last executing test programs: 37.26920207s ago: executing program 3 (id=2154): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_secret(0x80000) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30, 0x4000000}, 0x0) 37.267344848s ago: executing program 3 (id=2163): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) 37.205587587s ago: executing program 3 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x2070bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "062a759ef8c25fb352aadfc2ea56e4ba"}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc811}, 0x26002894) 37.204616063s ago: executing program 3 (id=2159): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 37.129923441s ago: executing program 3 (id=2160): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x1000) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) 36.878793457s ago: executing program 3 (id=2162): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) write$cgroup_int(r0, &(0x7f00000002c0)=0x5, 0x12) 36.738786203s ago: executing program 32 (id=2162): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) write$cgroup_int(r0, &(0x7f00000002c0)=0x5, 0x12) 23.610023231s ago: executing program 4 (id=2419): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x103bff, 0x111) 23.573917825s ago: executing program 4 (id=2420): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xce64, 0x6}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x64}}, 0x24040084) 23.479565428s ago: executing program 4 (id=2423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 23.4482721s ago: executing program 4 (id=2425): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 23.442755725s ago: executing program 4 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) 22.831265247s ago: executing program 4 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]}) 22.760889886s ago: executing program 33 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]}) 18.878555372s ago: executing program 2 (id=2500): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 18.060757917s ago: executing program 2 (id=2506): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0100aaaaaaaa86dd6002adf700083a00fc010000000000000000000000000001ff020000000000000000000000000001"], 0x0) 17.956183161s ago: executing program 2 (id=2508): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2, @ANYBLOB], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x6e) 17.954834109s ago: executing program 2 (id=2509): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000000080)="120000001200e7ef007b00000000000000a1", 0x12, 0x90, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 17.875769536s ago: executing program 2 (id=2511): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 17.828275639s ago: executing program 2 (id=2513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x10, 0x0) 3.726698358s ago: executing program 5 (id=2734): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 3.673541951s ago: executing program 1 (id=2738): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x24, &(0x7f0000001640)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, 0x0) 3.329815543s ago: executing program 5 (id=2742): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.329616934s ago: executing program 5 (id=2743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x1, 0x4) 3.259411027s ago: executing program 5 (id=2744): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 2.660722466s ago: executing program 34 (id=2513): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x10, 0x0) 2.324618085s ago: executing program 1 (id=2749): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2.043664356s ago: executing program 1 (id=2750): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.375161796s ago: executing program 0 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x9c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0xb08, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'L'}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0) 1.326021959s ago: executing program 0 (id=2752): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x3f}, &(0x7f0000000080)=0x8) 1.173095364s ago: executing program 1 (id=2753): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xe40fa6cdb42d9f41, 0xdd3, 0x7, 0xb, 0x800, 0x0, 0x0, 0x182, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x90, 0x9}) 449.431254ms ago: executing program 0 (id=2754): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote, 0x3, 0x2, 0x3, 0x0, 0x77f, 0x4000}, 0x20) 373.902286ms ago: executing program 6 (id=2748): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 289.825496ms ago: executing program 6 (id=2755): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev}, 0x14) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) 289.503746ms ago: executing program 1 (id=2756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 289.336228ms ago: executing program 6 (id=2757): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 209.240212ms ago: executing program 5 (id=2758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x40}}, 0x0) 209.092335ms ago: executing program 1 (id=2759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000540)="0e37b90261", 0x5}], 0x2) 172.314213ms ago: executing program 0 (id=2760): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 172.138118ms ago: executing program 6 (id=2761): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd01220500090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000004c0)={0x1, 0x9, 0x1, &(0x7f0000000440)={0x17, "7b9bc81c084798671fc225f6feb7b6fd8c9e8b2113d279c8f59575d15c8551a1c9"}}) 79.445418ms ago: executing program 5 (id=2762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 79.234278ms ago: executing program 0 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r1, r2, 0x25, 0x0, @val=@perf_event={0x5}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r3, r1, 0x4, r1}, 0x10) 0s ago: executing program 0 (id=2764): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): vice_t tclass=chr_file permissive=1 [ 109.758956][ T40] audit: type=1400 audit(1771447008.784:447): avc: denied { unmount } for pid=5924 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 109.865247][ T40] audit: type=1400 audit(1771447008.924:448): avc: denied { connect } for pid=9201 comm="syz.3.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 110.090451][ T50] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 110.136435][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 110.211200][ T9218] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.250387][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.253048][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.259273][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 110.268327][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 110.273240][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.277905][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.281702][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.309729][ T50] usb 6-1: config 0 descriptor?? [ 110.313900][ T9200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.325545][ T9230] netlink: 'syz.3.1435': attribute type 4 has an invalid length. [ 110.464486][ T9236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.467877][ T9236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.471080][ T9236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.523332][ T9238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1439'. [ 110.551295][ T59] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 110.711943][ T59] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 110.715043][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.719323][ T59] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.724310][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.729052][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.735355][ T59] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 110.736908][ T50] hid_parser_main: 33 callbacks suppressed [ 110.736928][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.738401][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.738427][ T59] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.742036][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.745131][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.760300][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.764466][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.766765][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.768991][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.770243][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.771893][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.777250][ T59] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 110.779022][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.782775][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 110.785221][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.789613][ T59] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 110.792301][ T50] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 110.799551][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 110.803581][ T50] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 110.803622][ T59] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 110.820666][ T59] usb 7-1: string descriptor 0 read error: -22 [ 110.823541][ T59] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.827417][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.841529][ T59] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 111.066376][ T59] usb 6-1: USB disconnect, device number 10 [ 111.069385][ T9281] tap0: tun_chr_ioctl cmd 1074025675 [ 111.071793][ T9281] tap0: persist enabled [ 111.074393][ T9281] tap0: tun_chr_ioctl cmd 1074025675 [ 111.076478][ T9281] tap0: persist enabled [ 111.085637][ T829] usb 7-1: USB disconnect, device number 11 [ 111.113904][ T9285] net_ratelimit: 4 callbacks suppressed [ 111.113921][ T9285] sock: sock_set_timeout: `syz.3.1461' (pid 9285) tries to set negative timeout [ 111.291190][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.440305][ T1326] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.582130][ T50] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 111.600498][ T1326] usb 5-1: Using ep0 maxpacket: 16 [ 111.603755][ T1326] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.607448][ T1326] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.613150][ T1326] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.618785][ T1326] usb 5-1: config 1 interface 0 has no altsetting 0 [ 111.623896][ T1326] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.627516][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.631356][ T1326] usb 5-1: Product: syz [ 111.633087][ T1326] usb 5-1: Manufacturer: syz [ 111.635052][ T1326] usb 5-1: SerialNumber: syz [ 111.751441][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.757355][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.769237][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.775290][ T50] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.778881][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.782947][ T9309] netlink: 'syz.2.1472': attribute type 4 has an invalid length. [ 111.783240][ T50] usb 8-1: config 0 descriptor?? [ 111.809099][ T9311] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.1473'. [ 111.845883][ T1326] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 112.100292][ T829] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 112.170452][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.204745][ T50] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 112.252718][ T829] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 112.254883][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.258123][ T829] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.261485][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.264617][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.268548][ T829] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 112.272884][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.275944][ T829] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.279218][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.283722][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.288357][ T829] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 112.291225][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 112.295156][ T829] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.299276][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.302983][ T829] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.308826][ T829] usb 6-1: string descriptor 0 read error: -22 [ 112.311320][ T829] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.314534][ T829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.325644][ T829] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 112.331664][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.401770][ T1326] usb 8-1: USB disconnect, device number 10 [ 112.529585][ T829] usb 6-1: USB disconnect, device number 11 [ 112.671650][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 113.380637][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.732498][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 113.736349][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 113.932951][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.201134][ T6008] usb 5-1: USB disconnect, device number 8 [ 114.222918][ T6008] usblp0: removed [ 114.223607][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 114.223629][ T40] audit: type=1400 audit(1771447013.284:452): avc: denied { create } for pid=9412 comm="syz.1.