668): avc: denied { map } for pid=20809 comm="syz.4.5751" path="pipe:[74492]" dev="pipefs" ino=74492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 444.429680][ T43] audit: type=1400 audit(1792763765.033:2669): avc: denied { execute } for pid=20809 comm="syz.4.5751" path="pipe:[74492]" dev="pipefs" ino=74492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 444.433237][ T855] usb 5-1: USB disconnect, device number 90 [ 444.442395][ T43] audit: type=1400 audit(1792763765.033:2670): avc: denied { ioctl } for pid=20809 comm="syz.4.5751" path="socket:[75081]" dev="sockfs" ino=75081 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 444.526525][T20820] syzkaller0: entered promiscuous mode [ 444.526548][T20820] syzkaller0: entered allmulticast mode [ 444.530581][T20820] simple: /dev/video#_1 [ 444.530597][T20820] simple: /dev/video#_2 [ 444.530607][T20820] simple: /dev/video#_3 [ 444.530615][T20820] simple: /dev/video#_4 [ 444.530624][T20820] simple: /dev/video#_5 [ 444.530632][T20820] simple: /dev/video#_6 [ 444.530641][T20820] simple: /dev/video#_7 [ 444.530650][T20820] simple: /dev/video#_8 [ 444.530659][T20820] simple: /dev/video#_9 [ 444.530668][T20820] simple: /dev/video#_10 [ 444.530676][T20820] simple: /dev/video#_11 [ 444.530685][T20820] simple: /dev/video#_12 [ 444.530694][T20820] simple: /dev/video#_13 [ 444.530703][T20820] simple: /dev/video#_14 [ 444.530711][T20820] simple: /dev/video#_15 [ 444.530721][T20820] simple: /dev/video#_16 [ 444.530729][T20820] simple: /dev/video#_17 [ 444.530738][T20820] simple: /dev/video#_18 [ 444.530747][T20820] simple: /dev/video#_19 [ 444.530755][T20820] simple: /dev/video#_20 [ 444.530762][T20820] simple: /dev/video#_21 [ 444.530771][T20820] simple: /dev/video#_22 [ 444.530779][T20820] simple: /dev/video#_23 [ 444.530787][T20820] simple: /dev/video#_24 [ 444.530797][T20820] simple: /dev/video#_25 [ 444.530805][T20820] simple: /dev/video#_26 [ 444.530814][T20820] simple: /dev/video#_27 [ 444.530872][T20820] simple: /dev/video#_28 [ 444.530883][T20820] simple: /dev/video#_29 [ 444.530892][T20820] simple: /dev/video#_30 [ 444.530901][T20820] simple: /dev/video#_31 [ 444.530909][T20820] simple: /dev/video#_32 [ 444.530920][T20820] TC_ACT_REPEAT abuse ? [ 444.538855][T16800] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 444.606216][T20825] veth0_to_bridge: entered promiscuous mode [ 444.610146][T20825] macsec1: entered allmulticast mode [ 444.610167][T20825] veth0_to_bridge: entered allmulticast mode [ 444.612151][T20825] veth0_to_bridge: left allmulticast mode [ 444.612173][T20825] veth0_to_bridge: left promiscuous mode [ 444.678723][T16800] usb 7-1: device descriptor read/64, error -71 [ 444.799047][T16800] usb usb7-port1: attempt power cycle [ 444.998860][ T855] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 445.149496][ T855] usb 9-1: Using ep0 maxpacket: 32 [ 445.150241][ T855] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 445.151287][ T855] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 445.153164][ T855] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 445.153184][ T855] usb 9-1: Product: syz [ 445.153203][ T855] usb 9-1: Manufacturer: syz [ 445.153216][ T855] usb 9-1: SerialNumber: syz [ 445.155656][ T855] usb 9-1: config 0 descriptor?? [ 445.158792][T16800] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 445.159442][T20832] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 445.161871][ T855] hub 9-1:0.0: bad descriptor, ignoring hub [ 445.161891][ T855] hub 9-1:0.0: probe with driver hub failed with error -5 [ 445.180547][T16800] usb 7-1: device descriptor read/8, error -71 [ 445.438790][T16800] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 445.459958][T16800] usb 7-1: device descriptor read/8, error -71 [ 445.569525][T16800] usb usb7-port1: unable to enumerate USB device [ 445.670931][T20848] tipc: Enabling of bearer rejected, failed to enable media [ 445.836065][ T43] audit: type=1400 audit(1792763766.433:2671): avc: denied { connect } for pid=20861 comm="syz.0.5770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.838573][ T43] audit: type=1400 audit(1792763766.433:2672): avc: denied { write } for pid=20861 comm="syz.0.5770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 445.989232][T20872] bridge_slave_0: default FDB implementation only supports local addresses [ 446.048864][T20832] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 446.203250][T20842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 446.984595][ T1170] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.049898][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.071816][ T63] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.107203][T20951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5801'. [ 447.117906][T20953] netlink: 'syz.2.5800': attribute type 1 has an invalid length. [ 447.139583][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.177583][ T1170] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.238830][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.279577][ T1167] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.319761][T20969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5809'. [ 447.359235][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.399666][ T36] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.469692][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.477963][T20981] batman_adv: batadv0: Adding interface: syzkaller0 [ 447.477975][T20981] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.477998][T20981] batman_adv: batadv0: Interface activated: syzkaller0 [ 447.491240][T18624] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.496428][T20983] syzkaller0: entered promiscuous mode [ 447.496441][T20983] syzkaller0: entered allmulticast mode [ 447.559156][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.585980][T18624] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.658835][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.687899][ T36] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.708238][ T43] audit: type=1400 audit(1792763768.303:2673): avc: denied { write } for pid=20986 comm="syz.1.5818" lport=39511 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 447.709319][ T43] audit: type=1400 audit(1792763768.313:2674): avc: denied { getopt } for pid=20986 comm="syz.1.5818" lport=39511 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 447.748778][T20832] raw-gadget.0 gadget.4: failed to queue resume event [ 447.769851][ T36] raw-gadget.0 gadget.4: failed to queue suspend event [ 447.777912][T20832] raw-gadget.0 gadget.4: failed to queue disconnect event [ 447.789365][T17919] usb 9-1: USB disconnect, device number 12 [ 447.915837][T20980] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 447.925520][T20980] batman_adv: batadv0: Removing interface: syzkaller0 [ 447.938127][T21000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5822'. [ 448.046293][ T43] audit: type=1400 audit(1792763768.643:2675): avc: denied { getopt } for pid=21015 comm="syz.2.5830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 448.056665][T21018] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5831'. [ 448.127986][T21028] syzkaller0: entered promiscuous mode [ 448.127999][T21028] syzkaller0: entered allmulticast mode [ 448.262372][T21042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5843'. [ 448.408759][T21046] tipc: Enabling of bearer rejected, failed to enable media [ 448.831317][T21098] netlink: 'syz.1.5862': attribute type 16 has an invalid length. [ 448.831332][T21098] netlink: 'syz.1.5862': attribute type 17 has an invalid length. [ 448.865957][T21098] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.866468][T21098] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.920756][T21098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.922872][T21098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.008780][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.008811][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.008830][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.008849][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.009127][T21108] tipc: Enabling of bearer rejected, failed to enable media [ 449.237292][T21140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5878'. [ 449.359734][T21145] tipc: Enabling of bearer rejected, failed to enable media [ 449.524182][T21169] syzkaller0: entered promiscuous mode [ 449.524197][T21169] syzkaller0: entered allmulticast mode [ 449.649135][ T43] audit: type=1400 audit(1792763770.253:2676): avc: denied { bind } for pid=21176 comm="syz.0.5892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 449.650651][ T43] audit: type=1400 audit(1792763770.253:2677): avc: denied { name_bind } for pid=21176 comm="syz.0.5892" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 449.650691][ T43] audit: type=1400 audit(1792763770.253:2678): avc: denied { node_bind } for pid=21176 comm="syz.0.5892" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 449.822068][T21183] tipc: Enabling of bearer rejected, failed to enable media [ 449.981444][T21202] syzkaller0: entered promiscuous mode [ 449.981467][T21202] syzkaller0: entered allmulticast mode [ 450.228447][T21224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5905'. [ 451.267324][T21277] IPv6: Can't replace route, no match found [ 452.182436][ T43] audit: type=1400 audit(1792763772.783:2679): avc: denied { bind } for pid=21309 comm="syz.4.5931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 452.202823][T21314] ip_tables: iptables: counters copy to user failed while replacing table [ 452.240835][T21318] syzkaller0: entered promiscuous mode [ 452.240855][T21318] syzkaller0: entered allmulticast mode [ 452.267754][T21322] xt_IDLETIMER: timeout value is zero [ 452.407671][ T43] audit: type=1400 audit(1792763773.003:2680): avc: denied { read } for pid=21342 comm="syz.0.5945" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 452.498842][T21352] syzkaller0: entered promiscuous mode [ 452.498858][T21352] syzkaller0: entered allmulticast mode [ 452.742653][T21388] syzkaller0: entered promiscuous mode [ 452.742673][T21388] syzkaller0: entered allmulticast mode [ 452.754102][T21393] xt_connbytes: Forcing CT accounting to be enabled [ 452.856623][T21408] tipc: Enabled bearer , priority 10 [ 453.467154][T21486] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 453.573159][T21499] syzkaller0: entered promiscuous mode [ 453.573175][T21499] syzkaller0: entered allmulticast mode [ 453.586486][T21499] tipc: Enabled bearer , priority 0 [ 453.587859][T21498] tipc: Resetting bearer [ 453.607715][T21498] tipc: Disabling bearer [ 453.644360][T21508] ip_tables: iptables: counters copy to user failed while replacing table [ 453.696292][ T43] audit: type=1400 audit(1792763774.293:2681): avc: denied { relabelfrom } for pid=21509 comm="syz.0.6009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 453.696672][ T43] audit: type=1400 audit(1792763774.293:2682): avc: denied { relabelto } for pid=21509 comm="syz.0.6009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 455.199472][T16800] tipc: Node number set to 1188956778 [ 455.279280][ T43] audit: type=1400 audit(1792763775.883:2683): avc: denied { accept } for pid=21556 comm="syz.1.6029" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 455.582819][T21576] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.133151][T21608] syzkaller0: entered promiscuous mode [ 456.133174][T21608] syzkaller0: entered allmulticast mode [ 456.415054][T21642] hsr0: entered allmulticast mode [ 456.415075][T21642] hsr_slave_0: entered allmulticast mode [ 456.415089][T21642] hsr_slave_1: entered allmulticast mode [ 459.252922][T21624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.269780][T21634] hsr0: left allmulticast mode [ 459.269795][T21634] hsr_slave_0: left allmulticast mode [ 459.269805][T21634] hsr_slave_1: left allmulticast mode [ 459.633380][T21683] batman_adv: batadv0: Adding interface: syzkaller0 [ 459.633391][T21683] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.633687][T21683] batman_adv: batadv0: Interface activated: syzkaller0 [ 459.638369][T21682] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 459.659265][T21682] batman_adv: batadv0: Removing interface: syzkaller0 [ 459.910240][T21703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6084'. [ 459.934396][ T43] audit: type=1400 audit(1792763780.533:2684): avc: denied { getopt } for pid=21704 comm="syz.0.6085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 459.993893][T21713] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6089'. [ 460.414973][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415003][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415023][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415042][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415061][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415081][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415100][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415119][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415138][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.415158][ T24] hid-generic 0005:0B57:0005.001E: unknown main item tag 0x0 [ 460.426457][ T24] hid-generic 0005:0B57:0005.001E: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 460.730885][T21767] netlink: 'syz.2.6113': attribute type 2 has an invalid length. [ 461.477726][T21843] syzkaller0: entered promiscuous mode [ 461.477742][T21843] syzkaller0: entered allmulticast mode [ 463.140892][T21920] syzkaller0: entered promiscuous mode [ 463.140910][T21920] syzkaller0: entered allmulticast mode [ 464.922997][T21967] ip6gretap1: entered allmulticast mode [ 464.926052][T21967] batman_adv: batadv0: Adding interface: ip6gretap1 [ 464.926067][T21967] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.926102][T21967] batman_adv: batadv0: Interface activated: ip6gretap1 [ 465.043378][T21983] xt_CT: No such helper "netbios-ns" [ 465.054311][T21988] ip_tables: iptables: counters copy to user failed while replacing table [ 465.167443][T21992] syzkaller0: entered promiscuous mode [ 465.167467][T21992] syzkaller0: entered allmulticast mode [ 466.678031][T22015] syzkaller0: entered promiscuous mode [ 466.678046][T22015] syzkaller0: entered allmulticast mode [ 466.680391][T22020] tipc: Enabled bearer , priority 0 [ 466.686917][T22025] tipc: Resetting bearer [ 466.693061][T22012] tipc: Resetting bearer [ 466.706002][T22012] tipc: Disabling bearer [ 466.831967][T22051] syzkaller0: entered promiscuous mode [ 466.831988][T22051] syzkaller0: entered allmulticast mode [ 466.835198][T22051] simple: /dev/video#_1 [ 466.835213][T22051] simple: /dev/video#_2 [ 466.835220][T22051] simple: /dev/video#_3 [ 466.835226][T22051] simple: /dev/video#_4 [ 466.835233][T22051] simple: /dev/video#_5 [ 466.835239][T22051] simple: /dev/video#_6 [ 466.835246][T22051] simple: /dev/video#_7 [ 466.835254][T22051] simple: /dev/video#_8 [ 466.835260][T22051] simple: /dev/video#_9 [ 466.835267][T22051] simple: /dev/video#_10 [ 466.835275][T22051] simple: /dev/video#_11 [ 466.835281][T22051] simple: /dev/video#_12 [ 466.835289][T22051] simple: /dev/video#_13 [ 466.835295][T22051] simple: /dev/video#_14 [ 466.835302][T22051] simple: /dev/video#_15 [ 466.835308][T22051] simple: /dev/video#_16 [ 466.835315][T22051] simple: /dev/video#_17 [ 466.835322][T22051] simple: /dev/video#_18 [ 466.835328][T22051] simple: /dev/video#_19 [ 466.835335][T22051] simple: /dev/video#_20 [ 466.835341][T22051] simple: /dev/video#_21 [ 466.835348][T22051] simple: /dev/video#_22 [ 466.835354][T22051] simple: /dev/video#_23 [ 466.835361][T22051] simple: /dev/video#_24 [ 466.835368][T22051] simple: /dev/video#_25 [ 466.835375][T22051] simple: /dev/video#_26 [ 466.835382][T22051] simple: /dev/video#_27 [ 466.835388][T22051] simple: /dev/video#_28 [ 466.835395][T22051] simple: /dev/video#_29 [ 466.835401][T22051] simple: /dev/video#_30 [ 466.835408][T22051] simple: /dev/video#_31 [ 466.835415][T22051] simple: /dev/video#_32 [ 466.835422][T22051] TC_ACT_REPEAT abuse ? [ 466.859757][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6208'. [ 466.912466][T22061] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6212'. [ 466.947558][T22065] syzkaller0: entered promiscuous mode [ 466.947574][T22065] syzkaller0: entered allmulticast mode [ 466.954118][T22065] tipc: Enabled bearer , priority 0 [ 466.969790][T22065] tipc: Resetting bearer [ 466.974411][T22064] tipc: Resetting bearer [ 466.988554][T22064] tipc: Disabling bearer [ 467.174497][ T43] audit: type=1400 audit(1792763787.773:2685): avc: denied { write } for pid=22104 comm="syz.2.6224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.257509][T22120] syzkaller0: entered promiscuous mode [ 467.257525][T22120] syzkaller0: entered allmulticast mode [ 467.260152][T22121] syzkaller0: entered promiscuous mode [ 467.260170][T22121] syzkaller0: entered allmulticast mode [ 467.262976][T22121] tipc: Enabled bearer , priority 0 [ 467.430845][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 468.755745][T22130] tipc: Resetting bearer [ 468.758345][T22119] tipc: Resetting bearer [ 468.780474][T22119] tipc: Disabling bearer [ 468.833237][T22152] syzkaller0: entered promiscuous mode [ 468.833260][T22152] syzkaller0: entered allmulticast mode [ 470.846796][T22215] ip_tables: iptables: counters copy to user failed while replacing table [ 471.504197][T22224] syzkaller0: entered promiscuous mode [ 471.504220][T22224] syzkaller0: entered allmulticast mode [ 471.507006][T22224] tipc: Enabled bearer , priority 0 [ 471.525481][T22224] tipc: Resetting bearer [ 471.532893][T22223] tipc: Resetting bearer [ 471.549967][T22223] tipc: Disabling bearer [ 471.614615][T22234] syzkaller0: entered promiscuous mode [ 471.614632][T22234] syzkaller0: entered allmulticast mode [ 471.625465][T22236] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6257'. [ 473.084232][T22243] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.167869][T22263] tipc: Enabling of bearer rejected, failed to enable media [ 473.298095][T22286] syzkaller0: entered promiscuous mode [ 473.298117][T22286] syzkaller0: entered allmulticast mode [ 473.305376][T22286] simple: /dev/video#_1 [ 473.305387][T22286] simple: /dev/video#_2 [ 473.305392][T22286] simple: /dev/video#_3 [ 473.305397][T22286] simple: /dev/video#_4 [ 473.305402][T22286] simple: /dev/video#_5 [ 473.305407][T22286] simple: /dev/video#_6 [ 473.305413][T22286] simple: /dev/video#_7 [ 473.305418][T22286] simple: /dev/video#_8 [ 473.305423][T22286] simple: /dev/video#_9 [ 473.305428][T22286] simple: /dev/video#_10 [ 473.305434][T22286] simple: /dev/video#_11 [ 473.305439][T22286] simple: /dev/video#_12 [ 473.305444][T22286] simple: /dev/video#_13 [ 473.305450][T22286] simple: /dev/video#_14 [ 473.305455][T22286] simple: /dev/video#_15 [ 473.305461][T22286] simple: /dev/video#_16 [ 473.305466][T22286] simple: /dev/video#_17 [ 473.305471][T22286] simple: /dev/video#_18 [ 473.305476][T22286] simple: /dev/video#_19 [ 473.305482][T22286] simple: /dev/video#_20 [ 473.305487][T22286] simple: /dev/video#_21 [ 473.305492][T22286] simple: /dev/video#_22 [ 473.305498][T22286] simple: /dev/video#_23 [ 473.305503][T22286] simple: /dev/video#_24 [ 473.305508][T22286] simple: /dev/video#_25 [ 473.305513][T22286] simple: /dev/video#_26 [ 473.305518][T22286] simple: /dev/video#_27 [ 473.305523][T22286] simple: /dev/video#_28 [ 473.305529][T22286] simple: /dev/video#_29 [ 473.305534][T22286] simple: /dev/video#_30 [ 473.305539][T22286] simple: /dev/video#_31 [ 473.305544][T22286] simple: /dev/video#_32 [ 473.305551][T22286] TC_ACT_REPEAT abuse ? [ 473.342537][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6276'. [ 473.399009][T22290] syzkaller0: entered promiscuous mode [ 473.399033][T22290] syzkaller0: entered allmulticast mode [ 473.400027][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6277'. [ 473.444931][T22302] ip_tables: iptables: counters copy to user failed while replacing table [ 473.461854][ T43] audit: type=1400 audit(1792763794.063:2686): avc: denied { connect } for pid=22303 comm="syz.4.6281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 