last executing test programs: 50.659701844s ago: executing program 0 (id=1055): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 42.238743458s ago: executing program 0 (id=1055): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 34.032392028s ago: executing program 0 (id=1055): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 24.662872337s ago: executing program 0 (id=1055): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 15.184313997s ago: executing program 0 (id=1055): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 5.994914828s ago: executing program 0 (id=1055): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006}) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r0, &(0x7f0000000280)={r0, r1, 0xfffe}) 2.558984054s ago: executing program 2 (id=2544): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.550100359s ago: executing program 3 (id=2545): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, 0x0) 2.454078981s ago: executing program 3 (id=2547): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 2.229136737s ago: executing program 2 (id=2548): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x75, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) pivot_root(0x0, 0x0) 2.160898184s ago: executing program 3 (id=2549): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x8100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x336) close_range(r0, 0xffffffffffffffff, 0x0) 2.132068005s ago: executing program 2 (id=2550): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000020"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x94) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="4034bb"], 0x0, 0x0, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x400, 0x800, 0x7, 0xa1, 0x9, 0x9, 0x0, 0x3, 0x1c, 0x8, 0xe999, 0x4}}, 0x0, 0x0, 0x0, 0x0}) 1.082719621s ago: executing program 1 (id=2557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r2, &(0x7f0000000000)=0xb00, 0x12) 1.020027975s ago: executing program 3 (id=2558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000004c0)={0x20, 0x4, 0xd5}) 967.104583ms ago: executing program 1 (id=2560): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 860.765332ms ago: executing program 4 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x59, 0x0}, 0x10) 816.363031ms ago: executing program 4 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 740.823692ms ago: executing program 4 (id=2563): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x8001, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 700.200443ms ago: executing program 1 (id=2564): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x0, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "c23f68dc24ba1e5d"}}, 0x48}}, 0x0) 660.411145ms ago: executing program 1 (id=2565): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) 597.670961ms ago: executing program 4 (id=2566): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x20000840, 0x0, 0x0) 575.02399ms ago: executing program 3 (id=2576): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) 574.498466ms ago: executing program 4 (id=2567): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 512.261816ms ago: executing program 3 (id=2568): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 367.38819ms ago: executing program 1 (id=2569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 366.102866ms ago: executing program 2 (id=2570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 99.43368ms ago: executing program 2 (id=2571): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x0) 90.663555ms ago: executing program 1 (id=2572): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x5, 0x0, 0x2, 0x0, 0x1000}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 81.963408ms ago: executing program 4 (id=2573): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r1, 0xffff}, 0x8) 0s ago: executing program 2 (id=2574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.176200][ T10] usb 2-1: config 0 descriptor?? [ 225.189056][ T10] as10x_usb: device has been detected [ 225.197367][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 225.220968][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 225.258650][ T10] as10x_usb: error during firmware upload part1 [ 225.266371][ T10] Registered device nBox DVB-T Dongle [ 225.316233][ T6441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.318004][ T974] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 225.344255][ T974] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 225.351862][ T974] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 225.359436][ T974] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 225.367829][ T974] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 225.383051][ T974] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 225.427861][ T974] usb 2-1: USB disconnect, device number 30 [ 225.447819][ T974] Unregistered device nBox DVB-T Dongle [ 225.449028][ T974] as10x_usb: device has been disconnected [ 225.538458][ T5940] usb 4-1: USB disconnect, device number 30 [ 225.621684][ T5899] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 225.632889][ T5899] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 225.642352][ T5899] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 225.655430][ T5899] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 225.667818][ T5899] usb 5-1: USB disconnect, device number 20 [ 226.049843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.311682][ T6441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.738716][T11077] vivid-004: disconnect [ 226.747187][T11076] vivid-004: reconnect [ 226.772994][ T6441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.005924][ T6441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.067034][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.080057][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.088672][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.099884][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.112134][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.120183][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.217318][T11095] netlink: 'syz.4.2001': attribute type 10 has an invalid length. [ 227.349606][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.521127][T11095] batadv0: entered promiscuous mode [ 227.537245][T11095] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.564887][T11099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.585248][T11099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.641730][T11099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.662087][T11099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.788944][T11099] bond0: (slave batadv0): Releasing backup interface [ 228.025018][ T6441] bridge_slave_1: left allmulticast mode [ 228.067949][ T6441] bridge_slave_1: left promiscuous mode [ 228.102513][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.139823][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.203060][ T6441] bridge_slave_0: left allmulticast mode [ 228.208742][ T6441] bridge_slave_0: left promiscuous mode [ 228.232700][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.449800][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 228.450217][ T916] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 228.616813][ T916] usb 2-1: Using ep0 maxpacket: 32 [ 228.636589][ T916] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 228.641744][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.645913][ T916] usb 2-1: config 0 has no interface number 0 [ 228.678318][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.681778][ T916] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.703233][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.719762][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.726751][ T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.740340][ T10] usb 5-1: SerialNumber: syz [ 228.748759][ T916] usb 2-1: Product: syz [ 228.757043][ T916] usb 2-1: Manufacturer: syz [ 228.768226][ T916] usb 2-1: SerialNumber: syz [ 228.785530][ T916] usb 2-1: config 0 descriptor?? [ 228.811665][ T916] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 228.915870][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.941607][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.958398][ T10] usb 5-1: 0:2 : does not exist [ 228.974674][ T6441] bond0 (unregistering): Released all slaves [ 229.016012][ T916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 229.022993][ T10] usb 5-1: USB disconnect, device number 21 [ 229.091117][ T916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 229.170179][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.177724][ T5841] Bluetooth: hci1: command tx timeout [ 229.306248][T11092] chnl_net:caif_netlink_parms(): no params data found [ 229.341970][ T6441] hsr_slave_0: left promiscuous