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 114.254826][ T40] audit: type=1400 audit(1771447013.284:453): avc: denied { sys_admin } for pid=9412 comm="syz.1.1519" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 114.276458][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 114.281848][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 114.302375][ T9423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.306258][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.408823][ T9433] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.422199][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.479074][ T9437] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.1531'. [ 114.640943][ T59] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 114.810221][ T40] audit: type=1400 audit(1771447013.864:454): avc: denied { shutdown } for pid=9460 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.818996][ T40] audit: type=1400 audit(1771447013.874:455): avc: denied { read } for pid=9460 comm="syz.0.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.827371][ T59] usb 6-1: Using ep0 maxpacket: 8 [ 114.831364][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 114.834210][ T59] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 114.838391][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.851151][ T59] usb 6-1: config 0 descriptor?? [ 114.895213][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.997671][ T9473] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 115.220326][ T829] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 115.263130][ T59] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 115.371518][ T829] usb 8-1: Using ep0 maxpacket: 8 [ 115.377176][ T829] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.382240][ T829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.386134][ T829] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.389977][ T829] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.395004][ T829] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.399153][ T829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.462332][ T1326] usb 6-1: USB disconnect, device number 12 [ 115.609948][ T829] usb 8-1: usb_control_msg returned -32 [ 115.613018][ T829] usbtmc 8-1:16.0: can't read capabilities [ 115.670462][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 115.831001][ T34] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 115.834381][ T34] usb 7-1: config index 0 descriptor too short (expected 57115, got 27) [ 115.837480][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.840830][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.844270][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.847263][ T34] usb 7-1: config index 1 descriptor too short (expected 57115, got 27) [ 115.849973][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.853181][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.856937][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.860100][ T34] usb 7-1: config index 2 descriptor too short (expected 57115, got 27) [ 115.863477][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.867160][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.870754][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.873619][ T34] usb 7-1: config index 3 descriptor too short (expected 57115, got 27) [ 115.876368][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.879358][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.883720][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.887170][ T34] usb 7-1: config index 4 descriptor too short (expected 57115, got 27) [ 115.890617][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.893771][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.897598][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.900626][ T34] usb 7-1: config index 5 descriptor too short (expected 57115, got 27) [ 115.903405][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.906723][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.910538][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.913434][ T34] usb 7-1: config index 6 descriptor too short (expected 57115, got 27) [ 115.916163][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.918996][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.922579][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.925399][ T34] usb 7-1: config index 7 descriptor too short (expected 57115, got 27) [ 115.928088][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 115.931061][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 115.934459][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.938038][ T34] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 115.941057][ T34] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 115.943680][ T34] usb 7-1: Product: syz [ 115.945031][ T34] usb 7-1: Manufacturer: syz [ 115.946520][ T34] usb 7-1: SerialNumber: syz [ 115.950060][ T34] usb 7-1: config 0 descriptor?? [ 115.955316][ T34] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 115.999994][ T9485] xt_hashlimit: size too large, truncated to 1048576 [ 116.108287][ T9491] loop2: detected capacity change from 0 to 7 [ 116.115042][ T9491] Dev loop2: unable to read RDB block 7 [ 116.117460][ T9491] loop2: AHDI p1 p2 [ 116.119186][ T9491] loop2: partition table partially beyond EOD, truncated [ 116.122734][ T9491] loop2: p1 start 1818582900 is beyond EOD, truncated [ 116.159631][ T6350] usb 7-1: USB disconnect, device number 12 [ 116.166883][ T6350] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 116.167702][ T40] audit: type=1400 audit(1771447015.224:456): avc: denied { create } for pid=9492 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.188705][ T40] audit: type=1400 audit(1771447015.244:457): avc: denied { write } for pid=9492 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.339581][ T9497] veth0_to_bridge: entered promiscuous mode [ 116.343389][ T9496] veth0_to_bridge: left promiscuous mode [ 116.365254][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 116.369418][ T9477] usbtmc 8-1:16.0: Unable to send data, error -71 [ 116.490798][ T34] net_ratelimit: 3 callbacks suppressed [ 116.490818][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.970506][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.354542][ T40] audit: type=1400 audit(1771447016.414:458): avc: denied { setattr } for pid=9524 comm="syz.1.1564" name="/" dev="9p" ino=72614215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.530540][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.623914][ T9529] veth0_to_bridge: entered promiscuous mode [ 117.628268][ T9528] veth0_to_bridge: left promiscuous mode [ 117.630949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057d25c00: rx timeout, send abort [ 117.636052][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057d25c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.640972][ T40] audit: type=1400 audit(1771447016.694:459): avc: denied { read } for pid=5316 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 117.660352][ T40] audit: type=1400 audit(1771447016.704:460): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.668344][ T40] audit: type=1400 audit(1771447016.704:461): avc: denied { search } for pid=5316 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.761436][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1572'. [ 117.770926][ T9539] netlink: 'syz.0.1572': attribute type 30 has an invalid length. [ 117.773605][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 117.849749][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 117.964073][ T6350] usb 8-1: USB disconnect, device number 11 [ 118.444479][ T9585] xt_hashlimit: size too large, truncated to 1048576 [ 118.538076][ T9593] loop2: detected capacity change from 0 to 7 [ 118.541216][ T9593] Dev loop2: unable to read RDB block 7 [ 118.543520][ T9593] loop2: AHDI p1 p2 [ 118.545259][ T9593] loop2: partition table partially beyond EOD, truncated [ 118.548810][ T9593] loop2: p1 start 1818582900 is beyond EOD, truncated [ 118.574067][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.577365][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.759918][ T9609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.940272][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 119.090251][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 119.103808][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 119.107640][ T9] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 119.111350][ T9] usb 8-1: Product: syz [ 119.113159][ T9] usb 8-1: Manufacturer: syz [ 119.115146][ T9] usb 8-1: SerialNumber: syz [ 119.119172][ T9] usb 8-1: config 0 descriptor?? [ 119.331715][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.337323][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.342904][ T6008] usb 8-1: USB disconnect, device number 12 [ 119.610366][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.010649][ T6012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.150223][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.310272][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 120.314646][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.317812][ T9] usb 5-1: config 0 has no interface number 0 [ 120.322265][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.326812][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.332150][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.350465][ T9] usb 5-1: config 0 descriptor?? [ 120.358008][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 120.500819][ T6350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.651587][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.653664][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 120.653679][ T40] audit: type=1400 audit(1771447019.714:467): avc: denied { name_bind } for pid=9623 comm="syz.1.1616" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 121.130903][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.603368][ T9638] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 121.625122][ T6008] usb 5-1: USB disconnect, device number 9 [ 121.701584][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.730400][ T9650] netlink: 'syz.2.1619': attribute type 12 has an invalid length. [ 121.732961][ T9650] netlink: 'syz.2.1619': attribute type 29 has an invalid length. [ 121.735359][ T9650] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1619'. [ 121.738396][ T9650] netlink: 'syz.2.1619': attribute type 1 has an invalid length. [ 121.741185][ T9650] netlink: 'syz.2.1619': attribute type 2 has an invalid length. [ 121.744680][ T9650] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1619'. [ 121.961130][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1626'. [ 122.121416][ T9680] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1633'. [ 122.322665][ T40] audit: type=1400 audit(1771447021.384:468): avc: denied { read } for pid=9704 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.690538][ T9744] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 122.695025][ T40] audit: type=1400 audit(1771447021.754:469): avc: denied { map } for pid=9742 comm="syz.3.1664" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.702896][ T40] audit: type=1400 audit(1771447021.754:470): avc: denied { execute } for pid=9742 comm="syz.3.1664" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 122.740718][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.793872][ T9749] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1666'. [ 122.815898][ T1326] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.858534][ T5938] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 122.970223][ T1326] usb 5-1: Using ep0 maxpacket: 16 [ 122.979321][ T1326] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 122.985689][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 122.988960][ T1326] usb 5-1: Product: syz [ 122.990904][ T1326] usb 5-1: Manufacturer: syz [ 122.992912][ T1326] usb 5-1: SerialNumber: syz [ 122.997076][ T1326] usb 5-1: config 0 descriptor?? [ 123.208252][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.215321][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.228795][ T6008] usb 5-1: USB disconnect, device number 10 [ 123.770938][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.836405][ T9770] syzkaller1: entered promiscuous mode [ 123.838695][ T9770] syzkaller1: entered allmulticast mode [ 123.883737][ T9774] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1675'. [ 123.920208][ T5969] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 124.071375][ T5969] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 124.076824][ T5969] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 124.079963][ T5969] usb 6-1: config 0 interface 0 has no altsetting 0 [ 124.084074][ T5969] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 124.086976][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 124.089557][ T5969] usb 6-1: Product: syz [ 124.091643][ T5969] usb 6-1: Manufacturer: syz [ 124.093127][ T5969] usb 6-1: SerialNumber: syz [ 124.098075][ T5969] usb 6-1: config 0 descriptor?? [ 124.102008][ T5969] hub 6-1:0.0: bad descriptor, ignoring hub [ 124.103826][ T5969] hub 6-1:0.0: probe with driver hub failed with error -5 [ 124.107361][ T5969] usb 6-1: selecting invalid altsetting 0 [ 124.172400][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.218594][ T9790] team0 (unregistering): Port device team_slave_0 removed [ 124.229523][ T9790] team0 (unregistering): Port device team_slave_1 removed [ 124.407086][ T9798] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.473397][ T9800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 124.592637][ T40] audit: type=1400 audit(1771447023.654:471): avc: denied { watch watch_reads } for pid=9810 comm="syz.0.1694" path="pipe:[6838]" dev="pipefs" ino=6838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.600724][ T40] audit: type=1400 audit(1771447023.654:472): avc: denied { relabelfrom } for pid=9810 comm="syz.0.1694" name="" dev="pipefs" ino=26618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 124.740342][ T9764] usb 6-1: reset high-speed USB device number 13 using dummy_hcd [ 124.810609][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.879125][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 124.882580][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 124.920347][ T5938] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 124.935284][ T40] audit: type=1400 audit(1771447023.994:473): avc: denied { read append } for pid=9840 comm="syz.0.1709" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 124.935659][ T9841] random: crng reseeded on system resumption [ 124.938498][ T40] audit: type=1400 audit(1771447023.994:474): avc: denied { ioctl open } for pid=9840 comm="syz.0.1709" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 125.092170][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 125.161026][ T9856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.165730][ T9856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.169540][ T9856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.182360][ T9856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.186365][ T9856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.281423][ T9865] erspan0: entered promiscuous mode [ 125.326436][ T40] audit: type=1400 audit(1771447024.384:475): avc: denied { ioctl } for pid=9866 comm="syz.0.1721" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 125.354179][ T59] usb 6-1: USB disconnect, device number 13 [ 125.867615][ T9892] syzkaller1: entered promiscuous mode [ 125.869391][ T9892] syzkaller1: entered allmulticast mode [ 125.951776][ T40] audit: type=1400 audit(1771447025.014:476): avc: denied { create } for pid=9895 comm="syz.0.1733" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 126.088161][ T9904] netlink: 'syz.3.1738': attribute type 39 has an invalid length. [ 126.152265][ T9911] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 126.157031][ T9911] netlink: 'syz.0.1741': attribute type 29 has an invalid length. [ 126.168032][ T9911] unsupported nla_type 58 [ 126.472599][ T9923] binder: 9922:9923 ioctl c0306201 200000000040 returned -22 [ 126.517940][ T9925] bond1: Invalid ad_actor_system MAC address. [ 126.520600][ T9925] bond1: option ad_actor_system: invalid value (255) [ 126.525285][ T9925] bond1 (unregistering): Released all slaves [ 126.750326][ T5969] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 126.900516][ T59] net_ratelimit: 10 callbacks suppressed [ 126.900544][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.911901][ T5969] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.915562][ T5969] usb 5-1: config 0 has no interface number 0 [ 126.918204][ T5969] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.923258][ T5969] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.927139][ T5969] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 126.930074][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.934029][ T5969] usb 5-1: config 0 descriptor?? [ 127.113340][ T9947] __nla_validate_parse: 3 callbacks suppressed [ 127.113360][ T9947] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.1757'. [ 127.121103][ T9947] netlink: ct family unspecified [ 127.213740][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.300211][ T1326] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 127.354600][ T9959] team0 (unregistering): Port device team_slave_0 removed [ 127.365647][ T9959] team0 (unregistering): Port device team_slave_1 removed [ 127.370591][ T5969] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.1/0003:04D9:A055.000A/input/input14 [ 127.460232][ T1326] usb 7-1: Using ep0 maxpacket: 16 [ 127.471059][ T1326] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.475787][ T1326] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.479173][ T5969] holtek_kbd 0003:04D9:A055.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 127.480000][ T1326] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.493336][ T1326] usb 7-1: config 1 interface 0 has no altsetting 0 [ 127.499239][ T1326] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.504836][ T1326] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.508281][ T1326] usb 7-1: Product: syz [ 127.510084][ T1326] usb 7-1: Manufacturer: syz [ 127.514306][ T1326] usb 7-1: SerialNumber: syz [ 127.556907][ T5969] usb 5-1: USB disconnect, device number 11 [ 127.583103][ T9966] fido_id[9966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 127.750744][ T1326] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 127.906796][ T9984] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.912264][ T9984] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 127.940402][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.569649][T10001] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 128.574090][T10001] overlayfs: failed to set uuid (470/file1, err=-13); falling back to uuid=null. [ 128.668429][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.672076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.887693][T10023] Bluetooth: MGMT ver 1.23 [ 128.889699][T10023] Bluetooth: hci1: expected 65469 bytes, got 2 bytes [ 128.927366][T10027] netlink: 'syz.1.1794': attribute type 39 has an invalid length. [ 128.970404][ T829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.043587][T10033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.046683][T10033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.049870][T10033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.204028][ T40] audit: type=1400 audit(1771447028.264:477): avc: denied { connect } for pid=10042 comm="syz.0.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.213014][ T40] audit: type=1400 audit(1771447028.274:478): avc: denied { write } for pid=10042 comm="syz.0.1802" path="socket:[28951]" dev="sockfs" ino=28951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.222995][ T40] audit: type=1400 audit(1771447028.274:479): avc: denied { read } for pid=10042 comm="syz.0.1802" laddr=127.0.0.1 lport=61469 faddr=127.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.358943][ T40] audit: type=1400 audit(1771447028.414:480): avc: denied { ioctl } for pid=10051 comm="syz.1.1805" path="socket:[29843]" dev="sockfs" ino=29843 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.490288][ T40] audit: type=1400 audit(1771447028.534:481): avc: denied { checkpoint_restore } for pid=10055 comm="syz.1.1808" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.577813][T10060] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1809'. [ 129.590896][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1810'. [ 129.705245][T10070] kvm: user requested TSC rate below hardware speed [ 129.958685][T10085] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 130.044849][ T829] usb 7-1: USB disconnect, device number 13 [ 130.053859][ T829] usblp0: removed [ 130.280256][ T24] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 130.330868][ T1326] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 130.431872][ T24] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 130.436894][ T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 130.442633][ T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 130.447680][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 130.454273][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.458103][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.465250][ T24] usb 6-1: Product: syz [ 130.467075][ T24] usb 6-1: Manufacturer: syz [ 130.469090][ T24] usb 6-1: SerialNumber: syz [ 130.480810][ T24] usb 6-1: config 0 descriptor?? [ 130.483573][T10089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.488109][ T1326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.495948][ T1326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.500092][ T1326] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 130.505804][ T24] usb 6-1: selecting invalid altsetting 0 [ 130.509319][ T1326] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 130.517869][ T1326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.561118][ T1326] usb 8-1: config 0 descriptor?? [ 130.700549][T10089] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 130.768658][ C2] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 130.985885][ T1326] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 131.231610][ T1326] usb 8-1: USB disconnect, device number 13 [ 131.824391][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 131.901486][ T40] audit: type=1400 audit(1771447030.964:482): avc: denied { write } for pid=10126 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.952991][T10129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.000565][ T40] audit: type=1400 audit(1771447031.054:483): avc: denied { connect } for pid=10130 comm="syz.0.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.010472][ T1326] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 132.161540][ T1326] usb 8-1: Using ep0 maxpacket: 16 [ 132.164999][ T1326] usb 8-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.168366][ T1326] usb 8-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.171796][ T1326] usb 8-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.176272][ T1326] usb 8-1: config 1 interface 0 has no altsetting 0 [ 132.180024][ T1326] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.183274][ T1326] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.185912][ T1326] usb 8-1: Product: syz [ 132.187349][ T1326] usb 8-1: Manufacturer: syz [ 132.188927][ T1326] usb 8-1: SerialNumber: syz [ 132.408097][ T1326] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 132.541478][ T1326] usb 6-1: USB disconnect, device number 14 [ 132.682686][T10154] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1849'. [ 132.722735][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'. [ 132.757270][T10160] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1852'. [ 133.032847][T10175] tipc: Started in network mode [ 133.034460][T10175] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 133.037583][T10175] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 133.040875][T10175] tipc: Enabled bearer , priority 10 [ 133.122898][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 133.698537][T10186] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1864'. [ 133.830962][T10193] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1866'. [ 133.874909][T10199] tipc: Enabling of bearer rejected, failed to enable media [ 133.924918][T10205] bond0: entered allmulticast mode [ 133.926693][T10205] bond_slave_0: entered allmulticast mode [ 133.928648][T10205] bond_slave_1: entered allmulticast mode [ 133.931145][T10205] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 133.942384][T10205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.947200][T10205] team0: Device bond0 failed to register rx_handler [ 134.162779][ T5938] Bluetooth: hci0: hardware error 0xff [ 134.171784][ T9] tipc: Node number set to 1 [ 134.785557][ T1326] usb 8-1: USB disconnect, device number 14 [ 134.800863][ T1326] usblp0: removed [ 134.888412][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 134.896279][T10243] Bluetooth: hci4: Frame reassembly failed (-84) [ 135.240493][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 135.400325][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 135.403545][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 135.406568][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.409675][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.413289][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.416439][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.423064][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.426726][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.638827][ T9] usb 6-1: usb_control_msg returned -32 [ 135.641318][ T9] usbtmc 6-1:16.0: can't read capabilities [ 135.929930][ T40] audit: type=1400 audit(1771447034.984:484): avc: denied { shutdown } for pid=10267 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.993243][ T5285] Bluetooth: hci2: hardware error 0xff [ 135.995911][T10273] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 136.120583][T10281] Invalid argument reading file caps for ./file0 [ 136.197610][ T29] usb 6-1: USB disconnect, device number 15 [ 136.251310][ T5938] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.890282][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 137.155043][T10313] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1922'. [ 137.329907][ T40] audit: type=1400 audit(1771447036.384:485): avc: denied { create } for pid=10322 comm="syz.0.1927" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 137.606129][ T40] audit: type=1400 audit(1771447036.664:486): avc: denied { read write } for pid=10334 comm="syz.0.1932" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.619931][ T40] audit: type=1400 audit(1771447036.664:487): avc: denied { open } for pid=10334 comm="syz.0.1932" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.630258][ T40] audit: type=1400 audit(1771447036.664:488): avc: denied { ioctl } for pid=10334 comm="syz.0.1932" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.774249][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.777057][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.966994][T10345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1936'. [ 137.971306][T10345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1936'. [ 138.026976][T10347] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1939'. [ 138.090237][ T5285] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 138.276910][T10377] Bluetooth: MGMT ver 1.23 [ 138.283824][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 138.287477][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 138.395036][ T34] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 138.515400][T10392] can0: slcan on pty24. [ 138.566549][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 138.573675][ T34] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 138.578135][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.590715][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.600301][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 138.608570][ T34] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 138.615339][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.621201][ T34] usb 8-1: config 0 descriptor?? [ 138.652034][T10385] can0 (unregistered): slcan off pty24. [ 138.698218][T10403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1957'. [ 138.755741][ T5285] block nbd0: Receive control failed (result -107) [ 138.860756][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 138.863643][T10413] netlink: 'syz.1.1959': attribute type 30 has an invalid length. [ 138.866090][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 