473.591311][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6285'. [ 474.975500][T22336] syzkaller0: entered promiscuous mode [ 474.975521][T22336] syzkaller0: entered allmulticast mode [ 474.978154][T22336] tipc: Enabled bearer , priority 0 [ 474.992708][T22336] tipc: Resetting bearer [ 474.996959][T22335] tipc: Resetting bearer [ 475.011079][T22335] tipc: Disabling bearer [ 475.126993][T22354] syzkaller0: entered promiscuous mode [ 475.127017][T22354] syzkaller0: entered allmulticast mode [ 475.132963][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 475.261496][T22376] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22376 comm=syz.4.6311 [ 475.293104][ T43] audit: type=1400 audit(1792763795.893:2687): avc: denied { setopt } for pid=22379 comm="syz.4.6313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 475.633060][T22406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6319'. [ 476.703964][T22381] tipc: Enabling of bearer rejected, failed to enable media [ 476.856815][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6327'. [ 476.864199][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6329'. [ 476.866031][T22432] syzkaller0: entered promiscuous mode [ 476.866044][T22432] syzkaller0: entered allmulticast mode [ 476.867962][T22432] tipc: Enabled bearer , priority 0 [ 476.884621][T22432] tipc: Resetting bearer [ 476.895177][T22429] tipc: Resetting bearer [ 476.906985][T22429] tipc: Disabling bearer [ 476.932011][T22435] syzkaller0: entered promiscuous mode [ 476.932027][T22435] syzkaller0: entered allmulticast mode [ 476.979980][T22447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6334'. [ 476.980211][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'. [ 476.980428][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6334'. [ 477.036592][T22447] netlink: 'syz.2.6334': attribute type 1 has an invalid length. [ 478.455246][T22464] __nla_validate_parse: 1 callbacks suppressed [ 478.455261][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6340'. [ 478.574579][T22479] syzkaller0: entered promiscuous mode [ 478.574594][T22479] syzkaller0: entered allmulticast mode [ 478.872042][T22511] tipc: Enabled bearer , priority 0 [ 478.878336][T22511] tipc: Resetting bearer [ 478.893587][T22509] tipc: Disabling bearer [ 478.997158][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6364'. [ 479.055696][T22531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6367'. [ 479.070464][T22534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6369'. [ 479.070551][T22534] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 479.129734][T22543] tipc: Enabled bearer , priority 0 [ 479.131476][T22543] tipc: Resetting bearer [ 479.143326][T22542] tipc: Disabling bearer [ 479.261589][T22556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6374'. [ 479.267233][T22556] macvtap1: entered promiscuous mode [ 479.267248][T22556] erspan0: entered promiscuous mode [ 479.267349][T22556] macvtap1: entered allmulticast mode [ 479.267358][T22556] erspan0: entered allmulticast mode [ 479.282265][T22556] erspan0: left allmulticast mode [ 479.282305][T22556] erspan0: left promiscuous mode [ 479.282638][T22556] macvtap1: left promiscuous mode [ 479.282654][T22556] macvtap1: left allmulticast mode [ 479.361184][ T855] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 479.409650][T22569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6379'. [ 479.409731][T22569] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 479.453907][T22574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6381'. [ 479.530717][ T855] usb 7-1: not running at top speed; connect to a high speed hub [ 479.530737][ T855] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 479.531486][ T855] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.531513][ T855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.542747][ T855] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 479.542779][ T855] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 479.670742][ T43] audit: type=1400 audit(1792763800.273:2688): avc: denied { create } for pid=22580 comm="syz.0.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 479.785114][T22590] syzkaller0: entered promiscuous mode [ 479.785129][T22590] syzkaller0: entered allmulticast mode [ 480.234241][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 480.234263][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6392'. [ 480.791330][ T43] audit: type=1400 audit(1792763801.393:2689): avc: denied { read } for pid=22631 comm="syz.4.6404" dev="nsfs" ino=4026534613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 480.791363][ T43] audit: type=1400 audit(1792763801.393:2690): avc: denied { open } for pid=22631 comm="syz.4.6404" path="net:[4026534613]" dev="nsfs" ino=4026534613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 480.792897][ T43] audit: type=1400 audit(1792763801.393:2691): avc: denied { connect } for pid=22631 comm="syz.4.6404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 480.833531][T22634] syzkaller0: entered promiscuous mode [ 480.833552][T22634] syzkaller0: entered allmulticast mode [ 482.099056][ T855] usb 7-1: USB disconnect, device number 72 [ 482.709192][ T43] audit: type=1400 audit(1792763803.313:2692): avc: denied { setopt } for pid=22683 comm="syz.2.6417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 482.780180][T22682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.798794][T17485] Bluetooth: hci2: command 0x0406 tx timeout [ 483.449348][T22691] syzkaller0: entered promiscuous mode [ 483.449373][T22691] syzkaller0: entered allmulticast mode [ 483.859395][ T24] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 484.033272][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 484.033303][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 484.034195][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.034223][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.042838][ T24] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 484.042888][ T24] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 484.890995][T22718] syzkaller0: entered promiscuous mode [ 484.891009][T22718] syzkaller0: entered allmulticast mode [ 484.967198][T22724] 0: reclassify loop, rule prio 0, protocol 03 [ 485.083018][T22738] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 485.106089][T22738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.222453][T22743] netlink: 'syz.0.6437': attribute type 10 has an invalid length. [ 485.222476][T22743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6437'. [ 485.872614][T22738] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 485.885182][T22740] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 485.885602][T22743] dummy0: entered promiscuous mode [ 485.893603][T22743] bond1: (slave dummy0): Releasing backup interface [ 486.123017][ T43] audit: type=1400 audit(1792763806.723:2693): avc: denied { write } for pid=22770 comm="syz.1.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.123879][ T43] audit: type=1400 audit(1792763806.723:2694): avc: denied { read } for pid=22770 comm="syz.1.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.162866][T22775] syzkaller0: entered promiscuous mode [ 486.162887][T22775] syzkaller0: entered allmulticast mode [ 486.175535][ T43] audit: type=1400 audit(1792763806.773:2695): avc: denied { setopt } for pid=22770 comm="syz.1.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.301417][T22783] syzkaller0: entered promiscuous mode [ 486.301439][T22783] syzkaller0: entered allmulticast mode [ 486.581012][ T5869] usb 7-1: USB disconnect, device number 73 [ 486.801099][T22794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6457'. [ 487.142452][T22816] batadv_slave_1: entered promiscuous mode [ 487.142933][T22815] batadv_slave_1: left promiscuous mode [ 487.439324][T17919] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 487.443212][T22845] syzkaller0: entered promiscuous mode [ 487.443226][T22845] syzkaller0: entered allmulticast mode [ 487.590835][T17919] usb 5-1: not running at top speed; connect to a high speed hub [ 487.590856][T17919] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 487.591692][T17919] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.591721][T17919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.617526][T17919] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 487.617562][T17919] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 488.282105][T17485] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.286269][T17485] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.289272][T17485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.301812][T17485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.302469][T17485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.494935][T22911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6500'. [ 488.586530][T22894] rxe_eth0 speed is unknown, defaulting to 1000 [ 488.688272][T22917] syzkaller0: entered promiscuous mode [ 488.688286][T22917] syzkaller0: entered allmulticast mode [ 488.817935][ T5587] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 488.817989][ T5587] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 488.825562][ T5587] team0: Port device netdevsim1 removed [ 489.039272][ T43] audit: type=1400 audit(1792763809.643:2696): avc: denied { read } for pid=5488 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 489.156961][ T5587] bridge_slave_1: left allmulticast mode [ 489.158844][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.166936][ T5587] bridge_slave_0: left allmulticast mode [ 489.166952][ T5587] bridge_slave_0: left promiscuous mode [ 489.167102][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.188417][ T5587] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 489.212321][ T5587] batman_adv: batadv0: Removing interface: ip6gretap1 [ 489.336903][T22948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6508'. [ 489.353193][ T5587]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.353922][ T5587]  (unregistering): Released all slaves [ 489.356671][ T5587] bond0 (unregistering): Released all slaves [ 489.380315][T22894] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.380408][T22894] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.380493][T22894] bridge_slave_0: entered allmulticast mode [ 489.381249][T22894] bridge_slave_0: entered promiscuous mode [ 489.387769][T22894] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.387823][T22894] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.387895][T22894] bridge_slave_1: entered allmulticast mode [ 489.388722][T22894] bridge_slave_1: entered promiscuous mode [ 489.468359][T22894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.472531][T22894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.514289][T22954] syzkaller0: entered promiscuous mode [ 489.514304][T22954] syzkaller0: entered allmulticast mode [ 489.603255][T22894] team0: Port device team_slave_0 added [ 489.612990][T22894] team0: Port device team_slave_1 added [ 489.622799][ T43] audit: type=1400 audit(1792763810.223:2697): avc: denied { write } for pid=22960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.660014][T22894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.660029][T22894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.660049][T22894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.708159][ T43] audit: type=1400 audit(1792763810.303:2698): avc: denied { write } for pid=22964 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.709932][T22894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.709942][T22894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.709955][T22894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.751751][T22894] hsr_slave_0: entered promiscuous mode [ 489.752543][T22894] hsr_slave_1: entered promiscuous mode [ 489.753001][T22894] debugfs: 'hsr0' already exists in 'hsr' [ 489.753015][T22894] Cannot create hsr debugfs directory [ 489.794048][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 489.925515][ T43] audit: type=1400 audit(1792763810.523:2699): avc: denied { write } for pid=22976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.005309][ T43] audit: type=1400 audit(1792763810.603:2700): avc: denied { write } for pid=22983 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.006730][ T5587] hsr_slave_0: left promiscuous mode [ 490.007233][ T5587] hsr_slave_1: left promiscuous mode [ 490.007639][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.008100][ T5587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.076369][ T5587] team_slave_1 (unregistering): left promiscuous mode [ 490.076385][ T5587] team_slave_1 (unregistering): left allmulticast mode [ 490.076894][ T5587] team0 (unregistering): Port device team_slave_1 removed [ 490.089620][ T5587] team_slave_0 (unregistering): left promiscuous mode [ 490.089635][ T5587] team_slave_0 (unregistering): left allmulticast mode [ 490.092111][ T5587] team0 (unregistering): Port device team_slave_0 removed [ 490.154175][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 490.164724][T17919] usb 5-1: USB disconnect, device number 91 [ 490.181414][T21954] bond0: (slave bond_slave_0): interface is now down [ 490.181436][T21954] bond0: (slave bond_slave_1): interface is now down [ 490.226311][T22988] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 490.398990][ T5772] Bluetooth: hci0: command tx timeout [ 490.424936][ T43] audit: type=1400 audit(1792763811.023:2701): avc: denied { write } for pid=22995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.473281][ T43] audit: type=1400 audit(1792763811.073:2702): avc: denied { write } for pid=22998 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.047226][T23024] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6530'. [ 491.121986][T23026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6531'. [ 492.468844][ T5772] Bluetooth: hci0: command tx timeout [ 492.709843][ T5587] bond0: (slave bond_slave_0): interface is now down [ 492.709868][ T5587] bond0: (slave bond_slave_1): interface is now down [ 492.712870][ T5587] bond0: now running without any active interface! [ 492.980788][T22987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.982166][T22894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 492.999757][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 493.000874][T22894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 493.002835][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.009056][T22894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 493.018054][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.025642][T22894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 493.030315][T22894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.033826][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 493.093928][T23048] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6537'. [ 493.150391][T22894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.161950][T22894] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.168302][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.168350][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.169667][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.169745][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.251598][T23069] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6546'. [ 493.273405][T23072] netlink: 'syz.0.6548': attribute type 1 has an invalid length. [ 493.579765][T22894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.614803][T22894] veth0_vlan: entered promiscuous mode [ 493.624579][T22894] veth1_vlan: entered promiscuous mode [ 493.654799][T22894] veth0_macvtap: entered promiscuous mode [ 493.659210][T22894] veth1_macvtap: entered promiscuous mode [ 493.668213][T22894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.676222][T22894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.732411][T23105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.732458][T23105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.732491][T23105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.732523][T23105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.744696][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.744711][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.781158][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.781180][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.257718][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6581'. [ 494.392186][T23185] syzkaller0: entered promiscuous mode [ 494.392206][T23185] syzkaller0: entered allmulticast mode [ 494.498211][T23193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6587'. [ 494.549062][T17485] Bluetooth: hci0: command tx timeout [ 494.642877][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6592'. [ 494.669676][T23210] syzkaller0: entered promiscuous mode [ 494.669690][T23210] syzkaller0: entered allmulticast mode [ 494.674653][T23212] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6595'. [ 494.728780][T23217] batman_adv: batadv0: Adding interface: syzkaller0 [ 494.728798][T23217] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.728826][T23217] batman_adv: batadv0: Interface activated: syzkaller0 [ 494.730564][T23215] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 494.746215][T23215] batman_adv: batadv0: Removing interface: syzkaller0 [ 494.953627][T23243] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6606'. [ 495.097801][T23258] syzkaller0: entered promiscuous mode [ 495.097816][T23258] syzkaller0: entered allmulticast mode [ 495.149561][T23264] syzkaller0: entered promiscuous mode [ 495.149574][T23264] syzkaller0: entered allmulticast mode [ 495.492156][T23290] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6626'. [ 496.628747][T17485] Bluetooth: hci0: command tx timeout [ 497.152913][T23342] __nla_validate_parse: 2 callbacks suppressed [ 497.152932][T23342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6640'. [ 497.237217][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 497.237230][ T43] audit: type=1400 audit(1792763817.833:2705): avc: denied { bind } for pid=23359 comm="syz.1.6649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.237499][ T43] audit: type=1400 audit(1792763817.833:2706): avc: denied { connect } for pid=23359 comm="syz.1.6649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.274738][T23366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6652'. [ 497.435762][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.447125][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.448296][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.455107][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.455856][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.589641][T17485] Bluetooth: hci2: command tx timeout [ 500.481308][T23422] syzkaller0: entered promiscuous mode [ 500.481329][T23422] syzkaller0: entered allmulticast mode [ 500.529051][T23425] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6665'. [ 500.531814][T23374] rxe_eth0 speed is unknown, defaulting to 1000 [ 500.547091][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'. [ 500.547113][T23427] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6666'. [ 500.547127][T23427] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6666'. [ 500.575315][T23429] syzkaller0: entered promiscuous mode [ 500.575336][T23429] syzkaller0: entered allmulticast mode [ 500.697431][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6673'. [ 500.706428][T23445] gretap0: entered promiscuous mode [ 500.706576][T23445] macvlan2: entered promiscuous mode [ 500.707648][T23445] gretap0: left promiscuous mode [ 500.826431][T23461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6679'. [ 500.877402][T23374] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.877487][T23374] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.877552][T23374] bridge_slave_0: entered allmulticast mode [ 500.878230][T23374] bridge_slave_0: entered promiscuous mode [ 500.880243][T23374] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.880357][T23374] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.880644][T23374] bridge_slave_1: entered allmulticast mode [ 500.881829][T23374] bridge_slave_1: entered promiscuous mode [ 500.903974][T23472] syzkaller0: entered promiscuous mode [ 500.904027][T23472] syzkaller0: entered allmulticast mode [ 500.906299][T23374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.910877][T23374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.922278][T23476] batman_adv: batadv0: Adding interface: syzkaller0 [ 500.922292][T23476] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.922370][T23476] batman_adv: batadv0: Interface activated: syzkaller0 [ 500.925630][T23475] batman_adv: batadv0: Adding interface: syzkaller0 [ 500.925643][T23475] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.925665][T23475] batman_adv: batadv0: Interface activated: syzkaller0 [ 500.933562][T23374] team0: Port device team_slave_0 added [ 501.122476][T23473] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 501.132134][T23473] batman_adv: batadv0: Removing interface: syzkaller0 [ 501.135507][T23374] team0: Port device team_slave_1 added [ 501.135838][T23474] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 501.151141][T23474] batman_adv: batadv0: Removing interface: syzkaller0 [ 501.172026][T23374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.172038][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.172052][T23374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.172836][T23374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.172844][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.172857][T23374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.192262][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.192294][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.292415][T23374] hsr_slave_0: entered promiscuous mode [ 501.293292][T23374] hsr_slave_1: entered promiscuous mode [ 501.294076][T23374] debugfs: 'hsr0' already exists in 'hsr' [ 501.294095][T23374] Cannot create hsr debugfs directory [ 501.473467][T23374] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.501537][T23498] batman_adv: batadv0: Adding interface: syzkaller0 [ 501.501551][T23498] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.501598][T23498] batman_adv: batadv0: Interface activated: syzkaller0 [ 501.502963][T23497] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 501.523321][T23497] batman_adv: batadv0: Removing interface: syzkaller0 [ 501.549231][T23374] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.553454][T23500] syzkaller0: entered promiscuous mode [ 501.553466][T23500] syzkaller0: entered allmulticast mode [ 501.603648][T23374] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.660508][T23510] syzkaller0: entered promiscuous mode [ 501.660536][T23510] syzkaller0: entered allmulticast mode [ 501.689077][T17485] Bluetooth: hci2: command tx timeout [ 501.716730][T23374] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.882137][T23374] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.883924][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.884479][T23374] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.886071][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.886592][T23374] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.889447][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.889936][T23374] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.892562][T23374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.933611][T23374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.948195][T23374] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.953456][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.953507][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.955092][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6711'. [ 501.955117][T23542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6711'. [ 501.978978][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.979024][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.014344][T23549] batman_adv: batadv0: Adding interface: syzkaller0 [ 502.014355][T23549] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.014372][T23549] batman_adv: batadv0: Interface activated: syzkaller0 [ 502.017857][T23547] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 502.034703][T23547] batman_adv: batadv0: Removing interface: syzkaller0 [ 502.092753][T21957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.096542][T21957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.104201][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.104406][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.223168][T23561] __nla_validate_parse: 2 callbacks suppressed [ 502.223182][T23561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6719'. [ 502.255108][T23566] tipc: Enabled bearer , priority 10 [ 502.350123][ T43] audit: type=1400 audit(1792763822.953:2707): avc: denied { setopt } for pid=23583 comm="syz.1.6726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 502.393320][T23374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.410536][T23593] veth0_to_bridge: entered promiscuous mode [ 502.410651][T23593] macvtap1: entered allmulticast mode [ 502.410660][T23593] veth0_to_bridge: entered allmulticast mode [ 502.442932][T23597] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6729'. [ 502.477477][T23602] syzkaller0: entered promiscuous mode [ 502.477499][T23602] syzkaller0: entered allmulticast mode [ 503.309760][T23609] batman_adv: batadv0: Adding interface: syzkaller0 [ 503.309773][T23609] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.309790][T23609] batman_adv: batadv0: Interface activated: syzkaller0 [ 503.345519][T23612] syzkaller0: entered promiscuous mode [ 503.345533][T23612] syzkaller0: entered allmulticast mode [ 503.391698][T23374] veth0_vlan: entered promiscuous mode [ 503.398691][T23374] veth1_vlan: entered promiscuous mode [ 503.450588][T23374] veth0_macvtap: entered promiscuous mode [ 503.452588][T23374] veth1_macvtap: entered promiscuous mode [ 503.458812][T23374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.469331][T23374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.529638][T21949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.529665][T21949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.529683][T21949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.529704][T21949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.553366][T19256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.553384][T19256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.575932][ T7748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.575953][ T7748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.686208][T23636] batman_adv: batadv0: Adding interface: syzkaller0 [ 503.686220][T23636] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.686236][T23636] batman_adv: batadv0: Interface activated: syzkaller0 [ 503.689640][T23635] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 503.714613][T23635] batman_adv: batadv0: Removing interface: syzkaller0 [ 503.720436][T23640] syzkaller0: entered promiscuous mode [ 503.720449][T23640] syzkaller0: entered allmulticast mode [ 503.748760][T17485] Bluetooth: hci2: command tx timeout [ 503.755013][T23644] syzkaller0: left promiscuous mode [ 503.755027][T23644] syzkaller0: left allmulticast mode [ 503.797172][T23648] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 503.947040][ T43] audit: type=1400 audit(1792763824.543:2708): avc: denied { getopt } for pid=23667 comm="syz.0.6756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.984959][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6758'. [ 503.984987][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6758'. [ 504.094410][T23682] syzkaller0: entered promiscuous mode [ 504.094424][T23682] syzkaller0: entered allmulticast mode [ 504.331404][T23704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6771'. [ 504.334300][T23704] syz_tun: entered promiscuous mode [ 504.334490][T23704] macvlan2: entered promiscuous mode [ 504.335585][T23704] syz_tun: left promiscuous mode [ 504.378325][T23706] syzkaller0: entered promiscuous mode [ 504.378339][T23706] syzkaller0: entered allmulticast mode [ 504.602791][T23727] syzkaller0: entered promiscuous mode [ 504.602812][T23727] syzkaller0: entered allmulticast mode [ 505.839032][T17485] Bluetooth: hci2: command tx timeout [ 506.333629][T23766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6797'. [ 506.343655][T23766] netlink: 'syz.1.6797': attribute type 27 has an invalid length. [ 506.406536][T23766] syzkaller0: left promiscuous mode [ 506.406559][T23766] syzkaller0: left allmulticast mode [ 506.406820][T23766] macvtap1: left allmulticast mode [ 506.406835][T23766] veth0_to_bridge: left allmulticast mode [ 506.896806][T23820] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.948268][T23827] syzkaller0: entered promiscuous mode [ 506.948290][T23827] syzkaller0: entered allmulticast mode [ 507.085195][T23837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6826'. [ 507.269940][T23865] syzkaller0: entered promiscuous mode [ 507.269955][T23865] syzkaller0: entered allmulticast mode [ 507.539366][T23897] syzkaller0: entered promiscuous mode [ 507.539380][T23897] syzkaller0: entered allmulticast mode [ 508.148339][T23943] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (h\E3~ϱoR!Fo?