last executing test programs: 32.744947049s ago: executing program 0 (id=155): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) 32.68353417s ago: executing program 0 (id=158): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2000, 0x0) 32.618511331s ago: executing program 0 (id=162): r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 32.531000826s ago: executing program 0 (id=163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) 32.530133898s ago: executing program 0 (id=164): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 32.434352115s ago: executing program 0 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)) 17.444915879s ago: executing program 32 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f00000004c0)) 12.850566362s ago: executing program 2 (id=542): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) 12.57518971s ago: executing program 2 (id=554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x5c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce18829f0df52cb0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="732b0246373b8bdc712ec1a47784d1e4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c7063c78a76c80cb6ce990be95d2222"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8024) 12.50741732s ago: executing program 2 (id=556): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)="8c") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 12.469820377s ago: executing program 2 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x84000, 0x0) 12.464188285s ago: executing program 2 (id=561): r0 = socket$inet(0x2, 0x3, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x2, 0x3, 0xfffffff8, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x1, 0x566, 0xffff, 0x6, 0x3, 0x2, 0x40, 0x8}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x678) 12.20110285s ago: executing program 2 (id=566): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 12.135812446s ago: executing program 33 (id=566): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) 1.569543597s ago: executing program 5 (id=786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x4}], 0x1, 0xcb, 0x0) 1.446592153s ago: executing program 5 (id=794): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x15, 0x0, 'lblcr\x00'}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.310671504s ago: executing program 5 (id=800): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) epoll_wait(r2, &(0x7f0000000500)=[{}], 0x1, 0x20400000) write$P9_RVERSION(r1, 0x0, 0x13) 816.545711ms ago: executing program 4 (id=814): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc9}}}, 0x6) syz_emit_ethernet(0x3b6, 0x0, 0x0) 739.938857ms ago: executing program 4 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mincore(&(0x7f00001bf000/0x2000)=nil, 0x2000, &(0x7f0000000380)=""/203) 739.506433ms ago: executing program 4 (id=819): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 679.559319ms ago: executing program 4 (id=821): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) 675.492426ms ago: executing program 1 (id=822): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 632.511661ms ago: executing program 4 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 632.3458ms ago: executing program 4 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) 597.014175ms ago: executing program 1 (id=825): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 552.337919ms ago: executing program 1 (id=826): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000660f38031166b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0xffffffffffffffad}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 461.119367ms ago: executing program 5 (id=828): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0x7ff9, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 459.960181ms ago: executing program 3 (id=829): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f00000001c0)={0x5, r3, r2}) 392.014065ms ago: executing program 3 (id=830): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x1}, 0x58) 388.328563ms ago: executing program 5 (id=831): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\xff$\xdcG|x\xe2\xe8El;\xa5\x87\x91\xbd1\xc2\xb1\x00\xadSP\xb3\x8cH\x9d\xd2\x1f,\xc6\xea\x1fj\xac\xa35\x86\xe5\xechC\x0fz\'\xa9\xb3\xa8\r&\"\xe6\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\xe0\x81\x9e\x12\xed\xd3%\"\x19\x93\xb1\x11!I4\x06\x00L\x10\xbd\x8b(\xc6\x1f\x95\xa6\xce*\xb1$D:^\xee\x91s\x17](A!\xfbF\x84\x8fu2\x13<4vk\x1b\x9d\x1f\x1f\xa2\x17\xc9\xd2\x91R\x11TnJk\x85WAp\xe9T2\xbf\xce\xa8\xf9\x19F\x06\xb0\xb4`ck~\a\xaf#\xc7\tt\xe1w*\xc1\x81\xf4^\xf6\xb6\x12z\x99[\xe9\xc1xiO\xc0\xa5\xcb\xa6\xf5a\x90`\x81\x82\xefH`\xd8\xed~?\xf63\x18\x97\xa2\xdc\x99\x1d*\x8aTnX\x8b\xcb\xe8\xff\xb7%\x0f\xf77KQ2Z\xc8e~\x19\x9d\xb63zt\xc7\x1b\xa6[\x8b\xecj\xe3\vJ\xa0\x11-\x86\xaf^\x14\xab\x1b\xccp\xbe7\x9d\xb8\xa5\xe8G\xf4\xd5s\x91\x00\x00\x00\xe0z2S^\xccS\x96\'[QcJ\xb0\xb5\xaa\x9e\r\xc8\x1d\xc6\x8c\xc38\xa5o!\xd5\xc1\xcb!\x14', 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) 379.478422ms ago: executing program 3 (id=832): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xf6, r1, 0x1, 0xb5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0xfffffe7b) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 359.617981ms ago: executing program 5 (id=833): openat$cdrom(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 292.760749ms ago: executing program 1 (id=834): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 93.296349ms ago: executing program 1 (id=835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0xe}) 90.04536ms ago: executing program 3 (id=836): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x70000, 0x6, {0x0, 0x2710}, {0x4, 0xc, 0xce, 0x9, 0x77, 0x0, "0080ca4f"}, 0xff, 0x2, {0x0}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) 89.020428ms ago: executing program 3 (id=837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x8000000000001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 689.283µs ago: executing program 3 (id=838): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 0s ago: executing program 1 (id=839): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20764' (ED25519) to the list of known hosts. [ 46.525704][ T40] audit: type=1400 audit(1768379233.923:62): avc: denied { name_bind } for pid=5862 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.564068][ T40] audit: type=1400 audit(1768379233.963:63): avc: denied { execute } for pid=5863 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.570842][ T40] audit: type=1400 audit(1768379233.963:64): avc: denied { execute_no_trans } for pid=5863 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 48.416093][ T40] audit: type=1400 audit(1768379235.813:65): avc: denied { mounton } for pid=5863 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.424991][ T40] audit: type=1400 audit(1768379235.833:66): avc: denied { mount } for pid=5863 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.427695][ T5863] cgroup: Unknown subsys name 'net' [ 48.564346][ T5863] cgroup: Unknown subsys name 'cpuset' [ 48.569388][ T5863] cgroup: Unknown subsys name 'rlimit' [ 48.766395][ T5916] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.457360][ T5863] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.510986][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 52.510996][ T40] audit: type=1400 audit(1768379239.903:85): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.620929][ T40] audit: type=1400 audit(1768379240.013:86): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.627129][ T40] audit: type=1400 audit(1768379240.023:87): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.635597][ T40] audit: type=1400 audit(1768379240.023:88): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.643367][ T40] audit: type=1400 audit(1768379240.033:89): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[2961]" dev="sockfs" ino=2961 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.649752][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.655009][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.668945][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.674061][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.677811][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.680042][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.681938][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.682941][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.683618][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.684103][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.686590][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.686621][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.687341][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.687792][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.689037][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.689728][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.690824][ T40] audit: type=1400 audit(1768379240.083:90): avc: denied { read } for pid=5937 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.691143][ T40] audit: type=1400 audit(1768379240.083:91): avc: denied { open } for pid=5937 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.691889][ T40] audit: type=1400 audit(1768379240.093:92): avc: denied { mounton } for pid=5937 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.695808][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.699896][ T5296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.703390][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.705095][ T5296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.936562][ T40] audit: type=1400 audit(1768379240.333:93): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.012694][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 53.074614][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 53.106676][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 53.133860][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 53.202415][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.206235][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.209469][ T5931] bridge_slave_0: entered allmulticast mode [ 53.213653][ T5931] bridge_slave_0: entered promiscuous mode [ 53.227344][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.230225][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.233220][ T5931] bridge_slave_1: entered allmulticast mode [ 53.236786][ T5931] bridge_slave_1: entered promiscuous mode [ 53.315355][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.317768][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.320338][ T5936] bridge_slave_0: entered allmulticast mode [ 53.324122][ T5936] bridge_slave_0: entered promiscuous mode [ 