139.047477][ T34] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.000C/input/input16 [ 139.055464][T10425] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 139.139546][ T34] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5013.000C/input/input17 [ 139.199503][ T34] kye 0003:0458:5013.000C: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 139.239730][ T9] usb 8-1: USB disconnect, device number 15 [ 139.260580][T10437] fido_id[10437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/8-1/report_descriptor': No such file or directory [ 139.381997][T10439] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1970'. [ 139.664565][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 139.720001][ T40] audit: type=1400 audit(1771447038.774:489): avc: denied { unmount } for pid=5922 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 139.945782][T10479] pim6reg1: entered promiscuous mode [ 139.947981][T10479] pim6reg1: entered allmulticast mode [ 140.250374][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 140.273014][T10497] netlink: 'syz.0.1995': attribute type 30 has an invalid length. [ 140.335285][T10503] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.337814][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 140.398056][ T40] audit: type=1400 audit(1771447039.454:490): avc: denied { watch } for pid=10506 comm="syz.0.2000" path="/517/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 140.400276][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 140.407851][ T40] audit: type=1400 audit(1771447039.454:491): avc: denied { watch_sb watch_reads } for pid=10506 comm="syz.0.2000" path="/517/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 140.414353][ T34] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 140.420688][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.424626][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.428606][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 140.434287][ T34] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 140.438135][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.444494][ T34] usb 7-1: config 0 descriptor?? [ 140.865989][ T34] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.000D/input/input18 [ 140.937871][ T34] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5013.000D/input/input19 [ 141.005742][ T34] kye 0003:0458:5013.000D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 141.062840][ T6008] usb 7-1: USB disconnect, device number 14 [ 141.150380][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 141.301890][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 141.306216][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 141.310700][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 141.317060][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 141.321170][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.324465][ T9] usb 8-1: Product: syz [ 141.326465][ T9] usb 8-1: Manufacturer: syz [ 141.328511][ T9] usb 8-1: SerialNumber: syz [ 141.341806][ T9] usb 8-1: config 0 descriptor?? [ 141.551811][ T9] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 141.580308][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.730344][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 141.733981][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 141.736294][ T34] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.739806][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.744592][ T34] usb 5-1: config 0 descriptor?? [ 141.754149][ T6008] usb 8-1: USB disconnect, device number 16 [ 142.161528][ T34] mcp2221 0003:04D8:00DD.000E: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 142.380092][ T9] usb 5-1: USB disconnect, device number 12 [ 142.410327][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 142.413586][ T5285] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 142.538404][ T40] audit: type=1400 audit(1771447042.594:492): avc: denied { module_request } for pid=10541 comm="syz.1.2016" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 142.901285][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 143.081903][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 143.086641][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.092200][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 143.100193][ T9] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 143.104027][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.108126][ T9] usb 7-1: Product: syz [ 143.109912][ T9] usb 7-1: Manufacturer: syz [ 143.112212][ T9] usb 7-1: SerialNumber: syz [ 143.116281][ T9] usb 7-1: config 0 descriptor?? [ 143.161041][T10574] can0: slcan on pty20. [ 143.170560][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 143.282336][T10572] can0 (unregistered): slcan off pty20. [ 143.325563][ T9] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 143.325765][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.339052][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.342756][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.346911][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.349787][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.361543][ T24] usb 6-1: config 0 descriptor?? [ 143.500268][ T1326] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 143.533252][ T9] usb 7-1: USB disconnect, device number 15 [ 143.596635][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 143.670209][ T1326] usb 8-1: Using ep0 maxpacket: 8 [ 143.673653][ T1326] usb 8-1: config 0 interface 0 has no altsetting 0 [ 143.675845][ T1326] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 143.678940][ T1326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.697064][ T1326] usb 8-1: config 0 descriptor?? [ 143.774565][ T24] hid_parser_main: 5 callbacks suppressed [ 143.774578][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.779122][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.790409][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.793521][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.796578][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.799722][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.820237][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.823406][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.826518][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.829709][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 143.856279][ T24] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 144.031647][ T5990] usb 6-1: USB disconnect, device number 16 [ 144.122367][ T1326] mcp2221 0003:04D8:00DD.0010: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 144.313930][ T1326] usb 8-1: USB disconnect, device number 17 [ 144.552615][ T40] audit: type=1400 audit(1771447045.607:493): avc: denied { create } for pid=10613 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.598899][ T40] audit: type=1400 audit(1771447045.647:494): avc: denied { read } for pid=10613 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.871216][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 145.020268][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 145.024021][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 145.027795][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.032475][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.036345][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.041379][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.047756][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.051945][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.391878][T10654] __nla_validate_parse: 3 callbacks suppressed [ 145.391891][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2062'. [ 145.531623][ T40] audit: type=1400 audit(1771447046.577:495): avc: denied { setopt } for pid=10663 comm="syz.0.2066" lport=53848 faddr=::ffff:172.30.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.595807][ T7266] udevd[7266]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 145.818871][T10693] usbtmc 6-1:16.0: simple usb_control_msg failed -32 [ 145.830992][ T5990] usb 6-1: USB disconnect, device number 17 [ 146.040350][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 146.160324][ T1326] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 146.190356][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 146.193398][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 146.196158][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.199225][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.202457][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.205653][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.211605][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.214649][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.311117][ T1326] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 146.315531][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.319418][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.324246][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.328130][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.332042][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.336633][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.340548][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.344362][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.348983][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.353154][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.357190][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.362519][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.366399][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.370375][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.374932][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.378807][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.382641][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.387188][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.391152][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.394938][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.399634][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.403636][ T1326] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.407389][ T1326] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.412353][ T1326] usb 7-1: config 0 interface 0 has no altsetting 0 [ 146.416999][ T1326] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.421346][ T1326] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.424930][ T1326] usb 7-1: Product: syz [ 146.426757][ T1326] usb 7-1: Manufacturer: syz [ 146.428782][ T1326] usb 7-1: SerialNumber: syz [ 146.433752][ T1326] usb 7-1: config 0 descriptor?? [ 146.436632][ T9] usb 5-1: usb_control_msg returned -32 [ 146.439237][ T9] usbtmc 5-1:16.0: can't read capabilities [ 146.442967][ T1326] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.651005][ T9] usb 7-1: USB disconnect, device number 16 [ 146.655032][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 147.505121][ T40] audit: type=1400 audit(1771447048.557:496): avc: denied { write } for pid=10734 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.676408][T10749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.680013][T10749] IPv6: NLM_F_CREATE should be set when creating new route [ 147.727843][ T40] audit: type=1400 audit(1771447048.777:497): avc: denied { bind } for pid=10753 comm="syz.1.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.728626][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 147.737475][T10754] hsr_slave_0: left promiscuous mode [ 147.740586][T10754] hsr_slave_1: left promiscuous mode [ 147.991966][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2113'. [ 148.330252][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 148.481814][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.486107][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.489347][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.494082][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.498265][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.504449][ T9] usb 7-1: config 0 descriptor?? [ 148.803060][ T50] usb 5-1: USB disconnect, device number 13 [ 148.839670][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2117'. [ 148.844417][T10782] hsr_slave_0: left promiscuous mode [ 148.848160][T10782] hsr_slave_1: left promiscuous mode [ 148.917827][ T9] hid_parser_main: 5 callbacks suppressed [ 148.917841][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.922643][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.925281][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.928224][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.931082][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.934058][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.937128][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.939881][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.949365][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.952310][ T9] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 148.963580][ T9] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 149.027893][ T40] audit: type=1326 audit(1771447050.077:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.0.2119" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f76d9c629 code=0x0 [ 149.182742][ T1326] usb 7-1: USB disconnect, device number 17 [ 149.530241][ T5285] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 149.530720][ T5932] Bluetooth: hci4: command 0x1003 tx timeout [ 149.579517][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 149.583055][T10789] netlink: 'syz.1.2129': attribute type 21 has an invalid length. [ 149.678119][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 149.835294][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 149.839743][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 149.878285][ T40] audit: type=1400 audit(1771447050.927:499): avc: denied { append } for pid=10800 comm="syz.3.2126" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 149.895415][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 149.898677][T10818] chnl_net:caif_netlink_parms(): no params data found [ 149.983964][ T40] audit: type=1400 audit(1771447051.037:500): avc: denied { setopt } for pid=10824 comm="syz.1.