< [ 508.181512][T23947] syzkaller0: entered promiscuous mode [ 508.181527][T23947] syzkaller0: entered allmulticast mode [ 508.340526][T23965] macvtap2: entered allmulticast mode [ 508.340543][T23965] veth0_to_bridge: entered allmulticast mode [ 508.347364][T23965] veth0_to_bridge: left allmulticast mode [ 508.468942][ T43] audit: type=1400 audit(1792763829.063:2709): avc: denied { read } for pid=23983 comm="syz.0.6893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 509.076592][T23994] syzkaller0: entered promiscuous mode [ 509.076617][T23994] syzkaller0: entered allmulticast mode [ 509.546772][T24033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6905'. [ 509.675617][T24045] syzkaller0: entered promiscuous mode [ 509.675637][T24045] syzkaller0: entered allmulticast mode [ 509.803443][ T43] audit: type=1400 audit(1792763830.403:2710): avc: denied { name_bind } for pid=24062 comm="syz.1.6919" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 510.000665][T24088] syzkaller0: entered promiscuous mode [ 510.000679][T24088] syzkaller0: entered allmulticast mode [ 510.004059][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6931'. [ 510.043544][T24096] tipc: Started in network mode [ 510.043568][T24096] tipc: Node identity d6aa0f0a9963, cluster identity 4711 [ 510.043683][T24096] tipc: Enabled bearer , priority 0 [ 510.044336][T24096] syzkaller0: entered promiscuous mode [ 510.044348][T24096] syzkaller0: entered allmulticast mode [ 510.045209][T24094] syzkaller0: entered promiscuous mode [ 510.045222][T24094] syzkaller0: entered allmulticast mode [ 510.075169][T24096] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 510.077214][T24096] tipc: Resetting bearer [ 510.078829][T24095] tipc: Resetting bearer [ 510.093336][T24095] tipc: Disabling bearer [ 510.147633][T24106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6937'. [ 510.322278][T24133] syzkaller0: entered promiscuous mode [ 510.322292][T24133] syzkaller0: entered allmulticast mode [ 510.598806][T24173] nbd: must specify a size in bytes for the device [ 510.600764][ T7065] block nbd0: Receive control failed (result -32) [ 510.601403][ T68] block nbd0: Receive control failed (result -32) [ 510.615035][T24176] syzkaller0: entered promiscuous mode [ 510.615050][T24176] syzkaller0: entered allmulticast mode [ 510.957503][T24204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6972'. [ 511.426361][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6985'. [ 511.524502][T24253] syzkaller0: entered promiscuous mode [ 511.524516][T24253] syzkaller0: entered allmulticast mode [ 511.757189][T24274] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7002'. [ 511.757217][T24274] netlink: 6 bytes leftover after parsing attributes in process `syz.0.7002'. [ 511.844230][T24280] syzkaller0: entered promiscuous mode [ 511.844252][T24280] syzkaller0: entered allmulticast mode [ 512.121090][T24302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7013'. [ 512.450183][T24316] syzkaller0: entered promiscuous mode [ 512.450202][T24316] syzkaller0: entered allmulticast mode [ 512.744244][T24333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7023'. [ 513.599722][T24409] tipc: Enabling of bearer rejected, failed to enable media [ 513.632624][T24413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7054'. [ 513.782100][T24431] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.981515][T24442] netlink: 'syz.1.7068': attribute type 10 has an invalid length. [ 513.985041][T24442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.986215][T24442] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 514.076704][T24452] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.149526][T24460] batman_adv: batadv0: Adding interface: syzkaller0 [ 514.149538][T24460] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.149584][T24460] batman_adv: batadv0: Interface activated: syzkaller0 [ 514.253689][T24459] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 514.276180][T24459] batman_adv: batadv0: Removing interface: syzkaller0 [ 514.400639][T24474] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.467032][T24478] ip_tables: iptables: counters copy to user failed while replacing table [ 514.507672][T24478] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.507928][T24478] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.641538][T24478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.650949][T24478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.849044][T21955] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.849124][T21955] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.849156][T21955] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.849210][T21955] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.989629][T24498] netlink: 'syz.4.7093': attribute type 1 has an invalid length. [ 514.998801][T24498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.008363][T24498] bond1: (slave geneve2): making interface the new active one [ 515.012430][T24498] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 515.028896][T21955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.049044][T21949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.049071][T21949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.049089][T21949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.169969][T24509] syzkaller0: entered promiscuous mode [ 515.169992][T24509] syzkaller0: entered allmulticast mode [ 515.174476][T24509] tipc: Enabled bearer , priority 0 [ 515.177334][T24509] tipc: Resetting bearer [ 515.186915][T24508] tipc: Resetting bearer [ 515.201954][T24508] tipc: Disabling bearer [ 515.290797][T24517] IPVS: persistence engine module ip_vs_pe_ not found [ 515.617628][T24541] syzkaller0: left promiscuous mode [ 515.617642][T24541] syzkaller0: left allmulticast mode [ 516.488283][T24589] __nla_validate_parse: 1 callbacks suppressed [ 516.488298][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7131'. [ 516.529945][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7132'. [ 516.551768][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.579130][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7134'. [ 516.579156][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7134'. [ 516.579167][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7134'. [ 516.623938][T24599] netlink: 392 bytes leftover after parsing attributes in process `syz.1.7137'. [ 516.675733][T24605] syzkaller0: entered promiscuous mode [ 516.675754][T24605] syzkaller0: entered allmulticast mode [ 516.677686][T24605] tipc: Started in network mode [ 516.677712][T24605] tipc: Node identity eef7784ab74f, cluster identity 4711 [ 516.680418][T24605] tipc: Enabled bearer , priority 0 [ 516.728073][T24612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.888717][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7147'. [ 516.958508][T24629] netlink: 392 bytes leftover after parsing attributes in process `syz.1.7149'. [ 516.997805][ T43] audit: type=1400 audit(1792763837.593:2711): avc: denied { map } for pid=24632 comm="syz.1.7151" path="socket:[88728]" dev="sockfs" ino=88728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 517.033883][T24636] batadv_slave_1: entered promiscuous mode [ 517.036886][T24637] syzkaller0: entered promiscuous mode [ 517.036906][T24637] syzkaller0: entered allmulticast mode [ 517.042003][T24637] tipc: Enabled bearer , priority 0 [ 517.044863][T24637] tipc: Resetting bearer [ 517.047438][T24635] tipc: Resetting bearer [ 517.063089][T24635] tipc: Disabling bearer [ 517.075944][T24634] batadv_slave_1: left promiscuous mode [ 517.138206][T24643] ip_tables: iptables: counters copy to user failed while replacing table [ 517.177166][T24647] syzkaller0: left promiscuous mode [ 517.177191][T24647] syzkaller0: left allmulticast mode [ 517.252673][T24652] netlink: 392 bytes leftover after parsing attributes in process `syz.1.7160'. [ 517.257948][T24653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7159'. [ 517.351535][T24657] syzkaller0: entered promiscuous mode [ 517.351559][T24657] syzkaller0: entered allmulticast mode [ 517.485854][T24667] netlink: 'syz.4.7167': attribute type 1 has an invalid length. [ 517.626803][T24681] syzkaller0: entered promiscuous mode [ 517.626825][T24681] syzkaller0: entered allmulticast mode [ 517.711276][ T64] tipc: Node number set to 1505261642 [ 518.892493][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.902797][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.903685][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.905390][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.905895][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.979371][T24784] netlink: 'syz.4.7219': attribute type 1 has an invalid length. [ 519.161496][T24781] rxe_eth0 speed is unknown, defaulting to 1000 [ 519.375254][T24781] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.375409][T24781] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.375567][T24781] bridge_slave_0: entered allmulticast mode [ 519.376262][T24781] bridge_slave_0: entered promiscuous mode [ 519.379975][T24781] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.380045][T24781] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.380197][T24781] bridge_slave_1: entered allmulticast mode [ 519.381036][T24781] bridge_slave_1: entered promiscuous mode [ 519.395728][T24781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.398028][T24781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.411478][T24781] team0: Port device team_slave_0 added [ 519.412706][T24781] team0: Port device team_slave_1 added [ 519.427109][T24781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.427125][T24781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.427146][T24781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.427970][T24781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.427978][T24781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.427991][T24781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.450892][T24781] hsr_slave_0: entered promiscuous mode [ 519.451583][T24781] hsr_slave_1: entered promiscuous mode [ 519.452057][T24781] debugfs: 'hsr0' already exists in 'hsr' [ 519.452075][T24781] Cannot create hsr debugfs directory [ 519.567300][T24781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.663524][T24781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.737938][T24781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.813883][T24834] block nbd0: reconnected socket [ 519.813940][T24834] block nbd0: reconnected socket [ 519.815751][ T68] block nbd0: Receive control failed (result -32) [ 519.816509][ T7065] block nbd0: Receive control failed (result -32) [ 519.861082][T24781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.866937][T24781] [ 519.871980][T24781] ====================================================== [ 