53.332819][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.339825][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.342708][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.345633][ T5936] bridge_slave_1: entered allmulticast mode [ 53.349225][ T5936] bridge_slave_1: entered promiscuous mode [ 53.376120][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.416710][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.418981][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.421491][ T5937] bridge_slave_0: entered allmulticast mode [ 53.424095][ T5937] bridge_slave_0: entered promiscuous mode [ 53.427757][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.429985][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.433180][ T5935] bridge_slave_0: entered allmulticast mode [ 53.436979][ T5935] bridge_slave_0: entered promiscuous mode [ 53.454581][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.457908][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.460624][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.463577][ T5937] bridge_slave_1: entered allmulticast mode [ 53.466866][ T5937] bridge_slave_1: entered promiscuous mode [ 53.470271][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.473376][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.476301][ T5935] bridge_slave_1: entered allmulticast mode [ 53.479976][ T5935] bridge_slave_1: entered promiscuous mode [ 53.485088][ T5931] team0: Port device team_slave_0 added [ 53.489182][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.513711][ T5931] team0: Port device team_slave_1 added [ 53.567388][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.572792][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.577992][ T5936] team0: Port device team_slave_0 added [ 53.581193][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.584075][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.594717][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.601694][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.606603][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.612412][ T5936] team0: Port device team_slave_1 added [ 53.615187][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.618129][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.628734][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.692220][ T5937] team0: Port device team_slave_0 added [ 53.696672][ T5937] team0: Port device team_slave_1 added [ 53.708371][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.711331][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.719932][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.726587][ T5935] team0: Port device team_slave_0 added [ 53.735010][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.737726][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.747951][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.753961][ T5935] team0: Port device team_slave_1 added [ 53.763030][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.765518][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.775339][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.804789][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.807354][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.815079][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.835918][ T5931] hsr_slave_0: entered promiscuous mode [ 53.838983][ T5931] hsr_slave_1: entered promiscuous mode [ 53.854000][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.856914][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.867632][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.882893][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.885866][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.896428][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.939000][ T5936] hsr_slave_0: entered promiscuous mode [ 53.942446][ T5936] hsr_slave_1: entered promiscuous mode [ 53.945320][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 53.947798][ T5936] Cannot create hsr debugfs directory [ 53.999243][ T5937] hsr_slave_0: entered promiscuous mode [ 54.002054][ T5937] hsr_slave_1: entered promiscuous mode [ 54.004606][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 54.006724][ T5937] Cannot create hsr debugfs directory [ 54.064233][ T5935] hsr_slave_0: entered promiscuous mode [ 54.066903][ T5935] hsr_slave_1: entered promiscuous mode [ 54.069378][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 54.071440][ T5935] Cannot create hsr debugfs directory [ 54.323135][ T5931] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.330195][ T5931] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.335798][ T5931] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.346942][ T5931] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.391698][ T5937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.402588][ T5937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.419940][ T5937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.435512][ T5937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.482123][ T5936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.494182][ T5936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.501485][ T5936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.509646][ T5936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.584955][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.596444][ T5935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.602202][ T5935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.607884][ T5935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.614148][ T5935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.652606][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.673502][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.676085][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.688451][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.690758][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.741548][ T5938] Bluetooth: hci2: command tx timeout [ 54.743566][ T5296] Bluetooth: hci0: command tx timeout [ 54.751211][ T5296] Bluetooth: hci3: command tx timeout [ 54.753657][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.783613][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.791489][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.797443][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.805468][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.807774][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.819394][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.821606][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.824077][ T5296] Bluetooth: hci1: command tx timeout [ 54.833517][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.840834][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.844927][ T40] audit: type=1400 audit(1768379242.243:94): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.854119][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.857160][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.863215][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.866155][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.877510][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.880371][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.895317][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.898231][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.948137][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.988287][ T5931] veth0_vlan: entered promiscuous mode [ 54.994059][ T5931] veth1_vlan: entered promiscuous mode [ 55.027112][ T5931] veth0_macvtap: entered promiscuous mode [ 55.034193][ T5931] veth1_macvtap: entered promiscuous mode [ 55.045226][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.053351][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.065369][ T1178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.068228][ T1178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.074898][ T1178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.077709][ T1178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.087439][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.110408][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.120127][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.139633][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.143178][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.163320][ T5937] veth0_vlan: entered promiscuous mode [ 55.179947][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.181289][ T5937] veth1_vlan: entered promiscuous mode [ 55.183035][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.200793][ T5935] veth0_vlan: entered promiscuous mode [ 55.206635][ T5936] veth0_vlan: entered promiscuous mode [ 55.222408][ T5935] veth1_vlan: entered promiscuous mode [ 55.230028][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.238547][ T5936] veth1_vlan: entered promiscuous mode [ 55.251374][ T5937] veth0_macvtap: entered promiscuous mode [ 55.259039][ T5937] veth1_macvtap: entered promiscuous mode [ 55.270932][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.282288][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.296134][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.298998][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.304345][ T5935] veth0_macvtap: entered promiscuous mode [ 55.308894][ T1153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.313230][ T1153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.325300][ T5935] veth1_macvtap: entered promiscuous mode [ 55.329830][ T5936] veth0_macvtap: entered promiscuous mode [ 55.343105][ T5936] veth1_macvtap: entered promiscuous mode [ 55.366075][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.385259][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.391461][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.402699][ T169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.402708][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.405579][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.408701][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.422921][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.429866][ T6029] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.7'. [ 55.432621][ T1172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.436739][ T1172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.454453][ T1178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.462696][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.463759][ T1178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.465262][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.496390][ T1178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.499166][ T1178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.600562][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.605567][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.633126][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.635615][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.668308][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.674565][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.681122][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.685041][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.757099][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 55.885094][ T6062] netlink: 220 bytes leftover after parsing attributes in process `syz.3.16'. [ 55.946126][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 56.083524][ T6078] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 56.371398][ T6096] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.33'. [ 56.481781][ T6104] capability: warning: `syz.3.37' uses deprecated v2 capabilities in a way that may be insecure [ 56.487064][ T6104] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 56.528732][ T6108] misc userio: Begin command sent, but we're already running [ 56.784653][ T6129] Bluetooth: MGMT ver 1.23 [ 56.822849][ T5296] Bluetooth: hci0: command tx timeout [ 56.822871][ T5938] Bluetooth: hci2: command tx timeout [ 56.831461][ T5938] Bluetooth: hci3: command tx timeout [ 56.902323][ T5938] Bluetooth: hci1: command tx timeout [ 56.943037][ T6139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.051100][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.221822][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 57.227077][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 57.233495][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 57.236555][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 57.239189][ T34] usb 7-1: Product: syz [ 57.240546][ T34] usb 7-1: Manufacturer: syz [ 57.242485][ T34] usb 7-1: SerialNumber: syz [ 57.245988][ T34] usb 7-1: config 0 descriptor?? [ 57.248881][ T6131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.253010][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 57.255025][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 57.573589][ T6020] usb 7-1: USB disconnect, device number 2 [ 57.797552][ T6180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.805150][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 57.805162][ T40] audit: type=1400 audit(1768379245.203:215): avc: denied { bind } for pid=6179 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.814181][ T40] audit: type=1400 audit(1768379245.203:216): avc: denied { name_bind } for pid=6179 comm="syz.1.64" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 57.830925][ T40] audit: type=1400 audit(1768379245.203:217): avc: denied { node_bind } for pid=6179 comm="syz.1.64" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.928749][ T40] audit: type=1400 audit(1768379245.323:218): avc: denied { read write } for pid=6185 comm="syz.1.67" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.935981][ T40] audit: type=1400 audit(1768379245.323:219): avc: denied { open } for pid=6185 comm="syz.1.67" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.947149][ T40] audit: type=1400 audit(1768379245.323:220): avc: denied { mounton } for pid=6185 comm="syz.1.67" path="/15/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.958822][ T40] audit: type=1400 audit(1768379245.363:221): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.970986][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.023194][ T40] audit: type=1400 audit(1768379245.423:222): avc: denied { write } for pid=6189 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.029919][ T6190] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 58.131104][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 58.134274][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.137781][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 58.140764][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.145962][ T34] usb 5-1: config 0 descriptor?? [ 58.254048][ T6200] netlink: 112 bytes leftover after parsing attributes in process `syz.1.73'. [ 58.282198][ T40] audit: type=1400 audit(1768379245.683:223): avc: denied { execute } for pid=6201 comm="syz.1.74" path="/21/cpu.stat" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.291760][ T40] audit: type=1400 audit(1768379245.683:224): avc: denied { create } for pid=6201 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.355110][ T34] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 58.460987][ T6020] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.565423][ T6139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.610976][ T6020] usb 7-1: Using ep0 maxpacket: 8 [ 58.613998][ T6020] usb 7-1: config 0 interface 0 has no altsetting 0 [ 58.616080][ T6020] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 58.619054][ T6020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.629127][ T6020] usb 7-1: config 0 descriptor?? [ 58.765641][ T6210] mmap: syz.1.77 (6210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.822900][ T5940] usb 5-1: USB disconnect, device number 2 [ 58.845731][ T6139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.901000][ T5296] Bluetooth: hci3: command tx timeout [ 58.901016][ T5947] Bluetooth: hci2: command tx timeout [ 58.911934][ T5947] Bluetooth: hci0: command tx timeout [ 58.922543][ T6139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.981120][ T5947] Bluetooth: hci1: command tx timeout [ 59.018515][ T1172] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.031164][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.038176][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.045657][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.054887][ T6020] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 59.057385][ T6020] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 59.060224][ T6020] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 59.063605][ T6020] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 59.067049][ T6020] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 59.070234][ T6020] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 59.175905][ T6228] netlink: 'syz.3.86': attribute type 29 has an invalid length. [ 59.180015][ T6228] netlink: 'syz.3.86': attribute type 29 has an invalid length. [ 59.184331][ T6228] netlink: 500 bytes leftover after parsing attributes in process `syz.3.86'. [ 59.256153][ T6020] usb 7-1: USB disconnect, device number 3 [ 59.437358][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 59.446080][ T6256] warning: `syz.3.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.599118][ T6269] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.629073][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 59.637147][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.642156][ T6269] Zero length message leads to an empty skb [ 59.852016][ T6287] netlink: 6 bytes leftover after parsing attributes in process `syz.2.111'. [ 60.593356][ T6327] syz.1.129 uses obsolete (PF_INET,SOCK_PACKET) [ 60.598905][ T6329] process 'syz.3.128' launched './file2' with NULL argv: empty string added [ 60.853553][ T6344] __nla_validate_parse: 1 callbacks suppressed [ 60.853570][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 60.900989][ T5938] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 60.981752][ T5938] Bluetooth: hci0: command 0x0419 tx timeout [ 60.981864][ T5934] Bluetooth: hci2: command tx timeout [ 60.985983][ T5296] Bluetooth: hci3: command tx timeout [ 61.071272][ T5296] Bluetooth: hci1: command tx timeout [ 61.136780][ T6355] nbd: device at index 2 is going down [ 61.176271][ T6357] pim6reg1: entered promiscuous mode [ 61.178399][ T6357] pim6reg1: entered allmulticast mode [ 61.197841][ T6363] ======================================================= [ 61.197841][ T6363] WARNING: The mand mount option has been deprecated and [ 61.197841][ T6363] and is ignored by this kernel. Remove the mand [ 61.197841][ T6363] option from the mount to silence this warning. [ 61.197841][ T6363] ======================================================= [ 61.217810][ T6363] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.570403][ T6382] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 61.740763][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 61.949794][ T6413] Invalid ELF header magic: != ELF [ 62.360631][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 62.364393][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 62.417299][ T6432] lo speed is unknown, defaulting to 1000 [ 62.420241][ T6432] lo speed is unknown, defaulting to 1000 [ 62.424602][ T6432] lo speed is unknown, defaulting to 1000 [ 62.474279][ T6433] ªªªªªª: renamed from lo (while UP) [ 62.508813][ T6432] infiniband sz1: set active [ 62.511170][ T6432] infiniband sz1: added ªªªªªª [ 62.515268][ T6027] ªªªªªª speed is unknown, defaulting to 1000 [ 62.520934][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 62.549270][ T6432] RDS/IB: sz1: added [ 62.551454][ T6432] smc: adding ib device sz1 with port count 1 [ 62.554123][ T6432] smc: ib device sz1 port 1 has no pnetid [ 62.558149][ T34] ªªªªªª speed is unknown, defaulting to 1000 [ 62.561681][ T6432] ªªªªªª speed is unknown, defaulting to 1000 [ 62.670977][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 62.677806][ T10] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.681289][ T6432] ªªªªªª speed is unknown, defaulting to 1000 [ 62.682949][ T10] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.687597][ T10] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.692668][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 62.709363][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 62.720912][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.723467][ T10] usb 7-1: Product: syz [ 62.724827][ T10] usb 7-1: Manufacturer: syz [ 62.726315][ T10] usb 7-1: SerialNumber: syz [ 62.847910][ T6432] ªªªªªª speed is unknown, defaulting to 1000 [ 62.865368][ T6447] kvm: kvm [6446]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x40000008) = 0xfffffffffffffffa [ 62.938353][ T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 62.972365][ T6432] ªªªªªª speed is unknown, defaulting to 1000 [ 62.976997][ T6449] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.182'. [ 63.062211][ T5296] Bluetooth: hci3: command 0x0411 tx timeout [ 63.062232][ T5934] Bluetooth: hci0: command 0x0419 tx timeout [ 63.093979][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 63.093993][ T40] audit: type=1400 audit(1768379250.493:283): avc: denied { bind } for pid=6454 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.138481][ T40] audit: type=1400 audit(1768379250.533:284): avc: denied { read write } for pid=6423 comm="syz.2.171" name="lp0" dev="devtmpfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 63.153722][ T40] audit: type=1400 audit(1768379250.553:285): avc: denied { open } for pid=6423 comm="syz.2.171" path="/dev/usb/lp0" dev="devtmpfs" ino=2858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 63.162057][ T40] audit: type=1400 audit(1768379250.553:286): avc: denied { ioctl } for pid=6423 comm="syz.2.171" path="/dev/usb/lp0" dev="devtmpfs" ino=2858 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 63.406317][ T29] usb 7-1: USB disconnect, device number 4 [ 63.419199][ T29] usblp0: removed [ 63.610940][ T6020] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.760916][ T6020] usb 6-1: Using ep0 maxpacket: 8 [ 63.763842][ T6020] usb 6-1: config 0 interface 0 has no altsetting 0 [ 63.766718][ T6020] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 63.769641][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.776156][ T6020] usb 6-1: config 0 descriptor?? [ 63.778809][ T6470] veth0_to_bridge: entered promiscuous mode [ 63.793335][ T6469] veth0_to_bridge: left promiscuous mode [ 63.832929][ T40] audit: type=1400 audit(1768379251.233:287): avc: denied { bind } for pid=6471 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.938183][ T40] audit: type=1400 audit(1768379251.333:288): avc: denied { mount } for pid=6475 comm="syz.2.195" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.120957][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.186354][ T6020] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 64.221001][ T29] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 64.301033][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 64.304054][ T53] usb 8-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 64.307493][ T53] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 64.310277][ T53] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.314761][ T53] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 64.317644][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.328813][ T53] hub 8-1:1.0: bad descriptor, ignoring hub [ 64.330735][ T53] hub 8-1:1.0: probe with driver hub failed with error -5 [ 64.333400][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 64.335086][ T53] cdc_wdm 8-1:1.0: skipping garbage [ 64.336760][ T53] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 64.372450][ T29] usb 7-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 64.375779][ T29] usb 7-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 64.380974][ T29] usb 7-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 64.384696][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.388386][ T29] usb 7-1: Product: syz [ 64.390229][ T29] usb 7-1: Manufacturer: syz [ 64.391757][ T6462] i2c i2c-2: unsupported multi-msg i2c transaction [ 64.392620][ T29] usb 7-1: SerialNumber: syz [ 64.395715][ T10] usb 6-1: USB disconnect, device number 2 [ 64.611253][ T29] usb 7-1: USB disconnect, device number 5 [ 64.641069][ T59] usb 8-1: USB disconnect, device number 2 [ 64.933772][ T40] audit: type=1400 audit(1768379252.333:289): avc: denied { read write } for pid=6480 comm="syz.1.197" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.943104][ T40] audit: type=1400 audit(1768379252.343:290): avc: denied { open } for pid=6480 comm="syz.1.197" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.950541][ T40] audit: type=1400 audit(1768379252.343:291): avc: denied { ioctl } for pid=6480 comm="syz.1.197" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.093660][ T6488] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.200'. [ 65.107314][ T40] audit: type=1400 audit(1768379252.503:292): avc: denied { create } for pid=6490 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.146542][ T5934] Bluetooth: hci3: command 0x0411 tx timeout [ 65.163484][ T6496] input: syz1 as /devices/virtual/input/input7 [ 65.314266][ T6504] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.318872][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.323634][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.400926][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.554779][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.558613][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.570970][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.575009][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.580085][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.584527][ T34] usb 8-1: config 0 descriptor?? [ 65.658896][ T6518] ªªªªªª speed is unknown, defaulting to 1000 [ 65.984134][ T6539] netlink: 'syz.1.221': attribute type 29 has an invalid length. [ 65.988374][ T6539] netlink: 'syz.1.221': attribute type 29 has an invalid length. [ 65.997196][ T6539] netlink: 596 bytes leftover after parsing attributes in process `syz.1.221'. [ 66.011376][ T34] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 67.039777][ T6584] netlink: 'syz.1.241': attribute type 11 has an invalid length. [ 67.093846][ T6586] netlink: 64 bytes leftover after parsing attributes in process `syz.1.242'. [ 67.868322][ T849] ªªªªªª speed is unknown, defaulting to 1000 [ 68.103424][ T59] usb 8-1: USB disconnect, device number 3 [ 68.136373][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 68.136383][ T40] audit: type=1400 audit(1768379255.533:329): avc: denied { getopt } for pid=6648 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.140245][ T6651] netlink: 'syz.3.274': attribute type 29 has an invalid length. [ 68.163382][ T6651] netlink: 'syz.3.274': attribute type 29 has an invalid length. [ 68.433217][ T6665] netlink: 48 bytes leftover after parsing attributes in process `syz.3.281'. [ 68.481883][ T54] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.528893][ T40] audit: type=1400 audit(1768379255.923:330): avc: denied { lock } for pid=6670 comm="syz.3.284" path="socket:[13403]" dev="sockfs" ino=13403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 68.630934][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 68.633864][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 68.636007][ T54] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 68.639775][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.645656][ T54] usb 7-1: config 0 descriptor?? [ 69.065474][ T54] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 69.256219][ T10] usb 7-1: USB disconnect, device number 6 [ 69.994805][ T1145] cfg80211: failed to load regulatory.db [ 70.025020][ T40] audit: type=1400 audit(1768379257.423:331): avc: denied { ioctl } for pid=6694 comm="syz.1.293" path="socket:[14342]" dev="sockfs" ino=14342 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.198445][ T40] audit: type=1400 audit(1768379257.593:332): avc: denied { accept } for pid=6701 comm="syz.1.296" path="/122/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 70.211225][ T40] audit: type=1400 audit(1768379257.613:333): avc: denied { allowed } for pid=6705 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 70.301577][ T6711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.300'. [ 70.456561][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 70.575291][ T40] audit: type=1400 audit(1768379257.973:334): avc: denied { create } for pid=6726 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.583188][ T40] audit: type=1400 audit(1768379257.973:335): avc: denied { write } for pid=6726 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.894630][ T6739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.314'. [ 71.055890][ T40] audit: type=1400 audit(1768379258.453:336): avc: denied { read } for pid=6750 comm="syz.2.319" path="socket:[12988]" dev="sockfs" ino=12988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.411045][ T6027] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 71.441328][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.562339][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.566734][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.569923][ T6027] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.580297][ T6027] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.583395][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.591193][ T6027] usb 7-1: config 0 descriptor?? [ 71.602865][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.606296][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.609317][ T10] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.612316][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.621264][ T10] usb 8-1: config 0 descriptor?? [ 71.786419][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 71.877080][ T40] audit: type=1400 audit(1768379259.273:337): avc: denied { read } for pid=6782 comm="syz.1.336" laddr=fe80::b lport=40943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.013770][ T6027] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.033586][ T10] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 72.040382][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0926:3333.0007/input/input10 [ 72.119761][ T10] keytouch 0003:0926:3333.0007: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 72.244101][ T5940] usb 8-1: USB disconnect, device number 4 [ 72.262877][ T849] usb 7-1: USB disconnect, device number 7 [ 72.728266][ T40] audit: type=1400 audit(1768379260.123:338): avc: denied { create } for pid=6789 comm="syz.1.338" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.095145][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 73.176101][ T6830] bond1: option downdelay: invalid value (18446744073709551615) [ 73.178696][ T6830] bond1: option downdelay: allowed values 0 - 2147483647 [ 73.184414][ T6830] bond1 (unregistering): Released all slaves [ 73.209458][ T6835] tap0: tun_chr_ioctl cmd 1074025675 [ 73.213468][ T6835] tap0: persist enabled [ 73.215353][ T6835] tap0: tun_chr_ioctl cmd 1074025675 [ 73.217109][ T6835] tap0: persist disabled [ 73.229276][ T6838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'. [ 73.340739][ T5934] Bluetooth: hci0: Malformed Event: 0x2f [ 73.720366][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 73.720380][ T40] audit: type=1400 audit(1768379261.113:344): avc: denied { bind } for pid=6868 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.732455][ T40] audit: type=1400 audit(1768379261.133:345): avc: denied { setopt } for pid=6868 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.739536][ T40] audit: type=1400 audit(1768379261.133:346): avc: denied { write } for pid=6868 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.257462][ T40] audit: type=1400 audit(1768379261.653:347): avc: denied { create } for pid=6870 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.264217][ T40] audit: type=1400 audit(1768379261.653:348): avc: denied { write } for pid=6870 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.348635][ T40] audit: type=1400 audit(1768379261.743:349): avc: denied { map } for pid=6877 comm="syz.1.376" path="socket:[15447]" dev="sockfs" ino=15447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.357290][ T40] audit: type=1400 audit(1768379261.753:350): avc: denied { read accept } for pid=6877 comm="syz.1.376" path="socket:[15447]" dev="sockfs" ino=15447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.511694][ T6888] syzkaller1: entered promiscuous mode [ 74.513518][ T6888] syzkaller1: entered allmulticast mode [ 74.585098][ T40] audit: type=1400 audit(1768379261.983:351): avc: denied { read } for pid=6893 comm="syz.2.384" path="socket:[15468]" dev="sockfs" ino=15468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.775366][ T40] audit: type=1400 audit(1768379262.173:352): avc: denied { checkpoint_restore } for pid=6907 comm="syz.1.391" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.971089][ T59] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 74.988449][ T40] audit: type=1400 audit(1768379262.383:353): avc: denied { block_suspend } for pid=6918 comm="syz.1.395" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 75.141838][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 75.157456][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.162755][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.167417][ T59] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 75.171687][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.175829][ T59] usb 7-1: config 0 descriptor?? [ 75.590991][ T59] kye 0003:0458:5016.0008: control desc unexpectedly large [ 75.597713][ T59] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0008/input/input11 [ 75.670557][ T59] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5016.0008/input/input12 [ 75.740298][ T59] kye 0003:0458:5016.0008: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 76.203683][ T6960] vcan0: tx address claim with different name [ 76.265917][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.268203][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.272374][ T6955] capability: warning: `syz.3.411' uses 32-bit capabilities (legacy support in use) [ 76.551373][ T6974] block nbd0: server does not support multiple connections per device. [ 76.555272][ T6974] block nbd0: shutting down sockets [ 76.711728][ C1] kye 0003:0458:5016.0008: usb_submit_urb(ctrl) failed: -1 [ 76.945146][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 76.951846][ T6995] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 76.973401][ T6995] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 77.042387][ T5296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.046530][ T5296] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.050400][ T5296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.057598][ T5296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.060779][ T5296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.112129][ T6999] ªªªªªª speed is unknown, defaulting to 1000 [ 77.272369][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 77.382559][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.397290][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.400427][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.403617][ T6999] bridge_slave_0: entered allmulticast mode [ 77.407470][ T6999] bridge_slave_0: entered promiscuous mode [ 77.412510][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.415579][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.418572][ T6999] bridge_slave_1: entered allmulticast mode [ 77.423028][ T6999] bridge_slave_1: entered promiscuous mode [ 77.445017][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.449652][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.464956][ T6999] team0: Port device team_slave_0 added [ 77.468516][ T6999] team0: Port device team_slave_1 added [ 77.482258][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.504456][ T849] usb 7-1: USB disconnect, device number 8 [ 77.510548][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.514229][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.527729][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.539379][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.551082][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.559557][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.592298][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.630680][ T7036] ªªªªªª speed is unknown, defaulting to 1000 [ 77.636190][ T6999] hsr_slave_0: entered promiscuous mode [ 77.638445][ T6999] hsr_slave_1: entered promiscuous mode [ 77.640531][ T6999] debugfs: 'hsr0' already exists in 'hsr' [ 77.642700][ T6999] Cannot create hsr debugfs directory [ 77.663337][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.786464][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 77.794714][ T7046] netlink: 'syz.2.449': attribute type 21 has an invalid length. [ 77.869932][ T6999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.888313][ T6999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.905492][ T6999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.944750][ T6999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.986742][ T1144] bridge_slave_1: left allmulticast mode [ 77.988682][ T1144] bridge_slave_1: left promiscuous mode [ 77.991221][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.996344][ T1144] bridge_slave_0: left allmulticast mode [ 77.998669][ T1144] bridge_slave_0: left promiscuous mode [ 78.011415][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.069801][ T7070] netlink: 64 bytes leftover after parsing attributes in process `syz.3.458'. [ 78.232681][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.237135][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.240673][ T1144] bond0 (unregistering): Released all slaves [ 78.481311][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.503273][ T34] IPVS: starting estimator thread 0... [ 78.535618][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.545426][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.547704][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.564300][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.566691][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.573118][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'. [ 78.576952][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'. [ 78.601021][ T7096] IPVS: using max 45 ests per chain, 108000 per kthread [ 78.680478][ T1144] hsr_slave_0: left promiscuous mode [ 78.682900][ T1144] hsr_slave_1: left promiscuous mode [ 78.684921][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.687224][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.690059][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.695471][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.701905][ T59] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 78.710397][ T1144] veth1_macvtap: left promiscuous mode [ 78.713204][ T1144] veth0_macvtap: left promiscuous mode [ 78.715294][ T1144] veth1_vlan: left promiscuous mode [ 78.717135][ T1144] veth0_vlan: left promiscuous mode [ 78.751500][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 78.751510][ T40] audit: type=1400 audit(1768379267.154:383): avc: denied { create } for pid=7116 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.781761][ T40] audit: type=1400 audit(1768379267.184:384): avc: denied { bind } for pid=7116 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.852124][ T59] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 78.856007][ T59] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 78.869168][ T59] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 78.872860][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 78.884386][ T59] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.887284][ T59] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 78.890938][ T59] usb 6-1: Product: syz [ 78.892293][ T59] usb 6-1: Manufacturer: syz [ 78.893761][ T59] usb 6-1: SerialNumber: syz [ 78.897907][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 78.901725][ T59] usb 6-1: config 0 descriptor?? [ 78.902731][ T7089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.912685][ T59] usb 6-1: selecting invalid altsetting 0 [ 79.112631][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 79.130267][ T7089] usb 6-1: BOGUS urb xfer, pipe 0 != type 1 [ 79.144785][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 79.151874][ T5296] Bluetooth: hci4: command tx timeout [ 79.199748][ T6041] usb 6-1: USB disconnect, device number 3 [ 79.425992][ T40] audit: type=1400 audit(1768379267.824:385): avc: denied { ioctl } for pid=7144 comm="syz.3.482" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16732 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.510210][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.533829][ T7157] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.485'. [ 79.641689][ T40] audit: type=1400 audit(1768379268.044:386): avc: denied { read } for pid=7170 comm="syz.2.489" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.650496][ T40] audit: type=1400 audit(1768379268.044:387): avc: denied { open } for pid=7170 comm="syz.2.489" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.651489][ T7172] binder: 7170:7172 ioctl c0306201 0 returned -14 [ 79.660377][ T40] audit: type=1400 audit(1768379268.054:388): avc: denied { ioctl } for pid=7170 comm="syz.2.489" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.744877][ T6999] veth0_vlan: entered promiscuous mode [ 79.749744][ T40] audit: type=1400 audit(1768379268.144:389): avc: denied { append } for pid=7187 comm="syz.1.493" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.763329][ T6999] veth1_vlan: entered promiscuous mode [ 79.781831][ T6999] veth0_macvtap: entered promiscuous mode [ 79.785659][ T6999] veth1_macvtap: entered promiscuous mode [ 79.794148][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.799851][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.811912][ T1172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.814892][ T1172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.828802][ T1172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.832782][ T1172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.876963][ T40] audit: type=1400 audit(1768379268.274:390): avc: denied { read } for pid=7199 comm="syz.3.498" path="socket:[15769]" dev="sockfs" ino=15769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.898224][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.902686][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.933850][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.937203][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.999949][ T40] audit: type=1400 audit(1768379268.394:391): avc: denied { read } for pid=7210 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.034461][ T7215] netlink: 212892 bytes leftover after parsing attributes in process `syz.4.502'. [ 80.107361][ T7219] netlink: 'syz.3.505': attribute type 10 has an