mode [ 229.347669][ T6441] hsr_slave_1: left promiscuous mode [ 229.354949][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.362654][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.370838][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.378232][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.393552][ T5885] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 229.395159][ T6441] veth1_macvtap: left promiscuous mode [ 229.406711][ T6441] veth0_macvtap: left promiscuous mode [ 229.412478][ T6441] veth1_vlan: left promiscuous mode [ 229.417747][ T6441] veth0_vlan: left promiscuous mode [ 229.426392][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 229.426522][ T10] usb 2-1: USB disconnect, device number 31 [ 229.448319][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 229.465451][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 229.488596][ T10] quatech2 2-1:0.51: device disconnected [ 229.570359][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 229.583147][ T5885] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 229.596771][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.606395][ T5885] usb 4-1: Product: syz [ 229.607359][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 229.607371][ T30] audit: type=1400 audit(1752383802.571:1223): avc: denied { execute } for pid=11132 comm="syz.4.2015" name="file2" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.611485][ T5885] usb 4-1: Manufacturer: syz [ 229.623251][ T30] audit: type=1400 audit(1752383802.581:1224): avc: denied { execute_no_trans } for pid=11132 comm="syz.4.2015" path="/508/file2" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.646664][ T5885] usb 4-1: SerialNumber: syz [ 229.667738][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.723920][ T5885] usb 4-1: config 0 descriptor?? [ 229.738629][ T5885] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 229.772638][ T30] audit: type=1400 audit(1752383802.731:1225): avc: denied { allowed } for pid=11134 comm="syz.4.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 229.820994][ T30] audit: type=1400 audit(1752383802.731:1226): avc: denied { create } for pid=11134 comm="syz.4.2016" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.853258][ T30] audit: type=1400 audit(1752383802.731:1227): avc: denied { map } for pid=11134 comm="syz.4.2016" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.883586][ T30] audit: type=1400 audit(1752383802.731:1228): avc: denied { read write } for pid=11134 comm="syz.4.2016" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.944233][ T5885] gp8psk: usb in 128 operation failed. [ 229.955602][ T5885] gp8psk: usb in 137 operation failed. [ 229.961410][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.972696][ T5885] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 229.986775][ T5885] usb 4-1: media controller created [ 230.007086][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.116329][ T5885] gp8psk_fe: Frontend revision 1 attached [ 230.121106][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 230.142043][ T5885] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 230.160118][ T5885] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 230.209806][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.220039][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 230.332772][ T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 230.441589][ T5885] gp8psk: usb in 138 operation failed. [ 230.447090][ T5885] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 230.477139][ T5885] gp8psk: found Genpix USB device pID = 201 (hex) [ 230.491757][ T5885] usb 4-1: USB disconnect, device number 31 [ 230.511226][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.525476][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.546519][ T10] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 230.566728][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.585398][ T10] usb 2-1: config 0 descriptor?? [ 230.595581][ T5885] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 230.890320][T11092] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.897720][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.909922][T11092] bridge_slave_0: entered allmulticast mode [ 230.917049][T11092] bridge_slave_0: entered promiscuous mode [ 230.925658][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.933167][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.940429][T11092] bridge_slave_1: entered allmulticast mode [ 230.947631][T11092] bridge_slave_1: entered promiscuous mode [ 230.997191][T11092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.013376][T11092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.026475][ T10] bigben 0003:146B:0902.0026: unexpected rdesc, please submit for review [ 231.058330][ T10] bigben 0003:146B:0902.0026: item fetching failed at offset 3/5 [ 231.075596][T11092] team0: Port device team_slave_0 added [ 231.078710][ T10] bigben 0003:146B:0902.0026: parse failed [ 231.081520][ T30] audit: type=1400 audit(1752383804.041:1229): avc: denied { create } for pid=11150 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.082499][ T30] audit: type=1400 audit(1752383804.051:1230): avc: denied { write } for pid=11150 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.107979][ T10] bigben 0003:146B:0902.0026: probe with driver bigben failed with error -22 [ 231.142281][T11151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2021'. [ 231.160802][ T30] audit: type=1400 audit(1752383804.051:1231): avc: denied { read } for pid=11150 comm="syz.4.2021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.181118][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.190496][T11092] team0: Port device team_slave_1 added [ 231.215788][ T30] audit: type=1400 audit(1752383804.111:1232): avc: denied { ioctl } for pid=11152 comm="syz.2.2022" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37951 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.249941][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.257733][ T5841] Bluetooth: hci1: command tx timeout [ 231.296888][ T916] usb 2-1: USB disconnect, device number 32 [ 231.314766][T11159] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 231.388098][T11092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.409571][T11092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.435494][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.450718][T11092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.464367][T11092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.472794][T11092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.498660][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.509246][T11092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.679309][T11092] hsr_slave_0: entered promiscuous mode [ 231.708343][T11092] hsr_slave_1: entered promiscuous mode [ 231.720328][T11092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.731767][T11092] Cannot create hsr debugfs directory [ 232.027125][T11181] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2034'. [ 232.278343][T11190] input: syz0 as /devices/virtual/input/input29 [ 232.289823][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.334184][T11194] syz_tun: entered promiscuous mode [ 232.341043][T11194] batadv_slave_0: entered promiscuous mode [ 232.347478][T11194] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 232.358777][T11194] Cannot create hsr debugfs directory [ 232.371040][T11194] hsr1: entered allmulticast mode [ 232.376484][T11194] syz_tun: entered allmulticast mode [ 232.383164][T11194] batadv_slave_0: entered allmulticast mode [ 232.425731][T11200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2043'. [ 232.520876][ T916] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 232.671561][T11092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.686079][T11092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.723771][ T916] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 232.737723][ T916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.753390][ T916] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 232.768867][ T916] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 232.789936][ T916] usb 2-1: Manufacturer: syz [ 232.803561][ T916] usb 2-1: config 0 descriptor?? [ 232.827182][T11092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.857966][T11092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.880082][ T916] rc_core: IR keymap rc-hauppauge not found [ 232.885998][ T916] Registered IR keymap rc-empty [ 232.898348][ T916] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 232.915500][ T916] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 233.043458][T11092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.060593][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 