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 149.993264][ T40] audit: type=1400 audit(1771447051.037:501): avc: denied { ioctl } for pid=10824 comm="syz.1.2137" path="socket:[31415]" dev="sockfs" ino=31415 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 150.478201][T10874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.575977][T10874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.699182][T10874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.793186][ T1176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.797358][ T1176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.831491][T10874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.872998][ T1176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.876670][ T1176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.903887][ T40] audit: type=1400 audit(1771447051.957:502): avc: denied { execute } for pid=10880 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 150.920231][ T40] audit: type=1400 audit(1771447051.957:503): avc: denied { execute_no_trans } for pid=10880 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 150.977314][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.993401][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.018953][ T1176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.021531][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.023164][ T1176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.027837][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.034682][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.038481][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.042338][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.042828][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.065253][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.107761][ T1176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.112893][ T1176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.284125][T10882] chnl_net:caif_netlink_parms(): no params data found [ 151.344974][ T1176] bridge0: port 3(batadv0) entered disabled state [ 151.353729][ T1176] bridge_slave_1: left allmulticast mode [ 151.356347][ T1176] bridge_slave_1: left promiscuous mode [ 151.358795][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.365341][ T1176] bridge_slave_0: left allmulticast mode [ 151.367654][ T1176] bridge_slave_0: left promiscuous mode [ 151.370106][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.380730][ T5990] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 151.530347][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 151.534396][ T5990] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.539136][ T5990] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.543323][ T5990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.545431][ T5990] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 151.548624][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.553181][ T5990] usb 7-1: config 0 descriptor?? [ 151.569616][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.574894][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.579991][ T1176] bond0 (unregistering): (slave bond2): Releasing backup interface [ 151.584115][ T1176] bond0 (unregistering): Released all slaves [ 151.590099][ T1176] bond1 (unregistering): Released all slaves [ 151.599190][ T1176] bond2 (unregistering): Released all slaves [ 151.639549][T10882] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.642111][T10882] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.644518][T10882] bridge_slave_0: entered allmulticast mode [ 151.648293][T10882] bridge_slave_0: entered promiscuous mode [ 151.653722][T10882] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.656316][T10882] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.659294][T10882] bridge_slave_1: entered allmulticast mode [ 151.662928][T10882] bridge_slave_1: entered promiscuous mode [ 151.682156][T10882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.687819][T10882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.703988][T10882] team0: Port device team_slave_0 added [ 151.707165][T10882] team0: Port device team_slave_1 added [ 151.724440][T10882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.726689][T10882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.734983][T10882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.741245][T10882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.743630][T10882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.751721][T10882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.852334][T10882] hsr_slave_0: entered promiscuous mode [ 151.855668][T10882] hsr_slave_1: entered promiscuous mode [ 151.858815][T10882] debugfs: 'hsr0' already exists in 'hsr' [ 151.861804][T10882] Cannot create hsr debugfs directory [ 151.884293][ T40] audit: type=1400 audit(1771447052.937:504): avc: denied { write } for pid=10907 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 151.969857][ T5990] mcp2221 0003:04D8:00DD.0012: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 152.119846][T10918] Invalid ELF header magic: != ELF [ 152.122918][ T1176] hsr_slave_0: left promiscuous mode [ 152.123074][ T40] audit: type=1400 audit(1771447053.167:505): avc: denied { module_load } for pid=10917 comm="syz.0.2173" path="/552/bus" dev="tmpfs" ino=2848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 152.134762][ T1176] hsr_slave_1: left promiscuous mode [ 152.141703][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.150285][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.154571][ T1176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.157725][ T1176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.171212][ T1176] batman_adv: batadv0: Removing interface: macsec1 [ 152.174630][ T5990] usb 7-1: USB disconnect, device number 18 [ 152.179651][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 152.183257][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'. [ 152.217331][ T40] audit: type=1400 audit(1771447053.267:506): avc: denied { name_bind } for pid=10924 comm="syz.0.2175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 152.217725][ T1176] veth1_macvtap: left promiscuous mode [ 152.230472][ T1176] veth0_macvtap: left promiscuous mode [ 152.232378][ T1176] veth1_vlan: left promiscuous mode [ 152.234002][ T1176] veth0_vlan: left promiscuous mode [ 152.531945][T10882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.554004][T10882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.570856][T10882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.585079][T10882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.650355][T10882] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.653410][T10882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.656687][T10882] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.659798][T10882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.668583][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.673216][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.735382][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 152.735395][ T40] audit: type=1400 audit(1771447053.787:511): avc: denied { perfmon } for pid=10959 comm="syz.0.2184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.737785][T10882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.768419][T10882] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.779773][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.782381][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.792388][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.794804][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.846580][T10882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.928342][T10985] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2191'. [ 153.076203][T10882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.125245][ T40] audit: type=1400 audit(1771447054.167:512): avc: denied { set_context_mgr } for pid=11006 comm="syz.2.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.131759][ T5285] Bluetooth: hci2: command tx timeout [ 153.139357][T11011] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2201'. [ 153.271989][T11026] vcan0: tx address claim with different name [ 153.345307][T10882] veth0_vlan: entered promiscuous mode [ 153.352676][T10882] veth1_vlan: entered promiscuous mode [ 153.373887][T10882] veth0_macvtap: entered promiscuous mode [ 153.392543][T10882] veth1_macvtap: entered promiscuous mode [ 153.404441][T10882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.413931][T10882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.423261][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.426520][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.445216][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.462137][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.489349][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.492150][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.505218][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 153.532282][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.535310][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.548426][ T40] audit: type=1400 audit(1771447054.597:513): avc: denied { mounton } for pid=10882 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 153.557853][ T40] audit: type=1400 audit(1771447054.597:514): avc: denied { mounton } for pid=10882 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 153.595641][ T40] audit: type=1400 audit(1771447054.647:515): avc: denied { setopt } for pid=11051 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 153.636392][ T40] audit: type=1326 audit(1771447054.687:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11058 comm="syz.1.2218" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5465f9c629 code=0x0 [ 153.667149][ T40] audit: type=1400 audit(1771447054.717:517): avc: denied { getopt } for pid=11060 comm="syz.0.2219" lport=37444 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.860258][ T1326] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 154.011957][ T1326] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 154.016643][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.020571][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.025121][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.031198][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.034955][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.039687][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.044249][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.048140][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.052788][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.056677][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.060635][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.065384][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.069525][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.074642][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.080230][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.090259][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.093009][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.096397][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.099429][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.102448][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.105875][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.109438][ T1326] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 154.112399][ T1326] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 154.116279][ T1326] usb 9-1: config 0 interface 0 has no altsetting 0 [ 154.120252][ T1326] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 154.123245][ T1326] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 154.126500][ T1326] usb 9-1: Product: syz [ 154.128356][ T1326] usb 9-1: Manufacturer: syz [ 154.130490][ T1326] usb 9-1: SerialNumber: syz [ 154.134892][ T1326] usb 9-1: config 0 descriptor?? [ 154.140624][ T1326] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 154.211387][T11075] netlink: 3900 bytes leftover after parsing attributes in process `syz.2.2223'. [ 154.216941][ T40] audit: type=1400 audit(1771447055.267:518): avc: denied { ioctl } for pid=11076 comm="syz.0.2224" path="socket:[34674]" dev="sockfs" ino=34674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.361049][ T40] audit: type=1400 audit(1771447055.417:519): avc: denied { connect } for pid=11085 comm="syz.2.