invalid length. [ 80.118222][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.505'. [ 80.122242][ T7219] dummy0: entered promiscuous mode [ 80.125982][ T7219] bridge0: port 3(dummy0) entered blocking state [ 80.128753][ T7219] bridge0: port 3(dummy0) entered disabled state [ 80.131004][ T7219] dummy0: entered allmulticast mode [ 80.134036][ T7219] bridge0: port 3(dummy0) entered blocking state [ 80.135013][ T7222] netlink: 'syz.4.506': attribute type 39 has an invalid length. [ 80.136185][ T7219] bridge0: port 3(dummy0) entered forwarding state [ 80.623193][ T40] audit: type=1400 audit(1768379269.024:392): avc: denied { open } for pid=7258 comm="syz.1.522" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 80.921046][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 81.049385][ T7271] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 81.087156][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.091888][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.095921][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.101938][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.105684][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.111661][ T59] usb 6-1: config 0 descriptor?? [ 81.221189][ T5296] Bluetooth: hci4: command tx timeout [ 81.465482][ T7292] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 81.473403][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.476077][ T7292] bridge_slave_1: left allmulticast mode [ 81.477862][ T7292] bridge_slave_1: left promiscuous mode [ 81.479887][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.491941][ T7292] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 81.523297][ T59] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 81.552839][ T59] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 81.783278][ T59] usb 6-1: USB disconnect, device number 4 [ 82.360156][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.365740][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.368856][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.372110][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.374769][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.400784][ T7359] ªªªªªª speed is unknown, defaulting to 1000 [ 82.573885][ T7359] chnl_net:caif_netlink_parms(): no params data found [ 82.680224][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.683483][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.686456][ T7359] bridge_slave_0: entered allmulticast mode [ 82.690038][ T7359] bridge_slave_0: entered promiscuous mode [ 82.695362][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.698445][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.701694][ T7359] bridge_slave_1: entered allmulticast mode [ 82.705542][ T7359] bridge_slave_1: entered promiscuous mode [ 82.732402][ T7359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.740011][ T7359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.764838][ T7359] team0: Port device team_slave_0 added [ 82.769554][ T7359] team0: Port device team_slave_1 added [ 82.794701][ T7377] sp0: Synchronizing with TNC [ 82.805956][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.808756][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.817719][ T7359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.832849][ T7359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.835831][ T7359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.846271][ T7359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.884126][ T7359] hsr_slave_0: entered promiscuous mode [ 82.887079][ T7359] hsr_slave_1: entered promiscuous mode [ 82.889636][ T7359] debugfs: 'hsr0' already exists in 'hsr' [ 82.891967][ T7359] Cannot create hsr debugfs directory [ 83.005638][ T7359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.009856][ T7359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.013688][ T7359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.018296][ T7359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.040418][ T7359] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.043216][ T7359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.045983][ T7359] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.048204][ T7359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.078294][ T7359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.088115][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.099160][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.110233][ T7359] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.120096][ T169] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.123205][ T169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.130503][ T169] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.133565][ T169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.256572][ T7359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.301621][ T5947] Bluetooth: hci4: command tx timeout [ 83.339979][ T7414] sctp: [Deprecated]: syz.1.583 (pid 7414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.339979][ T7414] Use struct sctp_sack_info instead [ 83.399551][ T7359] veth0_vlan: entered promiscuous mode [ 83.404523][ T7359] veth1_vlan: entered promiscuous mode [ 83.418021][ T7359] veth0_macvtap: entered promiscuous mode [ 83.422289][ T7359] veth1_macvtap: entered promiscuous mode [ 83.431504][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.438050][ T7359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.445279][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.448752][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.452505][ T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.456085][ T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.493845][ T169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.496966][ T169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.513683][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.516406][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.781005][ T5296] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 83.781316][ T5947] Bluetooth: hci2: command 0x1003 tx timeout [ 83.800954][ T53] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 83.852403][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 83.852418][ T40] audit: type=1400 audit(1768379272.254:401): avc: denied { setopt } for pid=7429 comm="syz.4.589" lport=59334 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 83.982849][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 83.987032][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 83.991209][ T53] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 83.994637][ T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.004047][ T53] usb 10-1: config 0 descriptor?? [ 84.006722][ T7424] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 84.225109][ T53] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 84.331569][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 84.334836][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 84.367315][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 84.369404][ T1144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.371848][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 84.375793][ T1144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.392665][ T1144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.395488][ T1144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.425979][ C2] iowarrior 10-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 84.429626][ T53] usb 10-1: USB disconnect, device number 2 [ 84.432629][ T5296] Bluetooth: hci3: command tx timeout [ 84.552347][ T7471] Invalid argument reading file caps for ./file0 [ 84.728914][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.615'. [ 84.901715][ T40] audit: type=1400 audit(1768379273.304:402): avc: denied { read } for pid=7489 comm="syz.1.619" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.910070][ T7490] rtc_cmos 00:05: Alarms can be up to one day in the future [ 84.913461][ T40] audit: type=1400 audit(1768379273.304:403): avc: denied { open } for pid=7489 comm="syz.1.619" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.925057][ T40] audit: type=1400 audit(1768379273.304:404): avc: denied { ioctl } for pid=7489 comm="syz.1.619" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.982471][ T7494] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 85.092744][ T7508] binder: 7507:7508 ioctl 4040942c 0 returned -22 [ 85.094893][ T7508] binder: 7507:7508 ioctl 400c620e 200000000580 returned -22 [ 85.113468][ T59] rtc_cmos 00:05: Alarms can be up to one day in the future [ 85.137860][ T7514] syzkaller1: entered promiscuous mode [ 85.139298][ T59] rtc_cmos 00:05: Alarms can be up to one day in the future [ 85.143446][ T59] rtc_cmos 00:05: Alarms can be up to one day in the future [ 85.144974][ T7514] syzkaller1: entered allmulticast mode [ 85.146606][ T59] rtc_cmos 00:05: Alarms can be up to one day in the future [ 85.162372][ T59] rtc rtc0: __rtc_set_alarm: err=-22 [ 85.381864][ T5296] Bluetooth: hci4: command tx timeout [ 85.469401][ T7539] blkio.reset_stats is deprecated [ 85.671464][ T59] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 85.734711][ T7561] input: syz0 as /devices/virtual/input/input16 [ 85.739083][ T40] audit: type=1400 audit(1768379274.134:405): avc: denied { read } for pid=5330 comm="acpid" name="js0" dev="devtmpfs" ino=2949 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.751023][ T40] audit: type=1400 audit(1768379274.134:406): avc: denied { open } for pid=5330 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2949 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.758364][ T40] audit: type=1400 audit(1768379274.134:407): avc: denied { ioctl } for pid=5330 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2949 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.832315][ T59] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 85.836105][ T59] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 85.839784][ T59] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.843920][ T59] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.847378][ T59] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 85.850312][ T59] usb 6-1: Product: syz [ 85.852056][ T59] usb 6-1: Manufacturer: syz [ 85.853913][ T59] usb 6-1: SerialNumber: syz [ 85.857684][ T59] usb 6-1: config 0 descriptor?? [ 85.863533][ T59] usb 6-1: selecting invalid altsetting 0 [ 85.910543][ T40] audit: type=1400 audit(1768379274.304:408): avc: denied { bind } for pid=7569 comm="syz.3.