233.067721][T11092] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.071467][ T5941] usb 2-1: USB disconnect, device number 33 [ 233.083889][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.091017][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.114107][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.121252][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.130071][ T5940] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.292221][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 233.299462][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.319605][ T5940] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.329803][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 233.329952][ T5841] Bluetooth: hci1: command tx timeout [ 233.346814][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 233.355423][ T5940] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 233.366764][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.380537][ T5940] usb 5-1: config 0 descriptor?? [ 233.405319][T11092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.438695][T11092] veth0_vlan: entered promiscuous mode [ 233.449504][T11092] veth1_vlan: entered promiscuous mode [ 233.473969][T11092] veth0_macvtap: entered promiscuous mode [ 233.483372][T11092] veth1_macvtap: entered promiscuous mode [ 233.504791][T11092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.517534][T11092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.528123][T11092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.537537][T11092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.546398][T11092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.555549][T11092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.636330][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.649441][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.678223][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.686335][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.821883][ T5940] apple 0003:05AC:0247.0027: unexpected long global item [ 233.829330][ T5940] apple 0003:05AC:0247.0027: parse failed [ 233.837107][ T5940] apple 0003:05AC:0247.0027: probe with driver apple failed with error -22 [ 233.869893][ T6007] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 234.019782][ T6007] usb 2-1: Using ep0 maxpacket: 16 [ 234.026435][ T6007] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.036454][ T6007] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 234.044286][ T5940] usb 5-1: USB disconnect, device number 22 [ 234.045542][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.063634][ T6007] usb 2-1: config 0 descriptor?? [ 234.305914][ T10] usb 2-1: USB disconnect, device number 34 [ 234.369972][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.480001][ T5941] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 234.516745][T11268] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.654819][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 234.665162][ T5941] usb 4-1: config 0 has no interfaces? [ 234.675604][ T5941] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 234.689998][ T5941] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 234.698187][ T5941] usb 4-1: Product: syz [ 234.710137][ T5941] usb 4-1: Manufacturer: syz [ 234.714765][ T5941] usb 4-1: SerialNumber: syz [ 234.752118][ T5941] usb 4-1: config 0 descriptor?? [ 234.861973][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 234.861988][ T30] audit: type=1400 audit(1752383807.811:1401): avc: denied { setattr } for pid=11278 comm="syz.4.2072" name="secretmem" dev="secretmem" ino=38561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 234.975312][ T30] audit: type=1400 audit(1752383807.941:1402): avc: denied { create } for pid=11284 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.994716][ T6007] usb 4-1: USB disconnect, device number 32 [ 234.996001][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.008096][ T30] audit: type=1400 audit(1752383807.941:1403): avc: denied { write } for pid=11284 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.028687][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.108258][ T30] audit: type=1400 audit(1752383808.071:1404): avc: denied { create } for pid=11286 comm="syz.4.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.134140][ T30] audit: type=1400 audit(1752383808.081:1405): avc: denied { connect } for pid=11286 comm="syz.4.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 235.173969][T11290] input: syz1 as /devices/virtual/input/input31 [ 235.299248][ T30] audit: type=1400 audit(1752383808.261:1406): avc: denied { write } for pid=11296 comm="syz.2.2079" name="001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 235.409791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.486204][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 235.614929][ T6409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.649954][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 235.663946][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 235.684097][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.720282][ T10] usb 5-1: Product: syz [ 235.724480][ T10] usb 5-1: Manufacturer: syz [ 235.729072][ T10] usb 5-1: SerialNumber: syz [ 235.773698][ T10] usb 5-1: config 0 descriptor?? [ 235.784902][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 236.449811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.793640][ T10] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 236.801226][ T10] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 236.811137][ T10] usb 5-1: USB disconnect, device number 23 [ 237.009889][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 237.072620][ T30] audit: type=1400 audit(1752383810.041:1407): avc: denied { read } for pid=11316 comm="syz.3.2087" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.155245][ T30] audit: type=1400 audit(1752383810.041:1408): avc: denied { open } for pid=11316 comm="syz.3.2087" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 237.183630][ T6409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.222207][ T30] audit: type=1400 audit(1752383810.181:1409): avc: denied { create } for pid=11321 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 237.278311][ T30] audit: type=1400 audit(1752383810.181:1410): avc: denied { read } for pid=11321 comm="syz.1.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 237.299967][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'. [ 237.357991][ T6409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.415005][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.427253][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.444175][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.460892][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.469419][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.489794][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.505958][ T6409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.753541][ T6409] bridge_slave_1: left allmulticast mode [ 237.767161][ T6409] bridge_slave_1: left promiscuous mode [ 237.783894][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.803862][ T6409] bridge_slave_0: left allmulticast mode [ 237.813523][ T6409] bridge_slave_0: left promiscuous mode [ 237.826714][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.939834][ T916] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 237.964755][T11347] netlink: 'syz.2.2099': attribute type 10 has an invalid length. [ 238.106449][ T916] usb 5-1: Using ep0 maxpacket: 32 [ 238.123384][ T916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 238.145112][ T916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 238.174582][T11356] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2101'. [ 238.179114][ T916] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.202759][ T916] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.218764][ T916] usb 5-1: Product: syz [ 238.226407][ T916] usb 5-1: Manufacturer: syz [ 238.238457][ T916] usb 5-1: SerialNumber: syz [ 238.250825][ T916] usb 5-1: config 0 descriptor?? [ 238.257818][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.272299][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.281931][ T6409] bond0 (unregistering): Released all slaves [ 238.308537][T11350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.316351][T11350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.326279][T11350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.333846][T11350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.424124][T11327] chnl_net:caif_netlink_parms(): no params data found [ 238.439919][ T6007] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 238.529796][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 238.553538][ T5899] usb 5-1: USB disconnect, device number 24 [ 238.612110][ T6007] usb 4-1: Using ep0 