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 154.361423][ T29] usb 9-1: USB disconnect, device number 2 [ 154.375909][ T29] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 154.542434][T11098] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 154.545489][T11098] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2232'. [ 154.548338][T11098] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2232'. [ 154.551766][T11098] netlink: 'syz.2.2232': attribute type 1 has an invalid length. [ 154.554236][T11098] netlink: 634 bytes leftover after parsing attributes in process `syz.2.2232'. [ 154.853840][ T40] audit: type=1400 audit(1771447055.907:520): avc: denied { block_suspend } for pid=11116 comm="syz.1.2242" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.210792][ T5932] Bluetooth: hci2: command tx timeout [ 155.512379][ T1326] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.680285][ T1326] usb 5-1: Using ep0 maxpacket: 8 [ 155.684149][ T1326] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.688302][ T1326] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 155.692164][ T1326] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 155.696075][ T1326] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.701392][ T1326] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.704757][ T1326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.850328][ T34] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 155.913104][ T1326] usb 5-1: GET_CAPABILITIES returned 0 [ 155.916642][ T1326] usbtmc 5-1:16.0: can't read capabilities [ 156.010249][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 156.013911][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.018455][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.022625][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 156.025366][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 156.028985][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.034880][ T34] usb 6-1: config 0 descriptor?? [ 156.114577][ C2] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 156.120018][ T5990] usb 5-1: USB disconnect, device number 14 [ 156.160331][ T5969] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 156.310332][ T5969] usb 7-1: Using ep0 maxpacket: 16 [ 156.315509][ T5969] usb 7-1: unable to get BOS descriptor or descriptor too short [ 156.318547][ T5969] usb 7-1: no configurations [ 156.320533][ T5969] usb 7-1: can't read configurations, error -22 [ 156.453275][ T34] hid_parser_main: 10 callbacks suppressed [ 156.453299][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 156.458631][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 156.462782][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 156.465737][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 156.468647][ T34] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 156.473429][ T34] mcp2221 0003:04D8:00DD.0013: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 156.505460][T11173] sctp: [Deprecated]: syz.4.2268 (pid 11173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.505460][T11173] Use struct sctp_sack_info instead [ 156.617246][T11175] PID 11175 killed due to inadequate hugepage pool [ 156.658910][ T34] usb 6-1: USB disconnect, device number 18 [ 156.727653][T11184] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 156.905290][T11193] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.290299][ T5932] Bluetooth: hci2: command 0x040f tx timeout [ 157.837043][T11219] netlink: 'syz.2.2287': attribute type 1 has an invalid length. [ 158.190858][T11241] syzkaller1: entered promiscuous mode [ 158.193124][T11241] syzkaller1: entered allmulticast mode [ 158.400652][T11187] net_ratelimit: 12 callbacks suppressed [ 158.400665][T11187] Set syz1 is full, maxelem 65536 reached [ 158.458582][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 158.458599][ T40] audit: type=1800 audit(1771447059.507:525): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2300" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 158.785627][ T40] audit: type=1400 audit(1771447059.837:526): avc: denied { ioctl } for pid=11276 comm="syz.2.2313" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.380308][ T5285] Bluetooth: hci2: command 0x040f tx timeout [ 159.905727][ T40] audit: type=1400 audit(1771447060.957:527): avc: denied { remount } for pid=11348 comm="syz.0.2343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 159.984893][T11353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2345'. [ 159.988036][T11353] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2345'. [ 160.492415][T11374] input: syz0 as /devices/virtual/input/input21 [ 160.850791][ T6008] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 161.038369][ T6008] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.043957][ T6008] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.047672][ T6008] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.050607][ T6008] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.065519][ T6008] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.076778][ T6008] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.079676][ T6008] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.085432][ T6008] usb 9-1: Product: syz [ 161.089024][ T6008] usb 9-1: Manufacturer: syz [ 161.094970][ T6008] cdc_wdm 9-1:1.0: skipping garbage [ 161.096690][ T6008] cdc_wdm 9-1:1.0: skipping garbage [ 161.102086][ T6008] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 161.104029][ T6008] cdc_wdm 9-1:1.0: Unknown control protocol [ 161.352352][ C3] wdm_int_callback: 2 callbacks suppressed [ 161.352376][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 161.352719][ T9] usb 9-1: USB disconnect, device number 3 [ 161.355349][ C3] wdm_int_callback: 2 callbacks suppressed [ 161.355370][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 161.366008][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 161.418496][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2378'. [ 161.422369][ T5969] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 161.425932][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2378'. [ 161.452328][ T5285] Bluetooth: hci2: command 0x040f tx timeout [ 161.552564][T11438] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 161.570274][ T5969] usb 7-1: Using ep0 maxpacket: 8 [ 161.575503][ T5969] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.579942][ T5969] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.585091][ T5969] usb 7-1: config 0 interface 0 has no altsetting 0 [ 161.587958][ T5969] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.592797][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.598209][ T5969] usb 7-1: config 0 descriptor?? [ 162.013341][ T5969] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 162.016180][ T5969] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 162.018557][ T5969] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 162.024817][ T5969] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 162.027127][ T5969] mcp2221 0003:04D8:00DD.0014: unknown main item tag 0x0 [ 162.029789][ T5969] mcp2221 0003:04D8:00DD.0014: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 162.165664][T11450] syzkaller1: entered promiscuous mode [ 162.167871][T11450] syzkaller1: entered allmulticast mode [ 162.213824][ T6008] usb 7-1: USB disconnect, device number 21 [ 162.500281][ T59] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 162.650312][ T59] usb 9-1: Using ep0 maxpacket: 16 [ 162.654328][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.657846][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.661448][ T59] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 162.665676][ T59] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 162.668585][ T59] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.672574][ T59] usb 9-1: config 0 descriptor?? [ 162.825013][T11469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input22 [ 162.931773][ T40] audit: type=1400 audit(1771447063.987:528): avc: denied { bind } for pid=11473 comm="syz.2.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.092713][ T59] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 163.094990][ T59] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 163.097232][ T59] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 163.099515][ T59] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 163.101854][ T59] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 163.105539][ T59] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 163.119885][ T59] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 163.122835][ T59] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 163.296456][ T5990] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 163.297121][ T1326] usb 9-1: USB disconnect, device number 4 [ 163.301061][ T5990] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 163.307917][ T5990] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 163.311419][ T5990] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 163.512534][ T40] audit: type=1400 audit(1771447064.567:529): avc: denied { accept } for pid=11502 comm="syz.1.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.711671][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 163.884241][ T40] audit: type=1400 audit(1771447064.937:530): avc: denied { sqpoll } for pid=11531 comm="syz.1.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.898085][T11530] syzkaller1: entered promiscuous mode [ 163.900107][T11530] syzkaller1: entered allmulticast mode [ 164.377528][T11567] bond0: (slave vlan0): Opening slave failed [ 164.723940][ T40] audit: type=1400 audit(1771447065.777:531): avc: denied { setopt } for pid=11576 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.766986][ T40] audit: type=1400 audit(1771447065.817:532): avc: denied { ioctl } for pid=11578 comm="syz.1.2435" path="socket:[38231]" dev="sockfs" ino=38231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.814726][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.890236][ T5285] Bluetooth: hci1: command 0x0406 tx timeout [ 164.928860][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.930694][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 164.975393][ T5285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.981370][ T5285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.984662][ T5285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.987846][ T5285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.990779][ T5285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.084523][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.188707][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.344742][T11585] chnl_net:caif_netlink_parms(): no params data found [ 165.414376][ T61] bridge_slave_1: left allmulticast mode [ 165.416356][ T61] bridge_slave_1: left promiscuous mode [ 165.418275][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.425849][ T61] bridge_slave_0: left allmulticast mode [ 165.427804][ T61] bridge_slave_0: left promiscuous mode [ 165.429770][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.566226][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.572180][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.575944][ T61] bond0 (unregistering): Released all slaves [ 165.658421][T11585] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.661268][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.664302][T11585] bridge_slave_0: entered allmulticast mode [ 165.668549][T11585] bridge_slave_0: entered promiscuous mode [ 165.673984][T11585] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.676481][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.678844][T11585] bridge_slave_1: entered allmulticast mode [ 165.681667][T11585] bridge_slave_1: entered promiscuous mode [ 165.724788][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.729626][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.751739][T11585] team0: Port device team_slave_0 added [ 165.754834][T11585] team0: Port device team_slave_1 added [ 165.769183][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.773099][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.782389][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.787065][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.789228][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.797849][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.878084][T11585] hsr_slave_0: entered promiscuous mode [ 165.882883][T11585] hsr_slave_1: entered promiscuous mode [ 165.901910][ T61] hsr_slave_0: left promiscuous mode [ 165.904333][ T61] hsr_slave_1: left promiscuous mode [ 165.906889][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.909722][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.923683][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.927896][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.949021][ T61] veth1_macvtap: left promiscuous mode [ 165.952051][ T61] veth0_macvtap: left promiscuous mode [ 165.953878][ T61] veth1_vlan: left promiscuous mode [ 165.955597][ T61] veth0_vlan: left promiscuous mode [ 166.162836][ T61] team0 (unregistering): Port device team_slave_1 removed [ 166.174673][ T61] team0 (unregistering): Port device team_slave_0 removed [ 166.469255][T11585] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.482533][T11585] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.487804][T11585] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.494240][T11585] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.568396][T11585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.579079][T11585] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.585881][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.588221][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.594743][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.597034][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.622460][T11585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.763677][T11585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.934835][T11585] veth0_vlan: entered promiscuous mode [ 166.941144][T11585] veth1_vlan: entered promiscuous mode [ 166.959584][T11585] veth0_macvtap: entered promiscuous mode [ 166.965992][T11585] veth1_macvtap: entered promiscuous mode [ 166.975040][T11585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.984620][T11585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.001751][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.004705][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.008787][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.013386][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.050620][ T5285] Bluetooth: hci2: command tx timeout [ 167.065671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.071634][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.092917][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.095891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.421666][ T40] audit: type=1400 audit(1771447068.477:533): avc: denied { remount } for pid=11771 comm="syz.1.2480" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.426132][T11774] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 167.469684][T11778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2482'. [ 167.959652][T11804] input: syz1 as /devices/virtual/input/input24 [ 169.130458][ T5285] Bluetooth: hci2: command tx timeout [ 169.478144][T11827] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2503'. [ 169.658128][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 169.776490][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 169.820863][ T40] audit: type=1400 audit(1771447070.877:534): avc: denied { mounton } for pid=11848 comm="syz.1.2514" path="/601/file0" dev="tmpfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 169.936130][T11858] ipvlan1: entered allmulticast mode [ 169.937895][T11858] veth0_vlan: entered allmulticast mode [ 169.942952][T11858] team0: Device ipvlan1 failed to register rx_handler [ 170.946668][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2526'. [ 171.108167][T11883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2529'. [ 171.108187][ T40] audit: type=1400 audit(1771447072.157:535): avc: denied { nlmsg_read } for pid=11882 comm="syz.0.