519.874801][T24781] WARNING: possible circular locking dependency detected [ 519.877610][T24781] syzkaller #0 Tainted: G L [ 519.880003][T24781] ------------------------------------------------------ [ 519.882676][T24781] syz-executor/24781 is trying to acquire lock: [ 519.885236][T24781] ffff88801eaa5aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x3b/0x70 [ 519.889243][T24781] [ 519.889243][T24781] but task is already holding lock: [ 519.892250][T24781] ffffffff9102bb00 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 519.895807][T24781] [ 519.895807][T24781] which lock already depends on the new lock. [ 519.895807][T24781] [ 519.899935][T24781] [ 519.899935][T24781] the existing dependency chain (in reverse order) is: [ 519.903512][T24781] [ 519.903512][T24781] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 519.906623][T24781] lock_acquire+0x1d1/0x380 [ 519.908696][T24781] __mutex_lock+0x19f/0x1c10 [ 519.910784][T24781] get_device_parent+0xff/0x4c0 [ 519.912939][T24781] device_add+0xc3b/0x1970 [ 519.914977][T24781] device_create_groups_vargs+0x1f8/0x270 [ 519.917528][T24781] device_create+0xed/0x130 [ 519.919573][T24781] msr_device_create+0x31/0x70 [ 519.921714][T24781] cpuhp_invoke_callback+0x3b4/0x9a0 [ 519.924080][T24781] cpuhp_thread_fun+0x3e9/0x7c0 [ 519.926305][T24781] smpboot_thread_fn+0x41f/0xb90 [ 519.928527][T24781] kthread+0x373/0x450 [ 519.930479][T24781] ret_from_fork+0x730/0xd60 [ 519.932584][T24781] ret_from_fork_asm+0x1a/0x30 [ 519.934736][T24781] [ 519.934736][T24781] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 519.937822][T24781] lock_acquire+0x1d1/0x380 [ 519.939877][T24781] cpuhp_thread_fun+0x146/0x7c0 [ 519.942059][T24781] smpboot_thread_fn+0x41f/0xb90 [ 519.944254][T24781] kthread+0x373/0x450 [ 519.946158][T24781] ret_from_fork+0x730/0xd60 [ 519.948190][T24781] ret_from_fork_asm+0x1a/0x30 [ 519.950355][T24781] [ 519.950355][T24781] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 519.953525][T24781] lock_acquire+0x1d1/0x380 [ 519.955571][T24781] cpus_read_lock+0x3d/0x170 [ 519.957669][T24781] static_key_slow_inc+0x12/0x30 [ 519.959833][T24781] nbd_genl_reconnect_sock_cb+0x39f/0x990 [ 519.962362][T24781] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 519.964719][T24781] nbd_genl_reconfigure+0x861/0xde0 [ 519.966984][T24781] genl_family_rcv_msg_doit+0x214/0x300 [ 519.969295][T24781] genl_rcv_msg+0x560/0x800 [ 519.971402][T24781] netlink_rcv_skb+0x159/0x420 [ 519.973623][T24781] genl_rcv+0x28/0x40 [ 519.975487][T24781] netlink_unicast+0x668/0x950 [ 519.977673][T24781] netlink_sendmsg+0x9ac/0x10c0 [ 519.979886][T24781] ____sys_sendmsg+0xa99/0xc30 [ 519.982090][T24781] ___sys_sendmsg+0x190/0x1e0 [ 519.984302][T24781] __sys_sendmsg+0x160/0x210 [ 519.986471][T24781] do_syscall_64+0x123/0x790 [ 519.988645][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.991352][T24781] [ 519.991352][T24781] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 519.994510][T24781] lock_acquire+0x1d1/0x380 [ 519.996635][T24781] __mutex_lock+0x19f/0x1c10 [ 519.998761][T24781] nbd_queue_rq+0x42d/0xfa0 [ 520.000861][T24781] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 520.003295][T24781] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 520.006056][T24781] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 520.008690][T24781] blk_mq_run_work_fn+0x130/0x380 [ 520.010960][T24781] process_one_work+0xac7/0x1b10 [ 520.013174][T24781] worker_thread+0x5ef/0xe50 [ 520.015261][T24781] kthread+0x373/0x450 [ 520.017163][T24781] ret_from_fork+0x730/0xd60 [ 520.019179][T24781] ret_from_fork_asm+0x1a/0x30 [ 520.021289][T24781] [ 520.021289][T24781] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 520.024182][T24781] lock_acquire+0x1d1/0x380 [ 520.026235][T24781] __mutex_lock+0x19f/0x1c10 [ 520.029145][T24781] nbd_queue_rq+0xba/0xfa0 [ 520.031188][T24781] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 520.033670][T24781] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 520.036009][T24781] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 520.038688][T24781] blk_mq_run_work_fn+0x130/0x380 [ 520.040921][T24781] process_one_work+0xac7/0x1b10 [ 520.042919][T24781] worker_thread+0x5ef/0xe50 [ 520.045021][T24781] kthread+0x373/0x450 [ 520.046936][T24781] ret_from_fork+0x730/0xd60 [ 520.048956][T24781] ret_from_fork_asm+0x1a/0x30 [ 520.051105][T24781] [ 520.051105][T24781] -> #5 (set->srcu){.+.+}-{0:0}: [ 520.053956][T24781] lock_sync+0xb5/0x120 [ 520.055861][T24781] __synchronize_srcu+0xa2/0x310 [ 520.058047][T24781] blk_mq_quiesce_queue+0x149/0x1c0 [ 520.060378][T24781] elevator_switch+0x17b/0x7e0 [ 520.062675][T24781] elevator_change+0x352/0x530 [ 520.064812][T24781] elevator_set_default+0x29e/0x360 [ 520.067163][T24781] blk_register_queue+0x49e/0x640 [ 520.069451][T24781] __add_disk+0x7dd/0xf10 [ 520.071453][T24781] add_disk_fwnode+0x118/0x480 [ 520.073614][T24781] nbd_dev_add+0x779/0xb10 [ 520.075641][T24781] nbd_init+0x2c5/0x2e0 [ 520.077558][T24781] do_one_initcall+0x11c/0x6f0 [ 520.079738][T24781] kernel_init_freeable+0x6ea/0x7b0 [ 520.082031][T24781] kernel_init+0x21/0x1d0 [ 520.084073][T24781] ret_from_fork+0x730/0xd60 [ 520.086165][T24781] ret_from_fork_asm+0x1a/0x30 [ 520.088306][T24781] [ 520.088306][T24781] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 520.090841][T24781] lock_acquire+0x1d1/0x380 [ 520.092404][T24781] __mutex_lock+0x19f/0x1c10 [ 520.094042][T24781] elevator_change+0x1bc/0x530 [ 520.095656][T24781] elevator_set_none+0x92/0xf0 [ 520.097294][T24781] blk_mq_update_nr_hw_queues+0x4c1/0x15e0 [ 520.099240][T24781] nbd_start_device+0x1a6/0xbd0 [ 520.100933][T24781] nbd_genl_connect+0xfc2/0x1770 [ 520.102582][T24781] genl_family_rcv_msg_doit+0x214/0x300 [ 520.104408][T24781] genl_rcv_msg+0x560/0x800 [ 520.105992][T24781] netlink_rcv_skb+0x159/0x420 [ 520.107612][T24781] genl_rcv+0x28/0x40 [ 520.109018][T24781] netlink_unicast+0x668/0x950 [ 520.110687][T24781] netlink_sendmsg+0x9ac/0x10c0 [ 520.112351][T24781] ____sys_sendmsg+0xa99/0xc30 [ 520.113992][T24781] ___sys_sendmsg+0x190/0x1e0 [ 520.115566][T24781] __sys_sendmsg+0x160/0x210 [ 520.117192][T24781] do_syscall_64+0x123/0x790 [ 520.118767][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.120821][T24781] [ 520.120821][T24781] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 520.123483][T24781] lock_acquire+0x1d1/0x380 [ 520.125085][T24781] blk_alloc_queue+0x610/0x790 [ 520.126716][T24781] blk_mq_alloc_queue+0x174/0x290 [ 520.128385][T24781] __blk_mq_alloc_disk+0x29/0x120 [ 520.130043][T24781] nbd_dev_add+0x491/0xb10 [ 520.131580][T24781] nbd_init+0x2c5/0x2e0 [ 520.133035][T24781] do_one_initcall+0x11c/0x6f0 [ 520.134669][T24781] kernel_init_freeable+0x6ea/0x7b0 [ 520.136487][T24781] kernel_init+0x21/0x1d0 [ 520.138015][T24781] ret_from_fork+0x730/0xd60 [ 520.139585][T24781] ret_from_fork_asm+0x1a/0x30 [ 520.141237][T24781] [ 520.141237][T24781] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 520.143416][T24781] lock_acquire+0x1d1/0x380 [ 520.145037][T24781] fs_reclaim_acquire+0xc4/0x100 [ 520.146742][T24781] kmem_cache_alloc_lru_noprof+0x5f/0x6a0 [ 520.148663][T24781] alloc_inode+0x183/0x250 [ 520.150225][T24781] iget_locked+0x1d4/0x6c0 [ 520.151741][T24781] kernfs_get_inode+0x46/0x470 [ 520.153365][T24781] kernfs_get_tree+0x636/0xbb0 [ 520.154962][T24781] vfs_get_tree+0x92/0x320 [ 520.156590][T24781] path_mount+0x7d0/0x2850 [ 520.158127][T24781] __x64_sys_mount+0x293/0x310 [ 520.159823][T24781] do_syscall_64+0x123/0x790 [ 520.161493][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.163446][T24781] [ 520.163446][T24781] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 520.166228][T24781] lock_acquire+0x1d1/0x380 [ 520.168215][T24781] down_write+0x86/0x1f0 [ 520.169928][T24781] kernfs_remove_by_name_ns+0x51/0x120 [ 520.171829][T24781] device_links_driver_bound+0xed/0xca0 [ 520.173714][T24781] driver_bound+0xf0/0x220 [ 520.175262][T24781] really_probe+0x3d4/0xa60 [ 520.176910][T24781] __driver_probe_device+0x210/0x460 [ 520.178694][T24781] driver_probe_device+0x4a/0x140 [ 520.180408][T24781] __device_attach_driver+0x1df/0x320 [ 520.182249][T24781] bus_for_each_drv+0x159/0x1e0 [ 520.183891][T24781] __device_attach+0x1e4/0x4d0 [ 520.185536][T24781] device_initial_probe+0xaf/0xd0 [ 520.187242][T24781] bus_probe_device+0x64/0x160 [ 520.188912][T24781] device_add+0x121d/0x1970 [ 520.190487][T24781] faux_device_create_with_groups+0x1d9/0x300 [ 520.192483][T24781] regulator_dummy_init+0x1e/0x40 [ 520.194195][T24781] regulator_init+0x14e/0x180 [ 520.195789][T24781] do_one_initcall+0x11c/0x6f0 [ 520.197468][T24781] kernel_init_freeable+0x6ea/0x7b0 [ 520.199257][T24781] kernel_init+0x21/0x1d0 [ 520.200796][T24781] ret_from_fork+0x730/0xd60 [ 520.202442][T24781] ret_from_fork_asm+0x1a/0x30 [ 520.204075][T24781] [ 520.204075][T24781] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 520.206724][T24781] check_prev_add+0xeb/0xe60 [ 520.208292][T24781] __lock_acquire+0x1528/0x1f40 [ 520.209962][T24781] lock_acquire+0x1d1/0x380 [ 520.211514][T24781] down_read+0x94/0x4c0 [ 520.212959][T24781] kernfs_remove+0x3b/0x70 [ 520.214486][T24781] sysfs_remove_dir+0xc8/0x110 [ 520.216088][T24781] __kobject_del+0xe2/0x220 [ 520.217650][T24781] kobject_del+0x3f/0x60 [ 520.219117][T24781] cleanup_glue_dir+0x203/0x260 [ 520.220732][T24781] device_del+0x63b/0x9b0 [ 520.222246][T24781] unregister_netdevice_many_notify+0x1255/0x1e00 [ 520.224474][T24781] unregister_netdevice_queue+0x30b/0x3c0 [ 520.226611][T24781] nsim_destroy+0x23e/0x970 [ 520.228147][T24781] __nsim_dev_port_del+0x194/0x2b0 [ 520.229837][T24781] nsim_dev_reload_destroy+0x10a/0x490 [ 520.231652][T24781] nsim_drv_remove+0x52/0x1e0 [ 520.233274][T24781] device_remove+0xcb/0x180 [ 520.234864][T24781] device_release_driver_internal+0x44e/0x620 [ 520.236842][T24781] bus_remove_device+0x2bc/0x560 [ 520.238440][T24781] device_del+0x376/0x9b0 [ 520.239898][T24781] device_unregister+0x1d/0xe0 [ 520.241490][T24781] del_device_store+0x346/0x480 [ 520.243811][T24781] bus_attr_store+0x74/0xb0 [ 520.245389][T24781] sysfs_kf_write+0xf2/0x150 [ 