maxpacket: 32 [ 238.630213][ T6007] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 238.638362][ T6007] usb 4-1: config 0 has no interface number 0 [ 238.644717][ T6007] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.655746][ T6007] usb 4-1: config 0 interface 85 has no altsetting 0 [ 238.664913][ T6007] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 238.674031][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.682124][ T6007] usb 4-1: Product: syz [ 238.686302][ T6007] usb 4-1: Manufacturer: syz [ 238.686331][ T6409] hsr_slave_0: left promiscuous mode [ 238.691383][ T6007] usb 4-1: SerialNumber: syz [ 238.706686][ T6007] usb 4-1: config 0 descriptor?? [ 238.713370][ T6409] hsr_slave_1: left promiscuous mode [ 238.726388][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.737358][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.756426][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.776440][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.816081][ T6409] veth1_macvtap: left promiscuous mode [ 238.825125][ T6409] veth0_macvtap: left promiscuous mode [ 238.831891][ T6409] veth1_vlan: left promiscuous mode [ 238.840927][ T6409] veth0_vlan: left promiscuous mode [ 239.333222][ T974] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 239.393408][T11396] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 239.400059][T11396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 239.412749][T11396] vhci_hcd vhci_hcd.0: Device attached [ 239.457385][ T6409] team0 (unregistering): Port device team_slave_1 removed [ 239.484649][ T6007] appletouch 4-1:0.85: Geyser mode initialized. [ 239.499248][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.510248][ T6007] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input32 [ 239.524721][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 239.540532][ T6409] team0 (unregistering): Port device team_slave_0 removed [ 239.540996][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 239.558252][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.571205][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.571286][ T5844] Bluetooth: hci1: command tx timeout [ 239.586920][ T974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.596120][ T974] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.604151][ T974] usb 3-1: Manufacturer: syz [ 239.611805][ T974] usb 3-1: config 0 descriptor?? [ 239.679888][ T5885] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 239.687686][ T10] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 239.852811][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 239.864488][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.878593][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.889094][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 239.902579][ T5885] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 239.911663][ T974] rc_core: IR keymap rc-hauppauge not found [ 239.917565][ T974] Registered IR keymap rc-empty [ 239.922477][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.933533][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 239.944251][ T5885] usb 5-1: config 0 descriptor?? [ 239.963115][T11403] syzkaller1: entered promiscuous mode [ 239.968698][T11403] syzkaller1: entered allmulticast mode [ 239.970069][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 239.979196][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.988611][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.997109][T11327] bridge_slave_0: entered allmulticast mode [ 240.004968][T11327] bridge_slave_0: entered promiscuous mode [ 240.021892][ T974] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 240.035449][ T974] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 240.053064][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.060456][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.067650][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.080372][T11327] bridge_slave_1: entered allmulticast mode [ 240.089993][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.097954][T11327] bridge_slave_1: entered promiscuous mode [ 240.119889][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.158092][T11401] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 240.168102][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.177465][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 240.185283][ T6441] vhci_hcd: stop threads [ 240.187162][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.197534][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 240.197546][ T30] audit: type=1400 audit(1752383813.161:1418): avc: denied { write } for pid=11410 comm="syz.1.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.198654][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 240.207972][ T6441] vhci_hcd: release socket [ 240.227726][ T5885] usb 5-1: USB disconnect, device number 25 [ 240.242845][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.249816][ T30] audit: type=1400 audit(1752383813.161:1419): avc: denied { ioctl } for pid=11410 comm="syz.1.2121" path="socket:[39944]" dev="sockfs" ino=39944 ioctlcmd=0x8b19 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.252809][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.311408][ T6441] vhci_hcd: disconnect device [ 240.312445][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.355691][T11327] team0: Port device team_slave_0 added [ 240.361453][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.380869][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.400904][T11327] team0: Port device team_slave_1 added [ 240.429553][ T30] audit: type=1400 audit(1752383813.391:1420): avc: denied { ioctl } for pid=11414 comm="syz.1.2123" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 240.457830][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.466910][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.474171][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.501266][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.522072][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.529088][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.555227][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.564804][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.579931][ T974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 240.601105][ T974] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 240.610262][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.619387][ T974] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 240.643827][ T974] usb 3-1: USB disconnect, device number 21 [ 240.648727][ T6409] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.662559][T11421] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.663968][T11327] hsr_slave_0: entered promiscuous mode [ 240.680396][T11327] hsr_slave_1: entered promiscuous mode [ 240.686318][T11327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.694066][T11327] Cannot create hsr debugfs directory [ 240.929650][T11428] loop5: detected capacity change from 0 to 7855 [ 240.973886][T11428] loop5: detected capacity change from 7855 to 11207 [ 241.100549][T11327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.121729][T11327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.152553][T11327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.169463][T11327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.238640][ T5941] usb 4-1: USB disconnect, device number 33 [ 241.264093][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.287739][ T5941] appletouch 4-1:0.85: input: appletouch disconnected [ 241.288354][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.307651][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.314771][ T6441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.336857][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.343989][ T6441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.374173][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 241.397762][T11443] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2133'. [ 241.410082][ T5899] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 241.427653][T11327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.438614][T11327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.563637][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.597046][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.616115][ T5899] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 241.649793][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.649849][ T5841] Bluetooth: hci1: command tx timeout [ 241.669995][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.702770][ T5899] usb 3-1: config 0 descriptor?? [ 241.788218][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.834116][T11327] veth0_vlan: entered promiscuous mode [ 241.852640][T11327] veth1_vlan: entered