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.199758][T11887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2531'. [ 171.210370][ T5285] Bluetooth: hci2: command tx timeout [ 171.932940][T11928] veth0: entered promiscuous mode [ 171.935640][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2549'. [ 172.082007][T11933] netlink: 'syz.1.2551': attribute type 21 has an invalid length. [ 172.085354][T11933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2551'. [ 172.098930][T11933] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2551'. [ 172.102868][T11933] netlink: 'syz.1.2551': attribute type 21 has an invalid length. [ 172.144743][ T40] audit: type=1400 audit(1771447073.197:536): avc: denied { read } for pid=11934 comm="syz.0.2553" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.153802][ T40] audit: type=1400 audit(1771447073.197:537): avc: denied { open } for pid=11934 comm="syz.0.2553" path="net:[4026532891]" dev="nsfs" ino=4026532891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 172.164189][T11939] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 172.434100][ T40] audit: type=1400 audit(1771447073.487:538): avc: denied { ioctl } for pid=11956 comm="syz.0.2562" path="socket:[42029]" dev="sockfs" ino=42029 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.290438][ T5285] Bluetooth: hci2: command tx timeout [ 173.689069][ T40] audit: type=1400 audit(1771447074.737:539): avc: denied { create } for pid=11990 comm="syz.0.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.697131][ T40] audit: type=1400 audit(1771447074.747:540): avc: denied { bind } for pid=11990 comm="syz.0.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.704538][ T40] audit: type=1400 audit(1771447074.757:541): avc: denied { connect } for pid=11990 comm="syz.0.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.755618][ T6008] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 173.756316][ T40] audit: type=1400 audit(1771447074.807:542): avc: denied { listen } for pid=11990 comm="syz.0.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 173.912601][ T6008] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.916589][ T6008] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.923677][ T6008] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.927298][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.154832][ T6008] usb 6-1: usb_control_msg returned -32 [ 174.156747][ T6008] usbtmc 6-1:16.0: can't read capabilities [ 174.161706][T12008] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 174.470704][T12014] kvm: kvm [12013]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 174.521261][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.718649][ T34] usb 6-1: USB disconnect, device number 19 [ 175.284027][T12026] __nla_validate_parse: 3 callbacks suppressed [ 175.284042][T12026] netlink: 212916 bytes leftover after parsing attributes in process `syz.5.2589'. [ 175.384451][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 175.615455][ T40] audit: type=1400 audit(1771447076.667:543): avc: denied { create } for pid=12041 comm="syz.0.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 175.652324][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 175.689739][T12052] syzkaller1: entered promiscuous mode [ 175.693191][T12052] syzkaller1: entered allmulticast mode [ 175.800219][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 175.803869][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.806135][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 175.809108][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.820574][ T9] usb 6-1: config 0 descriptor?? [ 175.907462][T12056] serio: Serial port ptm0 [ 176.200285][T12069] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 176.200285][T12069] The task syz.0.2606 (12069) triggered the difference, watch for misbehavior. [ 176.234332][ T9] mcp2221 0003:04D8:00DD.0016: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 176.311915][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2610'. [ 176.435731][ T5969] usb 6-1: USB disconnect, device number 20 [ 176.983484][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2620'. [ 177.240296][ T6007] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 177.319321][T12122] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.342021][T12122] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 177.347287][T12122] overlayfs: failed to look up (tracing) for ino (-66) [ 177.377976][ T40] audit: type=1400 audit(1771447078.427:544): avc: denied { unmount } for pid=11585 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 177.405868][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.413572][ T6007] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.417924][ T6007] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.423764][ T6007] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.427661][ T6007] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.444381][ T6007] usb 6-1: config 0 descriptor?? [ 177.866178][ T6007] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 177.940508][ T1326] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 178.110404][ T1326] usb 10-1: Using ep0 maxpacket: 8 [ 178.115789][ T1326] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 178.118543][ T1326] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.122177][ T6007] usb 6-1: USB disconnect, device number 21 [ 178.124174][ T1326] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.127905][ T1326] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.132840][ T1326] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.138185][ T1326] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.142118][ T1326] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.357302][ T1326] usb 10-1: GET_CAPABILITIES returned 0 [ 178.360611][ T1326] usbtmc 10-1:16.0: can't read capabilities [ 178.362659][T12160] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2642'. [ 178.615175][T12143] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 178.617236][ T1326] usb 10-1: USB disconnect, device number 2 [ 178.774266][T12187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.777246][T12187] IPv6: NLM_F_CREATE should be set when creating new route [ 179.083463][ T40] audit: type=1400 audit(1771447080.137:545): avc: denied { map } for pid=12216 comm="syz.1.2663" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 180.422455][T12265] syzkaller1: entered promiscuous mode [ 180.432010][T12265] syzkaller1: entered allmulticast mode [ 180.596893][T12276] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2690'. [ 181.180862][T12286] netlink: set zone limit has 4 unknown bytes [ 181.430613][T12292] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.433744][T12292] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.501996][ T34] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.520868][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.525585][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.651083][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 181.657231][ T216] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.657918][ T34] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 181.660730][ T216] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.660764][ T216] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.660793][ T216] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.678461][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.683683][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.687767][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.695835][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.701139][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 181.720265][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.848941][T12309] bond1: option downdelay: invalid value (18446744073709551615) [ 181.852418][T12309] bond1: option downdelay: allowed values 0 - 2147483647 [ 181.856143][T12309] bond1 (unregistering): Released all slaves [ 181.928880][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 181.931038][ T34] usbtmc 5-1:16.0: can't read capabilities [ 182.061299][T12317] macvlan2: entered promiscuous mode [ 182.132233][ T34] usb 5-1: USB disconnect, device number 15 [ 182.350327][T12294] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 182.520310][T12294] usb 10-1: Using ep0 maxpacket: 8 [ 182.524661][T12294] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.529474][T12294] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.533992][T12294] usb 10-1: config 0 interface 0 has no altsetting 0 [ 182.537598][T12294] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.541778][T12294] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.548356][T12294] usb 10-1: config 0 descriptor?? [ 182.959362][T12294] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 182.968062][T12294] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 182.971417][T12294] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 182.974807][T12294] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 182.977841][T12294] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 182.981749][T12294] mcp2221 0003:04D8:00DD.0018: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 183.162010][ T9] usb 10-1: USB disconnect, device number 3 [ 183.528040][T12346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2717'. [ 183.533587][T12346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2717'. [ 183.645405][T12354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2721'. [ 183.808066][T12369] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2728'. [ 183.886780][T12378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2732'. [ 183.892100][T12378] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2732'. [ 184.210204][ T34] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 184.361575][ T34] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.364849][ T34] usb 6-1: config 0 has no interfaces? [ 184.366678][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.369576][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.374510][ T34] usb 6-1: config 0 descriptor?? [ 184.590302][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 184.660363][ T59] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 184.750222][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 184.753100][ T34] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 184.755735][ T34] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 184.758844][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 184.762030][ T34] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.765208][ T34] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.769428][ T34] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 184.772394][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.783359][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.789437][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.793031][ T6007] usb 6-1: USB disconnect, device number 22 [ 184.832183][ T59] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.835436][ T59] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.839520][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.843078][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 184.846792][ T59] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 184.853156][ T59] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 184.856367][ T59] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 184.859433][ T59] usb 5-1: Product: syz [ 184.861854][ T59] usb 5-1: Manufacturer: syz [ 184.869140][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 184.872350][ T59] cdc_wdm 5-1:1.0: skipping garbage [ 184.876928][ T59] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 184.879540][ T59] cdc_wdm 5-1:1.0: Unknown control protocol [ 184.983949][ T34] usb 10-1: usb_control_msg returned -32 [ 184.986889][ T34] usbtmc 10-1:16.0: can't read capabilities [ 185.082159][ T5932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.085684][ T5932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.089931][ T5932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.094845][ T5932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.099239][ T5932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.235386][T12412] chnl_net:caif_netlink_parms(): no params data found [ 185.307377][T12412] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.309740][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.312159][T12412] bridge_slave_0: entered allmulticast mode [ 185.314984][T12412] bridge_slave_0: entered promiscuous mode [ 185.318722][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.321389][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.323774][T12412] bridge_slave_1: entered allmulticast mode [ 185.327164][T12412] bridge_slave_1: entered promiscuous mode [ 185.342340][ T40] audit: type=1400 audit(1771447086.397:546): avc: denied { ioctl } for pid=12403 comm="syz.5.2744" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3384 ioctlcmd=0x5b01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 185.368448][ T79] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.487788][T12412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.494486][ T79] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.504874][T12412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.528089][T12412] team0: Port device team_slave_0 added [ 185.532642][T12412] team0: Port device team_slave_1 added [ 185.553404][T12412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.556454][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.567609][T12412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.573911][ T79] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.584938][T12412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.587947][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.596402][T12412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.638641][T12412] hsr_slave_0: entered promiscuous mode [ 185.641944][T12412] hsr_slave_1: entered promiscuous mode [ 185.644759][T12412] debugfs: 'hsr0' already exists in 'hsr' [ 185.647106][T12412] Cannot create hsr debugfs directory [ 185.651128][ T79] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.681615][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 185.684570][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 185.687506][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 185.690628][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 185.693425][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 185.695527][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 185.697811][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 185.699936][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 185.702196][ T5969] usb 5-1: USB disconnect, device number 16 [ 185.706461][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 185.709038][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 185.711124][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 185.816370][T12412] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.822320][ T79] bridge_slave_1: left allmulticast mode [ 185.824260][ T79] bridge_slave_1: left promiscuous mode [ 185.826285][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.831315][ T79] bridge_slave_0: left allmulticast mode [ 185.833269][ T79] bridge_slave_0: left promiscuous mode [ 185.835280][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.090404][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.093323][ T79] bond_slave_0: left allmulticast mode [ 186.097143][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.101127][ T79] bond_slave_1: left allmulticast mode [ 186.104081][ T79] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 186.106825][ T79] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 186.112207][ T79] bond0 (unregistering): Released all slaves [ 186.116639][T12412] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 186.121938][T12412] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 186.135106][T12412] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 186.195936][ T79] tipc: Left network mode [ 186.201935][T12412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.222506][T12412] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.246157][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.249160][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.258643][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.261598][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.403916][ T79] hsr_slave_0: left promiscuous mode [ 186.406205][ T79] hsr_slave_1: left promiscuous mode [ 186.408378][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.412329][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.417977][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.420932][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.428407][ T79] veth1_macvtap: left promiscuous mode [ 186.431293][ T79] veth0_macvtap: left promiscuous mode [ 186.433434][ T79] veth1_vlan: left promiscuous mode [ 186.435169][ T79] veth0_vlan: left promiscuous mode [ 186.591427][ T79] team0 (unregistering): Port device team_slave_1 removed [ 186.609330][ T79] team0 (unregistering): Port device team_slave_0 removed [ 186.807907][T12412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.006176][T12412] veth0_vlan: entered promiscuous mode [ 187.014183][T12412] veth1_vlan: entered promiscuous mode [ 187.037922][T12412] veth0_macvtap: entered promiscuous mode [ 187.043695][T12412] veth1_macvtap: entered promiscuous mode [ 187.056627][T12412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.070494][T12412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.079486][ T79] IPVS: stop unused estimator thread 0... [ 187.081524][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.085000][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.089706][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.098428][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.130288][ T5285] Bluetooth: hci4: command tx timeout [ 187.160499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.163773][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.214752][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.217796][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.383008][ T29] usb 10-1: USB disconnect, device number 4 [ 187.649928][T12505] ------------[ cut here ]------------ [ 187.653580][T12505] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 5 MHz (6) [ 187.658619][T12505] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2693 at mac80211_hwsim_sta_rc_update+0x5db/0x840, CPU#0: syz.0.2764/12505 [ 187.664668][T12505] Modules linked in: [ 187.667107][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.0.2764 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.672806][T12505] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.674647][T12505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.680401][T12505] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 187.683794][T12505] Code: 00 48 8d 3d 15 fe c0 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 72 b2 e3 fa e8 1d 77 6a 04 [ 187.693436][T12505] RSP: 0018:ffffc90006197120 EFLAGS: 00010246 [ 187.696024][T12505] RAX: ffff8880263c6a90 RBX: 0000000000000000 RCX: ffff888034b90ec0 [ 187.699373][T12505] RDX: 0000000000000000 RSI: ffff8880263c7002 RDI: ffffffff90e5e630 [ 187.703282][T12505] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 187.706927][T12505] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 187.710094][T12505] R13: ffff888034b91090 R14: ffff888059043100 R15: 0000000000000005 [ 187.714193][T12505] FS: 00007f7f77cad6c0(0000) GS:ffff8880d634a000(0000) knlGS:0000000000000000 [ 187.717982][T12505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.721324][T12505] CR2: 00007f7f76d87800 CR3: 00000000586b2000 CR4: 0000000000352ef0 [ 187.724700][T12505] Call Trace: [ 187.726136][T12505] [ 187.727461][T12505] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 187.729949][T12505] mac80211_hwsim_sta_add+0xc9/0x290 [ 187.732626][T12505] drv_sta_state+0x887/0x1960 [ 187.734565][T12505] sta_info_insert_rcu+0x170b/0x2fa0 [ 187.736625][T12505] sta_info_insert+0x16/0xd0 [ 187.738406][T12505] ieee80211_add_station+0x471/0x6d0 [ 187.741112][T12505] nl80211_new_station+0x145b/0x1dd0 [ 187.743297][T12505] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.745574][T12505] ? nl80211_pre_doit+0x19a/0xae0 [ 187.747636][T12505] genl_family_rcv_msg_doit+0x214/0x300 [ 187.749851][T12505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.752614][T12505] ? bpf_lsm_capable+0x9/0x10 [ 187.754463][T12505] ? security_capable+0x80/0x260 [ 187.756469][T12505] ? ns_capable+0xd2/0xf0 [ 187.758198][T12505] genl_rcv_msg+0x560/0x800 [ 187.760474][T12505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.762457][T12505] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.764599][T12505] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.767051][T12505] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.769863][T12505] netlink_rcv_skb+0x159/0x420 [ 187.772422][T12505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.774575][T12505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.776562][T12505] ? netlink_deliver_tap+0x1ae/0xcc0 [ 187.778235][T12505] genl_rcv+0x28/0x40 [ 187.779856][T12505] netlink_unicast+0x5aa/0x870 [ 187.781533][T12505] ? __pfx_netlink_unicast+0x10/0x10 [ 187.783250][T12505] netlink_sendmsg+0x8b0/0xda0 [ 187.784807][T12505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.786494][T12505] ? __might_fault+0xc0/0x140 [ 187.788055][T12505] ____sys_sendmsg+0xa54/0xc30 [ 187.789598][T12505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.791513][T12505] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.793175][T12505] ___sys_sendmsg+0x190/0x1e0 [ 187.795238][T12505] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.797544][T12505] __sys_sendmsg+0x170/0x220 [ 187.799481][T12505] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.801651][T12505] ? __x64_sys_futex+0x34f/0x4d0 [ 187.803731][T12505] do_syscall_64+0x106/0xf80 [ 187.805498][T12505] ? clear_bhb_loop+0x40/0x90 [ 187.806993][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.808873][T12505] RIP: 0033:0x7f7f76d9c629 [ 187.810343][T12505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.816213][T12505] RSP: 002b:00007f7f77cad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.818806][T12505] RAX: ffffffffffffffda RBX: 00007f7f77015fa0 RCX: 00007f7f76d9c629 [ 187.821332][T12505] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 187.823802][T12505] RBP: 00007f7f76e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.826290][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.828782][T12505] R13: 00007f7f77016038 R14: 00007f7f77015fa0 R15: 00007ffc1d8158a8 [ 187.831341][T12505] [ 187.832316][T12505] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.834535][T12505] CPU: 0 UID: 0 PID: 12505 Comm: syz.0.2764 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.837922][T12505] Tainted: [L]=SOFTLOCKUP [ 187.839418][T12505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.842533][T12505] Call Trace: [ 187.843605][T12505] [ 187.844541][T12505] dump_stack_lvl+0x100/0x190 [ 187.846012][T12505] vpanic+0x552/0x970 [ 187.847316][T12505] ? __pfx_vpanic+0x10/0x10 [ 187.848789][T12505] panic+0xd1/0xe0 [ 187.849998][T12505] ? __pfx_panic+0x10/0x10 [ 187.851443][T12505] check_panic_on_warn.cold+0x19/0x34 [ 187.853141][T12505] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 187.855083][T12505] __warn.cold+0x191/0x348 [ 187.856487][T12505] __report_bug+0x296/0x3d0 [ 187.857957][T12505] ? mac80211_hwsim_sta_rc_update+0x5db/0x840 [ 187.859926][T12505] ? __pfx___report_bug+0x10/0x10 [ 187.861526][T12505] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 187.863363][T12505] ? __bfs+0x150/0x2a0 [ 187.864661][T12505] report_bug_entry+0xe1/0x290 [ 187.866181][T12505] ? mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 187.868120][T12505] handle_bug+0x1c9/0x2a0 [ 187.869583][T12505] exc_invalid_op+0x17/0x50 [ 187.871355][T12505] asm_exc_invalid_op+0x1a/0x20 [ 187.872926][T12505] RIP: 0010:mac80211_hwsim_sta_rc_update+0x5fd/0x840 [ 187.875162][T12505] Code: 00 48 8d 3d 15 fe c0 09 48 8b 4c 24 10 48 8b 44 24 20 89 da 44 8b 89 c0 01 00 00 55 48 8d b0 72 05 00 00 41 57 44 8b 44 24 14 <67> 48 0f b9 3a 58 5a e9 3c fc ff ff e8 72 b2 e3 fa e8 1d 77 6a 04 [ 187.881218][T12505] RSP: 0018:ffffc90006197120 EFLAGS: 00010246 [ 187.883151][T12505] RAX: ffff8880263c6a90 RBX: 0000000000000000 RCX: ffff888034b90ec0 [ 187.885636][T12505] RDX: 0000000000000000 RSI: ffff8880263c7002 RDI: ffffffff90e5e630 [ 187.888133][T12505] RBP: 0000000000000006 R08: 0000000000000014 R09: 0000000000000000 [ 187.890541][T12505] R10: 0000000000000006 R11: 0000000000000000 R12: dffffc0000000000 [ 187.893597][T12505] R13: ffff888034b91090 R14: ffff888059043100 R15: 0000000000000005 [ 187.896738][T12505] ? __pfx_mac80211_hwsim_sta_add+0x10/0x10 [ 187.899137][T12505] mac80211_hwsim_sta_add+0xc9/0x290 [ 187.901138][T12505] drv_sta_state+0x887/0x1960 [ 187.902670][T12505] sta_info_insert_rcu+0x170b/0x2fa0 [ 187.904363][T12505] sta_info_insert+0x16/0xd0 [ 187.905828][T12505] ieee80211_add_station+0x471/0x6d0 [ 187.907615][T12505] nl80211_new_station+0x145b/0x1dd0 [ 187.909709][T12505] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.911965][T12505] ? nl80211_pre_doit+0x19a/0xae0 [ 187.914124][T12505] genl_family_rcv_msg_doit+0x214/0x300 [ 187.916487][T12505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.919095][T12505] ? bpf_lsm_capable+0x9/0x10 [ 187.921076][T12505] ? security_capable+0x80/0x260 [ 187.923229][T12505] ? ns_capable+0xd2/0xf0 [ 187.925061][T12505] genl_rcv_msg+0x560/0x800 [ 187.926965][T12505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.929089][T12505] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 187.931453][T12505] ? __pfx_nl80211_new_station+0x10/0x10 [ 187.933814][T12505] ? __pfx_nl80211_post_doit+0x10/0x10 [ 187.936104][T12505] netlink_rcv_skb+0x159/0x420 [ 187.938151][T12505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.940309][T12505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.942512][T12505] ? netlink_deliver_tap+0x1ae/0xcc0 [ 187.944725][T12505] genl_rcv+0x28/0x40 [ 187.946415][T12505] netlink_unicast+0x5aa/0x870 [ 187.948448][T12505] ? __pfx_netlink_unicast+0x10/0x10 [ 187.950647][T12505] netlink_sendmsg+0x8b0/0xda0 [ 187.952679][T12505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.954855][T12505] ? __might_fault+0xc0/0x140 [ 187.956778][T12505] ____sys_sendmsg+0xa54/0xc30 [ 187.958333][T12505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.960018][T12505] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.961998][T12505] ___sys_sendmsg+0x190/0x1e0 [ 187.963802][T12505] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.965686][T12505] __sys_sendmsg+0x170/0x220 [ 187.967155][T12505] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.969006][T12505] ? __x64_sys_futex+0x34f/0x4d0 [ 187.971038][T12505] do_syscall_64+0x106/0xf80 [ 187.972500][T12505] ? clear_bhb_loop+0x40/0x90 [ 187.973997][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.975998][T12505] RIP: 0033:0x7f7f76d9c629 [ 187.977466][T12505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.983413][T12505] RSP: 002b:00007f7f77cad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.986107][T12505] RAX: ffffffffffffffda RBX: 00007f7f77015fa0 RCX: 00007f7f76d9c629 [ 187.988612][T12505] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 187.991070][T12505] RBP: 00007f7f76e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.993520][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.996021][T12505] R13: 00007f7f77016038 R14: 00007f7f77015fa0 R15: 00007ffc1d8158a8 [ 187.998578][T12505] [ 188.000210][T12505] Kernel Offset: disabled [ 188.001575][T12505] Rebooting in 86400 seconds..