520.246994][T24781] kernfs_fop_write_iter+0x3e0/0x5f0 [ 520.248795][T24781] vfs_write+0x6af/0x1050 [ 520.250358][T24781] ksys_write+0x12a/0x250 [ 520.251867][T24781] do_syscall_64+0x123/0x790 [ 520.253474][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.255433][T24781] [ 520.255433][T24781] other info that might help us debug this: [ 520.255433][T24781] [ 520.258534][T24781] Chain exists of: [ 520.258534][T24781] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 520.258534][T24781] [ 520.262566][T24781] Possible unsafe locking scenario: [ 520.262566][T24781] [ 520.264848][T24781] CPU0 CPU1 [ 520.266564][T24781] ---- ---- [ 520.268224][T24781] lock(gdp_mutex); [ 520.269472][T24781] lock(cpuhp_state-up); [ 520.271537][T24781] lock(gdp_mutex); [ 520.273523][T24781] rlock(&root->kernfs_supers_rwsem); [ 520.275187][T24781] [ 520.275187][T24781] *** DEADLOCK *** [ 520.275187][T24781] [ 520.277663][T24781] locks held by syz-executor/24781: 8, last CPU#2: [ 520.279636][T24781] #0: ffff88802d1be460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 520.282435][T24781] #1: ffff888026b06c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 520.285421][T24781] #2: ffff88802c112008 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 520.288396][T24781] #3: ffffffff9144b640 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 520.291517][T24781] #4: ffff88805bd85128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 520.294710][T24781] #5: ffff88805bd82258 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 520.297818][T24781] #6: ffffffff91f05c20 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 520.300544][T24781] #7: ffffffff9102bb00 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 520.303321][T24781] [ 520.303321][T24781] stack backtrace: [ 520.305140][T24781] CPU: 2 UID: 0 PID: 24781 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 520.308507][T24781] Tainted: [L]=SOFTLOCKUP [ 520.309869][T24781] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.313005][T24781] Call Trace: [ 520.314038][T24781] [ 520.314963][T24781] dump_stack_lvl+0x100/0x190 [ 520.316435][T24781] print_circular_bug.cold+0x178/0x1be [ 520.318134][T24781] check_noncircular+0x146/0x160 [ 520.319659][T24781] check_prev_add+0xeb/0xe60 [ 520.321127][T24781] __lock_acquire+0x1528/0x1f40 [ 520.322628][T24781] lock_acquire+0x1d1/0x380 [ 520.324029][T24781] ? kernfs_remove+0x3b/0x70 [ 520.325486][T24781] ? __pfx___might_resched+0x10/0x10 [ 520.327112][T24781] down_read+0x94/0x4c0 [ 520.328456][T24781] ? kernfs_remove+0x3b/0x70 [ 520.329902][T24781] ? find_held_lock+0x2b/0x80 [ 520.331355][T24781] ? __pfx_down_read+0x10/0x10 [ 520.332857][T24781] ? kernfs_root+0xee/0x2a0 [ 520.334264][T24781] kernfs_remove+0x3b/0x70 [ 520.335673][T24781] sysfs_remove_dir+0xc8/0x110 [ 520.337192][T24781] __kobject_del+0xe2/0x220 [ 520.338636][T24781] kobject_del+0x3f/0x60 [ 520.339971][T24781] cleanup_glue_dir+0x203/0x260 [ 520.341604][T24781] device_del+0x63b/0x9b0 [ 520.342932][T24781] ? __pfx_device_del+0x10/0x10 [ 520.344476][T24781] ? netdev_unregister_kobject+0x2da/0x540 [ 520.346336][T24781] unregister_netdevice_many_notify+0x1255/0x1e00 [ 520.348308][T24781] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 520.350385][T24781] ? __kfree_rcu_sheaf+0x1a2/0x7e0 [ 520.351986][T24781] ? __pfx___mutex_lock+0x10/0x10 [ 520.353563][T24781] ? kvfree_call_rcu+0x1c0/0x4e0 [ 520.355107][T24781] ? do_raw_spin_unlock+0x145/0x1e0 [ 520.356717][T24781] unregister_netdevice_queue+0x30b/0x3c0 [ 520.358538][T24781] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 520.360509][T24781] nsim_destroy+0x23e/0x970 [ 520.361973][T24781] ? nsim_dev_reload_destroy+0xb0/0x490 [ 520.363772][T24781] ? nsim_dev_reload_destroy+0x10a/0x490 [ 520.365605][T24781] __nsim_dev_port_del+0x194/0x2b0 [ 520.367264][T24781] nsim_dev_reload_destroy+0x10a/0x490 [ 520.369023][T24781] nsim_drv_remove+0x52/0x1e0 [ 520.370527][T24781] ? __pfx_nsim_bus_remove+0x10/0x10 [ 520.372217][T24781] device_remove+0xcb/0x180 [ 520.373688][T24781] device_release_driver_internal+0x44e/0x620 [ 520.375661][T24781] bus_remove_device+0x2bc/0x560 [ 520.377311][T24781] ? __pfx_bus_remove_device+0x10/0x10 [ 520.378979][T24781] ? __pfx_device_remove_attrs+0x10/0x10 [ 520.380695][T24781] device_del+0x376/0x9b0 [ 520.382011][T24781] ? __pfx_device_del+0x10/0x10 [ 520.383478][T24781] ? __lock_acquire+0x5c0/0x1f40 [ 520.384992][T24781] device_unregister+0x1d/0xe0 [ 520.386437][T24781] del_device_store+0x346/0x480 [ 520.387898][T24781] ? __pfx_del_device_store+0x10/0x10 [ 520.389525][T24781] ? find_held_lock+0x2b/0x80 [ 520.390963][T24781] ? sysfs_file_kobj+0xe4/0x290 [ 520.392408][T24781] ? sysfs_file_kobj+0xe4/0x290 [ 520.393912][T24781] ? __pfx_del_device_store+0x10/0x10 [ 520.395501][T24781] bus_attr_store+0x74/0xb0 [ 520.396883][T24781] ? __pfx_bus_attr_store+0x10/0x10 [ 520.398408][T24781] sysfs_kf_write+0xf2/0x150 [ 520.399784][T24781] kernfs_fop_write_iter+0x3e0/0x5f0 [ 520.401384][T24781] ? __pfx_sysfs_kf_write+0x10/0x10 [ 520.402951][T24781] vfs_write+0x6af/0x1050 [ 520.404260][T24781] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 520.406066][T24781] ? __pfx_vfs_write+0x10/0x10 [ 520.407540][T24781] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.409127][T24781] ksys_write+0x12a/0x250 [ 520.410416][T24781] ? __pfx_ksys_write+0x10/0x10 [ 520.411886][T24781] do_syscall_64+0x123/0x790 [ 520.413319][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.415118][T24781] RIP: 0033:0x7f3a1e95fd8e [ 520.416455][T24781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 520.422466][T24781] RSP: 002b:00007ffdbe27f068 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.424937][T24781] RAX: ffffffffffffffda RBX: 000055555bbc3500 RCX: 00007f3a1e95fd8e [ 520.427337][T24781] RDX: 0000000000000001 RSI: 00007ffdbe27f0f0 RDI: 0000000000000005 [ 520.429640][T24781] RBP: 00007f3a1ea373e4 R08: 0000000000000000 R09: 0000000000000000 [ 520.431952][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.434316][T24781] R13: 00007ffdbe27f0f0 R14: 00007ffdbe27f930 R15: 0000000000000003 [ 520.436716][T24781] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 520.449812][T24838] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 520.690577][T21950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.749304][T21950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.800343][T21950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.908023][T21950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.979785][T21950] bridge_slave_1: left allmulticast mode [ 520.979806][T21950] bridge_slave_1: left promiscuous mode [ 520.979893][T21950] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.980643][T21950] bridge_slave_0: left allmulticast mode [ 520.980661][T21950] bridge_slave_0: left promiscuous mode [ 520.980762][T21950] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.051582][T21950] bond1 (unregistering): (slave geneve2): Releasing active interface [ 521.063462][T21950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.065027][T21950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.065573][T21950] bond0 (unregistering): Released all slaves [ 521.067678][T21950] bond1 (unregistering): Released all slaves [ 521.115510][ T43] audit: type=1400 audit(1792763841.713:2712): avc: denied { write } for pid=24845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.134282][T21950] tipc: Left network mode [ 521.153173][ T43] audit: type=1400 audit(1792763841.753:2713): avc: denied { write } for pid=24848 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.185167][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 521.238997][ T43] audit: type=1400 audit(1792763841.833:2714): avc: denied { write } for pid=24851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.275513][ T43] audit: type=1400 audit(1792763841.873:2715): avc: denied { write } for pid=24854 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.295090][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 521.356520][ T43] audit: type=1400 audit(1792763841.953:2716): avc: denied { write } for pid=24857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.374093][T21950] hsr_slave_0: left promiscuous mode [ 521.374554][T21950] hsr_slave_1: left promiscuous mode [ 521.374987][T21950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.375646][T21950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.385254][ T43] audit: type=1400 audit(1792763841.973:2717): avc: denied { write } for pid=24860 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.434758][T21950] team0 (unregistering): Port device team_slave_1 removed [ 521.436909][T21950] team0 (unregistering): Port device team_slave_0 removed [ 521.475162][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 521.583993][ T43] audit: type=1400 audit(1792763842.193:2718): avc: denied { write } for pid=24864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.626669][ T43] audit: type=1400 audit(1792763842.223:2719): avc: denied { write } for pid=24867 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.648997][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5 [ 521.720023][T21950] bridge_slave_1: left allmulticast mode [ 521.720041][T21950] bridge_slave_1: left promiscuous mode [ 521.720119][T21950] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.720652][T21950] bridge_slave_0: left allmulticast mode [ 521.720663][T21950] bridge_slave_0: left promiscuous mode [ 521.720719][T21950] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.743574][T21950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.744454][T21950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.744968][T21950] bond0 (unregistering): Released all slaves [ 521.891345][T21950] hsr_slave_0: left promiscuous mode [ 521.891590][T21950] hsr_slave_1: left promiscuous mode [ 521.891853][T21950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.892079][T21950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.936065][T21950] team0 (unregistering): Port device team_slave_1 removed [ 521.945338][T21950] team0 (unregistering): Port device team_slave_0 removed