promiscuous mode [ 241.882555][T11327] veth0_macvtap: entered promiscuous mode [ 241.892433][T11327] veth1_macvtap: entered promiscuous mode [ 241.920572][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.934151][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.944772][T11327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.953713][T11327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.963645][T11327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.973945][ T5885] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 241.979783][T11327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.035520][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.046128][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.069087][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.077617][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.089793][ T6007] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 242.122431][ T5899] bigben 0003:146B:0902.0028: unexpected rdesc, please submit for review [ 242.131942][ T5899] bigben 0003:146B:0902.0028: item fetching failed at offset 3/5 [ 242.140451][ T5899] bigben 0003:146B:0902.0028: parse failed [ 242.145524][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.146494][ T5899] bigben 0003:146B:0902.0028: probe with driver bigben failed with error -22 [ 242.160200][ T5885] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.179036][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.188962][ T5885] usb 4-1: config 0 descriptor?? [ 242.261292][ T6007] usb 5-1: Using ep0 maxpacket: 8 [ 242.267685][ T6007] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.277512][ T6007] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.287943][ T6007] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.299028][ T6007] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.312040][ T6007] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.321115][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.349984][ T5899] usb 3-1: USB disconnect, device number 22 [ 242.536811][ T6007] usb 5-1: GET_CAPABILITIES returned 0 [ 242.542442][ T6007] usbtmc 5-1:16.0: can't read capabilities [ 242.606752][ T5885] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 242.617732][ T5885] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0029/input/input34 [ 242.688867][ T5885] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 242.701029][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.710095][ T5844] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 242.710106][ T5841] Bluetooth: hci5: command 0xfc11 tx timeout [ 242.755999][ T5899] usb 5-1: USB disconnect, device number 26 [ 242.824274][T11465] ref_ctr_offset mismatch. inode: 0x93e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa04 [ 243.009165][ T30] audit: type=1400 audit(1752383815.971:1421): avc: denied { open } for pid=11473 comm="syz.2.2146" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 243.045530][ T30] audit: type=1400 audit(1752383816.011:1422): avc: denied { ioctl } for pid=11473 comm="syz.2.2146" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 243.075453][ T30] audit: type=1400 audit(1752383816.011:1423): avc: denied { setopt } for pid=11475 comm="syz.1.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.075498][ T30] audit: type=1400 audit(1752383816.011:1424): avc: denied { name_connect } for pid=11475 comm="syz.1.2145" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 243.271904][ T30] audit: type=1400 audit(1752383816.241:1425): avc: denied { watch watch_reads } for pid=11485 comm="syz.1.2151" path="/466" dev="tmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 243.294958][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.324937][T11487] input: syz1 as /devices/virtual/input/input35 [ 243.382341][ T30] audit: type=1400 audit(1752383816.351:1426): avc: denied { create } for pid=11490 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 243.459623][ T30] audit: type=1400 audit(1752383816.421:1427): avc: denied { mounton } for pid=11494 comm="syz.2.2155" path="/512/bus" dev="tmpfs" ino=2619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.482259][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.497950][ T6007] usb 4-1: USB disconnect, device number 34 [ 243.517527][T11497] syzkaller1: entered promiscuous mode [ 243.523324][T11497] syzkaller1: entered allmulticast mode [ 243.729825][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.862440][T11517] netlink: 'syz.4.2165': attribute type 12 has an invalid length. [ 244.006939][ T6417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.779925][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.849934][ T10] vhci_hcd: vhci_device speed not set [ 245.264581][ T6417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.312245][ T6417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.382019][ T6417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.447029][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 245.447045][ T30] audit: type=1400 audit(1752383818.411:1429): avc: denied { map } for pid=11527 comm="syz.3.2170" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.645484][ T6417] bridge_slave_1: left allmulticast mode [ 245.651401][ T6417] bridge_slave_1: left promiscuous mode [ 245.657995][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.674260][ T6417] bridge_slave_0: left allmulticast mode [ 245.682979][ T6417] bridge_slave_0: left promiscuous mode [ 245.688704][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.809791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.887598][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.896823][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.914444][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.924539][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.934318][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.148916][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.159755][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.171509][ T6417] bond0 (unregistering): Released all slaves [ 246.210675][ T5941] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 246.389929][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 246.409675][ T5941] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 246.439821][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.447938][ T5941] usb 2-1: Product: syz [ 246.457543][ T5941] usb 2-1: Manufacturer: syz [ 246.462693][ T5941] usb 2-1: SerialNumber: syz [ 246.471000][ T5941] usb 2-1: config 0 descriptor?? [ 246.482942][ T5941] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 246.495195][T11566] loop4: detected capacity change from 0 to 7 [ 246.500430][ T5941] usb 2-1: Detected FT232H [ 246.516023][T11566] Dev loop4: unable to read RDB block 7 [ 246.525301][T11566] loop4: unable to read partition table [ 246.531541][T11566] loop4: partition table beyond EOD, truncated [ 246.537785][T11566] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 246.639738][ T6417] hsr_slave_0: left promiscuous mode [ 246.645720][ T6417] hsr_slave_1: left promiscuous mode [ 246.659129][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.669658][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.678039][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.685616][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.709548][ T5941] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 246.739045][ T6417] veth1_macvtap: left promiscuous mode [ 246.761197][ T6417] veth0_macvtap: left promiscuous mode [ 246.776965][ T6417] veth1_vlan: left promiscuous mode [ 246.792713][ T6417] veth0_vlan: left promiscuous mode [ 246.819945][ T5940] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 246.849881][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.971478][ T5940] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 246.979656][ T5940] usb 4-1: config 0 has no interface number 0 [ 247.000835][ T5940] usb 4-1: config 0 interface 41 has no altsetting 0 [ 247.025337][ T5940] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 247.035577][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.043629][ T5940] usb 4-1: Product: syz [ 247.047831][ T5940] usb 4-1: Manufacturer: syz [ 247.052936][ T5940] usb 4-1: SerialNumber: syz [ 247.061809][ T5940] usb 4-1: config 0 descriptor?? [ 247.136112][ T5941] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 247.187461][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 247.222894][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 247.356318][ T5941] usb 2-1: USB disconnect, device number 35 [ 247.377701][ T5941] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 247.387909][ T5941] ftdi_sio 2-1:0.0: device disconnected [ 247.541516][T11575] sp0: Synchronizing with TNC [ 247.603917][T11544] chnl_net:caif_netlink_parms(): no params data found [ 247.646082][ T30] audit: type=1400 audit(1752383820.611:1430): avc: denied { mount } for pid=11579 comm="syz.4.2187" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 247.671811][ T30] audit: type=1400 audit(1752383820.641:1431): avc: denied { read } for pid=11579 comm="syz.4.2187" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 247.694634][ T30] audit: type=1400 audit(1752383820.641:1432): avc: denied { open } for pid=11579 comm="syz.4.2187" path="/551/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 247.718014][ T30] audit: type=1400 audit(1752383820.661:1433): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 247.833816][T11544] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.842686][T11544] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.859800][ T30] audit: type=1400 audit(1752383820.821:1434): avc: denied { shutdown } for pid=11588 comm="syz.4.