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.921767][ T849] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 86.040932][ T59] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 86.067044][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.070339][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.070923][ T849] usb 10-1: Using ep0 maxpacket: 8 [ 86.073955][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.076723][ T849] usb 10-1: config 0 interface 0 has no altsetting 0 [ 86.078661][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.081541][ T849] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 86.084757][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.088254][ T849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.092013][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.097212][ T849] usb 10-1: config 0 descriptor?? [ 86.098488][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.105988][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.109430][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.113747][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.117937][ T7537] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 86.118321][ T6043] usb 6-1: USB disconnect, device number 5 [ 86.121556][ T7537] usb 6-1: cannot submit urb 0, error -19: no device [ 86.193443][ T59] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 86.196819][ T59] usb 9-1: config 0 has no interface number 0 [ 86.198820][ T59] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 86.202476][ T59] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.206590][ T59] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 86.211012][ T59] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 86.214118][ T59] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 86.216683][ T59] usb 9-1: Product: syz [ 86.218047][ T59] usb 9-1: SerialNumber: syz [ 86.224516][ T59] usb 9-1: config 0 descriptor?? [ 86.229850][ T59] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 86.233777][ T59] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input17 [ 86.241005][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.394132][ T10] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.397612][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.400803][ T10] usb 8-1: Product: syz [ 86.402252][ T10] usb 8-1: Manufacturer: syz [ 86.404162][ T10] usb 8-1: SerialNumber: syz [ 86.409971][ T10] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.431607][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 86.435664][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.501647][ T5296] Bluetooth: hci3: command tx timeout [ 86.532155][ T849] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 86.714037][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.717940][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.720594][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.723644][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.727005][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.730018][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.732360][ T6020] usb 10-1: USB disconnect, device number 3 [ 86.734391][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.737768][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.740656][ T10] usb 9-1: USB disconnect, device number 2 [ 86.743490][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 86.743502][ C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 86.754020][ T10] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 86.932262][ T7589] syzkaller1: entered promiscuous mode [ 86.934583][ T7589] syzkaller1: entered allmulticast mode [ 87.200984][ T7590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.205055][ T7590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.271709][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.279000][ T40] audit: type=1400 audit(1768379275.674:409): avc: denied { accept } for pid=7593 comm="syz.5.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.329722][ T5296] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 87.333702][ T5296] CPU: 2 UID: 0 PID: 5296 Comm: kworker/u33:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.333719][ T5296] Tainted: [L]=SOFTLOCKUP [ 87.333723][ T5296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.333730][ T5296] Workqueue: hci3 hci_rx_work [ 87.333745][ T5296] Call Trace: [ 87.333749][ T5296] [ 87.333754][ T5296] dump_stack_lvl+0x16c/0x1f0 [ 87.333770][ T5296] sysfs_warn_dup+0x7f/0xa0 [ 87.333783][ T5296] sysfs_create_dir_ns+0x24b/0x2b0 [ 87.333795][ T5296] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 87.333807][ T5296] ? find_held_lock+0x2b/0x80 [ 87.333824][ T5296] ? do_raw_spin_unlock+0x172/0x230 [ 87.333838][ T5296] kobject_add_internal+0x2c4/0x9d0 [ 87.333855][ T5296] kobject_add+0x16e/0x240 [ 87.333870][ T5296] ? __pfx_kobject_add+0x10/0x10 [ 87.333888][ T5296] ? kobject_put+0xaf/0x6f0 [ 87.333901][ T5296] ? _raw_spin_unlock+0x28/0x50 [ 87.333916][ T5296] device_add+0x288/0x1980 [ 87.333928][ T5296] ? __pfx_dev_set_name+0x10/0x10 [ 87.333941][ T5296] ? __pfx_device_add+0x10/0x10 [ 87.333952][ T5296] ? mgmt_send_event_skb+0x2fb/0x460 [ 87.333967][ T5296] hci_conn_add_sysfs+0x1a8/0x260 [ 87.333980][ T5296] le_conn_complete_evt+0x11ed/0x1fa0 [ 87.333995][ T5296] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 87.334010][ T5296] hci_le_conn_complete_evt+0x23c/0x3a0 [ 87.334030][ T5296] hci_le_meta_evt+0x357/0x610 [ 87.334043][ T5296] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 87.334056][ T5296] hci_event_packet+0x685/0x1210 [ 87.334068][ T5296] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 87.334081][ T5296] ? __pfx_hci_event_packet+0x10/0x10 [ 87.334095][ T5296] ? kcov_remote_start+0x399/0x680 [ 87.334107][ T5296] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.334124][ T5296] hci_rx_work+0x2c9/0x1020 [ 87.334138][ T5296] process_one_work+0x9ba/0x1b20 [ 87.334157][ T5296] ? __pfx_process_one_work+0x10/0x10 [ 87.334173][ T5296] ? assign_work+0x1a0/0x250 [ 87.334186][ T5296] worker_thread+0x6c8/0xf10 [ 87.334204][ T5296] ? __pfx_worker_thread+0x10/0x10 [ 87.334216][ T5296] kthread+0x3c5/0x780 [ 87.334228][ T5296] ? __pfx_kthread+0x10/0x10 [ 87.334240][ T5296] ? rcu_is_watching+0x12/0xc0 [ 87.334250][ T5296] ? __pfx_kthread+0x10/0x10 [ 87.334261][ T5296] ret_from_fork+0x983/0xb10 [ 87.334275][ T5296] ? __pfx_ret_from_fork+0x10/0x10 [ 87.334286][ T5296] ? __switch_to+0x7af/0x10d0 [ 87.334300][ T5296] ? __pfx_kthread+0x10/0x10 [ 87.334311][ T5296] ret_from_fork_asm+0x1a/0x30 [ 87.334332][ T5296] [ 87.334346][ T5296] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.420226][ T5296] Bluetooth: hci3: failed to register connection device [ 87.422593][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.430939][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.434088][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.444770][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.447707][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.452121][ T10] usb 6-1: config 0 descriptor?? [ 87.461275][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 87.472770][ T9] ath9k_htc: Failed to initialize the device [ 87.499538][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 87.509841][ T34] usb 8-1: USB disconnect, device number 5 [ 87.647433][ T40] audit: type=1400 audit(1768379276.044:410): avc: denied { append } for pid=7611 comm="syz.5.673" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.665134][ T7614] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.668776][ T7614] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.870473][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.102536][ T7633] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.681'. [ 88.105505][ T7633] netlink: ct family unspecified [ 88.139355][ T849] usb 6-1: USB disconnect, device number 6 [ 88.208744][ T7639] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 88.293843][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.688'. [ 88.485361][ T7666] netlink: 3900 bytes leftover after parsing attributes in process `syz.3.696'. [ 88.581366][ T5947] Bluetooth: hci3: command tx timeout [ 88.686845][ T7677] ªªªªªª speed is unknown, defaulting to 1000 [ 88.946595][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 88.946612][ T40] audit: type=1400 audit(1768379277.344:413): avc: denied { bind } for pid=7683 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.974521][ T40] audit: type=1400 audit(1768379277.344:414): avc: denied { setopt } for pid=7683 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.214156][ T7703] bond1: option downdelay: invalid value (18446744073709551615) [ 89.216682][ T7703] bond1: option downdelay: allowed values 0 - 2147483647 [ 89.220715][ T7703] bond1 (unregistering): Released all slaves [ 89.320963][ T6020] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 89.386508][ T5947] Bluetooth: hci1: Malformed Event: 0x2f [ 89.449138][ T40] audit: type=1400 audit(1768379277.844:415): avc: denied { listen } for pid=7726 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.456076][ T40] audit: type=1400 audit(1768379277.854:416): avc: denied { accept } for pid=7726 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.483121][ T6020] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.487432][ T6020] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.490480][ T6020] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.494756][ T6020] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.497648][ T6020] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.503454][ T6020] usb 10-1: config 0 descriptor?? [ 89.918214][ T6020] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 90.161051][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 90.172627][ T59] usb 10-1: USB disconnect, device number 4 [ 90.331019][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 90.334113][ T9] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 90.337577][ T9] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 90.342960][ T9] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.346584][ T9] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 90.352459][ T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 90.355356][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.358303][ T9] usb 9-1: Product: syz [ 90.360460][ T9] usb 9-1: Manufacturer: syz [ 90.363264][ T9] usb 9-1: SerialNumber: syz [ 90.370324][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 90.375836][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input20 [ 90.405282][ T40] audit: type=1400 audit(1768379278.804:417): avc: denied { ioctl } for pid=7745 comm="syz.3.728" path="socket:[19023]" dev="sockfs" ino=19023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.591057][ T6020] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.600917][ T9] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 90.603575][ T9] (id 0x00) [ 90.651019][ T9] rc_core: IR keymap rc-imon-pad not found [ 90.653051][ T9] Registered IR keymap rc-empty [ 90.654627][ T9] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 90.657864][ T9] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 90.671046][ T5947] Bluetooth: hci3: command tx timeout [ 90.728645][ T7753] netlink: 84 bytes leftover after parsing attributes in process `syz.3.730'. [ 90.771209][ T6020] usb 6-1: Using ep0 maxpacket: 32 [ 90.775441][ T6020] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 90.777995][ T6020] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 90.781528][ T6020] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 90.785136][ T6020] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 90.789245][ T6020] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.792488][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 90.794008][ T6020] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 90.797526][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input21 [ 90.798592][ T6020] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 90.798605][ T6020] usb 6-1: Product: syz [ 90.798612][ T6020] usb 6-1: Manufacturer: syz [ 90.798620][ T6020] usb 6-1: SerialNumber: syz [ 90.811600][ T9] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:3> initialized [ 90.814862][ T6020] usb 6-1: config 0 descriptor?? [ 90.819256][ T6020] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 90.823892][ T6020] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 90.976314][ T7737] imon:vfd_write: invalid payload size [ 90.982352][ T6020] usb 9-1: USB disconnect, device number 3 [ 91.022656][ T53] usb 6-1: USB disconnect, device number 7 [ 91.026414][ T53] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 91.217461][ T40] audit: type=1400 audit(1768379279.614:418): avc: denied { connect } for pid=7784 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.224184][ T40] audit: type=1400 audit(1768379279.614:419): avc: denied { getopt } for pid=7784 comm="syz.3.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.255874][ T40] audit: type=1400 audit(1768379279.654:420): avc: denied { append } for pid=7786 comm="syz.3.741" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.267035][ T40] audit: type=1400 audit(1768379279.654:421): avc: denied { map } for pid=7786 comm="syz.3.741" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.279848][ T40] audit: type=1400 audit(1768379279.654:422): avc: denied { execute } for pid=7786 comm="syz.3.741" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 91.516631][ T7807] vxlan1: entered promiscuous mode [ 91.518490][ T7807] vxlan1: entered allmulticast mode [ 91.523892][ T7805] KVM: debugfs: duplicate directory 7805-4 [ 91.783732][ T7824] vcan0: tx address claim with different name [ 91.811773][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 91.818789][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 91.859212][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 92.601722][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'. [ 92.793834][ T7890] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.782'. [ 93.216785][ T7934] pim6reg1: entered promiscuous mode [ 93.218858][ T7934] pim6reg1: entered allmulticast mode [ 93.542450][ T5947] Bluetooth: hci3: command 0x0406 tx timeout [ 93.748908][ T7973] netlink: 'syz.1.822': attribute type 4 has an invalid length. [ 93.754672][ T6043] ªªªªªª speed is unknown, defaulting to 1000 [ 93.758316][ T6043] sz1: Port: 1 Link DOWN [ 93.761546][ T6043] ªªªªªª speed is unknown, defaulting to 1000 [ 93.887677][ T7981] kvm: kvm [7980]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 93.892410][ T7981] kvm: kvm [7980]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 94.340600][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 94.340615][ T40] audit: type=1400 audit(1768379282.734:428): avc: denied { set_context_mgr } for pid=8008 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 94.349337][ T8009] binder: 8008:8009 ioctl c0306201 2000000004c0 returned -22 [ 94.406666][ T74] ------------[ cut here ]------------ [ 94.408535][ T74] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 94.412965][ T74] WARNING: net/mac80211/tx.c:751 at ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0, CPU#3: kworker/u32:4/74 [ 94.416608][ T74] Modules linked in: [ 94.418020][ T74] CPU: 3 UID: 0 PID: 74 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.421346][ T74] Tainted: [L]=SOFTLOCKUP [ 94.422690][ T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.426026][ T74] Workqueue: events_unbound cfg80211_wiphy_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 94.428105][ T74] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 94.430239][ T74] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 60 06 00 00 48 8d 3d 44 c0 a3 05 49 8b 77 68 89 d9 48 89 ea 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 94 f8 ff ff e8 c0 2d ca f6 e8 ab [ 94.436240][ T74] RSP: 0018:ffffc9000162f588 EFLAGS: 00010282 [ 94.438137][ T74] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 94.440612][ T74] RDX: ffff8880352c53c4 RSI: ffff8880369e57c8 RDI: ffffffff90988e30 [ 94.443159][ T74] RBP: ffff8880352c53c4 R08: 0000000000000005 R09: 0000000000000000 [ 94.445580][ T74] R10: 0000000000000000 R11: ffff888022c454b0 R12: ffff888056308000 [ 94.447925][ T74] R13: 0000000000000000 R14: ffff88802d642a3d R15: ffffc9000162f7e8 [ 94.450374][ T74] FS: 0000000000000000(0000) GS:ffff8880d6bf4000(0000) knlGS:0000000000000000 [ 94.453162][ T74] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.455260][ T74] CR2: 00007ffe40dbfe40 CR3: 0000000026a25000 CR4: 0000000000352ef0 [ 94.457722][ T74] Call Trace: [ 94.458780][ T74] [ 94.459738][ T74] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 94.461648][ T74] ? find_held_lock+0x2b/0x80 [ 94.463188][ T74] invoke_tx_handlers_late+0x1172/0x27d0 [ 94.464954][ T74] ? invoke_tx_handlers_early+0x669/0x28a0 [ 94.466799][ T74] ieee80211_tx+0x304/0x460 [ 94.468209][ T74] ? __pfx_ieee80211_tx+0x10/0x10 [ 94.469740][ T74] ? ieee80211_skb_resize+0x22a/0x630 [ 94.471473][ T74] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 94.473157][ T74] ieee80211_xmit+0x30f/0x3e0 [ 94.474656][ T74] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 94.476498][ T74] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 94.478434][ T74] ieee80211_scan_work+0x772/0x2080 [ 94.480085][ T74] ? do_raw_spin_lock+0x12c/0x2b0 [ 94.481841][ T74] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 94.483641][ T74] cfg80211_wiphy_work+0x3fb/0x560 [ 94.485269][ T74] process_one_work+0x9ba/0x1b20 [ 94.486848][ T74] ? __pfx_process_one_work+0x10/0x10 [ 94.488545][ T74] ? assign_work+0x1a0/0x250 [ 94.490018][ T74] worker_thread+0x6c8/0xf10 [ 94.491541][ T74] ? __pfx_worker_thread+0x10/0x10 [ 94.493161][ T74] kthread+0x3c5/0x780 [ 94.494455][ T74] ? __pfx_kthread+0x10/0x10 [ 94.495951][ T74] ? rcu_is_watching+0x12/0xc0 [ 94.497455][ T74] ? __pfx_kthread+0x10/0x10 [ 94.498919][ T74] ret_from_fork+0x983/0xb10 [ 94.500373][ T74] ? __pfx_ret_from_fork+0x10/0x10 [ 94.502032][ T74] ? __switch_to+0x7af/0x10d0 [ 94.503557][ T74] ? __pfx_kthread+0x10/0x10 [ 94.505026][ T74] ret_from_fork_asm+0x1a/0x30 [ 94.506565][ T74] [ 94.507570][ T74] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.509845][ T74] CPU: 3 UID: 0 PID: 74 Comm: kworker/u32:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.513320][ T74] Tainted: [L]=SOFTLOCKUP [ 94.514669][ T74] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.518010][ T74] Workqueue: events_unbound cfg80211_wiphy_work [ 94.519971][ T74] Call Trace: [ 94.521034][ T74] [ 94.521977][ T74] dump_stack_lvl+0x3d/0x1f0 [ 94.523457][ T74] vpanic+0x640/0x6f0 [ 94.524727][ T74] ? ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0 [ 94.526592][ T74] panic+0xca/0xd0 [ 94.527782][ T74] ? __pfx_panic+0x10/0x10 [ 94.529186][ T74] ? check_panic_on_warn+0x1f/0xb0 [ 94.530791][ T74] check_panic_on_warn+0xab/0xb0 [ 94.532343][ T74] __warn+0x108/0x3c0 [ 94.533636][ T74] __report_bug+0x2a0/0x520 [ 94.535040][ T74] ? ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0 [ 94.536883][ T74] ? __pfx___report_bug+0x10/0x10 [ 94.538398][ T74] ? ieee80211_probereq_get+0x6a/0x290 [ 94.540087][ T74] ? ieee80211_build_probe_req+0x1eb/0x430 [ 94.541905][ T74] ? ieee80211_scan_state_send_probe+0x49e/0xad0 [ 94.543837][ T74] report_bug_entry+0xe1/0x290 [ 94.545336][ T74] ? ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 94.547125][ T74] handle_bug+0x18a/0x260 [ 94.548426][ T74] exc_invalid_op+0x17/0x50 [ 94.549815][ T74] asm_exc_invalid_op+0x1a/0x20 [ 94.551327][ T74] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 94.553270][ T74] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 60 06 00 00 48 8d 3d 44 c0 a3 05 49 8b 77 68 89 d9 48 89 ea 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 94 f8 ff ff e8 c0 2d ca f6 e8 ab [ 94.559019][ T74] RSP: 0018:ffffc9000162f588 EFLAGS: 00010282 [ 94.560904][ T74] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 94.563295][ T74] RDX: ffff8880352c53c4 RSI: ffff8880369e57c8 RDI: ffffffff90988e30 [ 94.565731][ T74] RBP: ffff8880352c53c4 R08: 0000000000000005 R09: 0000000000000000 [ 94.568145][ T74] R10: 0000000000000000 R11: ffff888022c454b0 R12: ffff888056308000 [ 94.570544][ T74] R13: 0000000000000000 R14: ffff88802d642a3d R15: ffffc9000162f7e8 [ 94.572900][ T74] ? ieee80211_tx_h_rate_ctrl+0x1378/0x1ad0 [ 94.574687][ T74] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 94.576540][ T74] ? find_held_lock+0x2b/0x80 [ 94.577962][ T74] invoke_tx_handlers_late+0x1172/0x27d0 [ 94.579719][ T74] ? invoke_tx_handlers_early+0x669/0x28a0 [ 94.581491][ T74] ieee80211_tx+0x304/0x460 [ 94.582928][ T74] ? __pfx_ieee80211_tx+0x10/0x10 [ 94.584542][ T74] ? ieee80211_skb_resize+0x22a/0x630 [ 94.586170][ T74] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 94.587815][ T74] ieee80211_xmit+0x30f/0x3e0 [ 94.589282][ T74] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 94.591068][ T74] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 94.592932][ T74] ieee80211_scan_work+0x772/0x2080 [ 94.594518][ T74] ? do_raw_spin_lock+0x12c/0x2b0 [ 94.596006][ T74] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 94.597760][ T74] cfg80211_wiphy_work+0x3fb/0x560 [ 94.599385][ T74] process_one_work+0x9ba/0x1b20 [ 94.600949][ T74] ? __pfx_process_one_work+0x10/0x10 [ 94.602625][ T74] ? assign_work+0x1a0/0x250 [ 94.604021][ T74] worker_thread+0x6c8/0xf10 [ 94.605447][ T74] ? __pfx_worker_thread+0x10/0x10 [ 94.607043][ T74] kthread+0x3c5/0x780 [ 94.608279][ T74] ? __pfx_kthread+0x10/0x10 [ 94.609706][ T74] ? rcu_is_watching+0x12/0xc0 [ 94.611199][ T74] ? __pfx_kthread+0x10/0x10 [ 94.612636][ T74] ret_from_fork+0x983/0xb10 [ 94.614072][ T74] ? __pfx_ret_from_fork+0x10/0x10 [ 94.615685][ T74] ? __switch_to+0x7af/0x10d0 [ 94.617169][ T74] ? __pfx_kthread+0x10/0x10 [ 94.618625][ T74] ret_from_fork_asm+0x1a/0x30 [ 94.620150][ T74] [ 94.621786][ T74] Kernel Offset: disabled [ 94.623164][ T74] Rebooting in 86400 seconds..