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.882641][T11544] bridge_slave_0: entered allmulticast mode [ 247.889783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.907415][T11544] bridge_slave_0: entered promiscuous mode [ 247.924393][T11544] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.931851][ T30] audit: type=1400 audit(1752383820.821:1435): avc: denied { read } for pid=11588 comm="syz.4.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.957458][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.971024][ T5844] Bluetooth: hci1: command tx timeout [ 247.973377][T11544] bridge_slave_1: entered allmulticast mode [ 247.999530][T11544] bridge_slave_1: entered promiscuous mode [ 248.091157][T11544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.093491][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 248.104643][T11544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.118862][ T5940] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 248.131358][ T5940] usb 4-1: USB disconnect, device number 35 [ 248.217026][T11544] team0: Port device team_slave_0 added [ 248.248096][T11544] team0: Port device team_slave_1 added [ 248.274961][ T30] audit: type=1400 audit(1752383821.241:1436): avc: denied { connect } for pid=11605 comm="syz.1.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.294548][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.333883][ T30] audit: type=1400 audit(1752383821.271:1437): avc: denied { read } for pid=11605 comm="syz.1.2198" path="socket:[40534]" dev="sockfs" ino=40534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.353513][T11610] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2200'. [ 248.383678][T11544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.393798][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.422047][T11544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.453962][T11544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.460977][T11544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.487152][T11544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.612735][T11544] hsr_slave_0: entered promiscuous mode [ 248.618879][T11544] hsr_slave_1: entered promiscuous mode [ 248.660162][T11544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.677955][T11544] Cannot create hsr debugfs directory [ 248.738395][ T30] audit: type=1400 audit(1752383821.701:1438): avc: denied { read write } for pid=11617 comm="syz.4.2204" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 248.762775][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.929800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.221557][ T5940] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 249.380043][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 249.409389][ T5940] usb 2-1: config 1 interface 0 has no altsetting 0 [ 249.418999][ T5940] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 249.458122][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.494862][T11544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.507753][T11544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.518252][T11544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.527931][T11544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.567035][ T5940] usb 2-1: Product: syz [ 249.615346][T11544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.631279][T11544] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.642569][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.649638][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.676772][ T5940] usb 2-1: Manufacturer: syz [ 249.695624][ T5940] usb 2-1: SerialNumber: syz [ 249.713527][ T6416] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.720688][ T6416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.969871][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.994771][T11544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.038069][T11544] veth0_vlan: entered promiscuous mode [ 250.050559][ T5844] Bluetooth: hci1: command tx timeout [ 250.056136][T11544] veth1_vlan: entered promiscuous mode [ 250.094642][T11544] veth0_macvtap: entered promiscuous mode [ 250.101135][ T974] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 250.117216][ T5940] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input36 [ 250.135100][T11544] veth1_macvtap: entered promiscuous mode [ 250.154433][T11544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.176583][T11544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.188393][T11544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.199641][T11544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.209645][T11544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.222091][T11544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.281511][ T974] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 250.303497][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.304542][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 250.323663][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.335209][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 250.368908][ T6445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.374251][ T974] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 250.387668][ T6445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.402085][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.418172][ T974] usb 3-1: Product: syz [ 250.430617][ T974] usb 3-1: Manufacturer: syz [ 250.435242][ T974] usb 3-1: SerialNumber: syz [ 250.441781][ T974] usb 3-1: config 0 descriptor?? [ 250.449581][ T974] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 250.639793][ T5940] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.669399][ T974] usb 3-1: USB disconnect, device number 23 [ 250.830018][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 250.837091][ T5940] usb 5-1: config 0 has no interfaces? [ 250.844283][ T5940] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 250.856611][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.864769][ T5940] usb 5-1: Product: syz [ 250.868907][ T5940] usb 5-1: Manufacturer: syz [ 250.873541][ T5940] usb 5-1: SerialNumber: syz [ 250.879981][ T5940] usb 5-1: config 0 descriptor?? [ 251.009915][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.088670][ T974] usb 5-1: USB disconnect, device number 27 [ 251.234132][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 251.234147][ T30] audit: type=1400 audit(1752383824.201:1581): avc: denied { read write } for pid=11692 comm="syz.2.2232" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 251.269303][T11693] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 251.269303][T11693] program syz.2.2232 not setting count and/or reply_len properly [ 251.287880][ T30] audit: type=1400 audit(1752383824.201:1582): avc: denied { open } for pid=11692 comm="syz.2.2232" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 251.363060][ T30] audit: type=1400 audit(1752383824.331:1583): avc: denied { setopt } for pid=11694 comm="syz.3.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.390643][ T30] audit: type=1400 audit(1752383824.351:1584): avc: denied { append } for pid=11696 comm="syz.2.2234" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 251.415841][ T30] audit: type=1400 audit(1752383824.351:1585): avc: denied { open } for pid=11696 comm="syz.2.2234" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 251.449800][ T30] audit: type=1400 audit(1752383824.381:1586): avc: denied { create } for pid=11698 comm="syz.3.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.506480][ T30] audit: type=1400 audit(1752383824.471:1587): avc: denied { name_bind } for pid=11704 comm="syz.3.2237" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 251.527698][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.684365][ T974] kernel write not supported for file /sg0 (pid: 974 comm: kworker/0:2) [ 251.904198][ T30] audit: type=1400 audit(1752383824.871:1588): avc: denied { load_policy } for pid=11722 comm="syz.3.2244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 251.924634][T11723] SELinux: failed to load policy [ 251.986126][ T6007] usb 2-1: USB disconnect, device number 36 [ 252.049780][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.080303][T11734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.243997][ T6409] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.089801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.423367][ T6409] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.501043][ T6409] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.574888][ T6409] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.651665][ T6409] bridge_slave_1: left allmulticast mode [ 253.657304][ T6409] bridge_slave_1: left promiscuous mode [ 253.663297][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.673281][ T6409] bridge_slave_0: left allmulticast mode [ 253.678904][ T6409] bridge_slave_0: left promiscuous mode [ 253.684850][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.869510][ T30] audit: type=1400 audit(1752383826.831:1589): avc: denied { connect } for pid=11745 comm="syz.3.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.909874][ T30] audit: type=1400 audit(1752384082.843:1590): avc: denied { shutdown } for pid=11745 comm="syz.3.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.929694][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.124770][ T6409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.133447][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.170225][ T6409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.191395][ T6409] bond0 (unregistering): Released all slaves [ 254.270727][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 254.283297][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 254.292959][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 254.305694][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 254.313656][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.570307][T11779] input: syz0 as /devices/virtual/input/input38 [ 254.669769][ T5899] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 254.720175][ T6409] hsr_slave_0: left promiscuous mode [ 254.726315][ T6409] hsr_slave_1: left promiscuous mode [ 254.733870][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.741966][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.761968][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.769521][ T6409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.808843][ T6409] veth1_macvtap: left promiscuous mode [ 254.818793][ T6409] veth0_macvtap: left promiscuous mode [ 254.824896][ T6409] veth1_vlan: left promiscuous mode [ 254.830714][ T6409] veth0_vlan: left promiscuous mode [ 254.840384][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 254.865292][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 254.902823][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 254.924469][ T5899] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 254.933765][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.943897][ T5899] usb 4-1: Product: syz [ 254.948090][ T5899] usb 4-1: Manufacturer: syz [ 254.990702][ T5899] usb 4-1: SerialNumber: syz [ 255.014328][ T5899] usb 4-1: config 0 descriptor?? [ 255.035179][ T5899] hub 4-1:0.0: bad descriptor, ignoring hub [ 255.044236][ T5899] hub 4-1:0.0: probe with driver hub failed with error -5 [ 255.054402][ T5899] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input39 [ 255.169811][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.411687][ T5940] usb 4-1: USB disconnect, device number 36 [ 255.417986][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.723350][ T6409] team0 (unregistering): Port device team_slave_1 removed [ 255.768639][ T6409] team0 (unregistering): Port device team_slave_0 removed [ 255.934119][T11820] input: syz1 as /devices/virtual/input/input40 [ 256.209783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 256.370510][ T5841] Bluetooth: hci1: command tx timeout [ 256.709831][ T6007] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 256.811065][T11761] chnl_net:caif_netlink_parms(): no params data found [ 256.899618][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.932848][ T6007] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 256.955506][T11838] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 256.977951][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.020081][ T6007] usb 2-1: config 0 descriptor?? [ 257.059395][T11761] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.070151][T11761] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.080707][T11761] bridge_slave_0: entered allmulticast mode [ 257.088286][T11761] bridge_slave_0: entered promiscuous mode [ 257.140616][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.158264][T11761] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.180554][T11761] bridge_slave_1: entered allmulticast mode [ 257.201146][T11761] bridge_slave_1: entered promiscuous mode [ 257.249801][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 257.398660][T11761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.416339][T11761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.501156][ T6007] lenovo 0003:17EF:6047.002A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 257.537934][T11761] team0: Port device team_slave_0 added [ 257.539892][ T5885] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 257.555011][T11761] team0: Port device team_slave_1 added [ 257.603537][T11761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.619737][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.645631][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.653975][T11761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.666250][T11761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.673210][T11761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.699073][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.719932][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 257.730702][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 257.739362][ T5885] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 257.749764][T11761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.754845][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.795777][ T5885] usb 4-1: Product: syz [ 257.803117][ T5885] usb 4-1: Manufacturer: syz [ 257.807746][ T5885] usb 4-1: SerialNumber: syz [ 257.815908][ T5885] usb 4-1: config 0 descriptor?? [ 257.852948][T11856] veth1_to_bond: entered allmulticast mode [ 257.865222][T11859] veth1_to_bond: entered promiscuous mode [ 257.888299][T11855] veth1_to_bond: left promiscuous mode [ 257.918272][T11855] veth1_to_bond: left allmulticast mode [ 257.928522][T11761] hsr_slave_0: entered promiscuous mode [ 257.940391][T11761] hsr_slave_1: entered promiscuous mode [ 257.946358][T11761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.967816][T11761] Cannot create hsr debugfs directory [ 258.089486][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 258.112177][ T6007] lenovo 0003:17EF:6047.002A: Fn-lock setting failed: -71 [ 258.124071][T11863] chnl_net:caif_netlink_parms(): no params data found [ 258.125072][ T6007] lenovo 0003:17EF:6047.002A: Sensitivity setting failed: -71 [ 258.171915][ T6007] usb 2-1: USB disconnect, device number 37 [ 258.230800][ T5885] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 258.289797][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.451903][ T5841] Bluetooth: hci1: command tx timeout [ 258.463782][T11871] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2308'. [ 258.522257][T11761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.533132][T11761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.543826][T11761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.553408][T11761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.668745][T11761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.712588][T11761] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.744283][ T6416] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.751424][ T6416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.812693][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.819854][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.834598][ T5885] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 258.845790][ T5885] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 258.900083][ T5885] usb 4-1: USB disconnect, device number 37 [ 258.985860][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 258.985875][ T30] audit: type=1400 audit(1752384087.953:1596): avc: denied { ioctl } for pid=11888 comm="syz.2.2315" path="socket:[43682]" dev="sockfs" ino=43682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 259.017915][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.163909][T11761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.206741][T11761] veth0_vlan: entered promiscuous mode [ 259.218342][T11761] veth1_vlan: entered promiscuous mode [ 259.230003][ T5940] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 259.241774][T11761] veth0_macvtap: entered promiscuous mode [ 259.257558][T11761] veth1_macvtap: entered promiscuous mode [ 259.292561][T11761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.304630][T11761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.324049][T11761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.332914][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.344480][T11761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.376240][T11761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.385978][T11761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.400674][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 259.413442][ T5940] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 259.418020][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'. [ 259.430994][ T5940] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 259.431018][ T5940] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 259.431037][ T5940] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 259.431055][ T5940] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 259.471079][ T916] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 259.485661][ T5940] usb 2-1: config 0 has no interface number 0 [ 259.493192][ T5940] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 259.505430][ T5940] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 259.529208][ T30] audit: type=1400 audit(1752384088.483:1597): avc: denied { listen } for pid=11908 comm="syz.2.2320" lport=37800 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.556785][ T5940] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.567014][ T5940] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 259.582332][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.591909][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.599269][ T30] audit: type=1400 audit(1752384088.493:1598): avc: denied { accept } for pid=11908 comm="syz.2.2320" lport=37800 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.624191][ T5940] usb 2-1: config 0 interface 125 has no altsetting 0 [ 259.636340][ T5940] usb 2-1: config 0 interface 125 has no altsetting 2 [ 259.643217][ T916] usb 5-1: Using ep0 maxpacket: 8 [ 259.653090][ T916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 259.665246][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.668370][ T916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 259.683159][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.687499][ T5940] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 259.706131][ T30] audit: type=1400 audit(1752384088.583:1599): avc: denied { append } for pid=11910 comm="syz.3.2321" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 259.729071][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.739440][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.747586][ T916] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 259.759195][ T5940] usb 2-1: Product: syz [ 259.763508][ T5940] usb 2-1: Manufacturer: syz [ 259.768109][ T5940] usb 2-1: SerialNumber: syz [ 259.775318][ T916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.783419][ T30] audit: type=1400 audit(1752384088.703:1600): avc: denied { sqpoll } for pid=11914 comm="syz.3.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 259.810399][ T916] usb 5-1: config 0 descriptor?? [ 259.822729][ T5940] usb 2-1: config 0 descriptor?? [ 259.832901][ T5940] usb 2-1: selecting invalid altsetting 2 [ 259.839738][ T30] audit: type=1400 audit(1752384088.743:1601): avc: denied { read } for pid=11914 comm="syz.3.2323" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 259.863093][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.871023][ T30] audit: type=1400 audit(1752384088.743:1602): avc: denied { map } for pid=11914 comm="syz.3.2323" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 259.894745][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.912600][ T30] audit: type=1400 audit(1752384088.743:1603): avc: denied { execute } for pid=11914 comm="syz.3.2323" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 260.231490][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.240257][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.271523][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.278796][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.292897][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.305302][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.313791][ T916] greenasia 0003:0E8F:0012.002B: unknown main item tag 0x0 [ 260.343159][ T916] greenasia 0003:0E8F:0012.002B: hidraw0: USB HID vff.fa Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 260.360125][ T916] greenasia 0003:0E8F:0012.002B: no inputs found [ 260.369785][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.404807][ T30] audit: type=1400 audit(1752384089.373:1604): avc: denied { write } for pid=11935 comm="syz.3.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.505520][ T974] usb 5-1: USB disconnect, device number 28 [ 260.515825][T11941] syzkaller1: entered promiscuous mode [ 260.525475][T11941] syzkaller1: entered allmulticast mode [ 260.723170][T11944] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.904317][ T916] usb 2-1: USB disconnect, device number 38 [ 260.955450][T11948] syzkaller1: entered promiscuous mode [ 260.961174][T11948] syzkaller1: entered allmulticast mode [ 261.141608][ T30] audit: type=1400 audit(1752384090.103:1606): avc: denied { write } for pid=11958 comm="syz.3.2342" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 261.164824][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.375814][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2351'. [ 261.410003][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.446438][T11981] vxcan1: tx drop: invalid sa for name 0x0000001000000000 [ 261.564029][ T6416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.740108][ T5940] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 261.899833][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 261.906214][ T5940] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 261.917814][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.930578][ T5940] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.939618][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.947884][ T5940] usb 2-1: Product: syz [ 261.952134][ T5940] usb 2-1: Manufacturer: syz [ 261.956712][ T5940] usb 2-1: SerialNumber: syz [ 261.962987][ T5940] usb 2-1: config 0 descriptor?? [ 261.969464][ T5940] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.979080][ T5940] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 262.449982][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 262.576231][ T5940] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 262.582796][ T5940] em28xx 2-1:0.0: Config register raw data: 0x56 [ 262.783668][ T5940] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 262.790743][ T5940] em28xx 2-1:0.0: No AC97 audio processor [ 262.798976][ T5940] usb 2-1: USB disconnect, device number 39 [ 262.805480][ T5940] em28xx 2-1:0.0: Disconnecting em28xx [ 262.811681][ T5940] em28xx 2-1:0.0: Freeing device [ 263.032624][ T6416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.107375][ T6416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.194044][ T6416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.347308][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 263.489847][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.501759][ T6416] bridge_slave_1: left allmulticast mode [ 263.507677][ T6416] bridge_slave_1: left promiscuous mode [ 263.513800][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.547538][ T6416] bridge_slave_0: left allmulticast mode [ 263.561810][ T6416] bridge_slave_0: left promiscuous mode [ 263.567563][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.612763][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.624741][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.632869][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.640863][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.649103][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.052958][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.073455][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.097218][ T6416] bond0 (unregistering): Released all slaves [ 264.141379][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 264.339452][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 264.339467][ T30] audit: type=1400 audit(1752384093.303:1629): avc: denied { connect } for pid=12024 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.444678][ T30] audit: type=1400 audit(1752384093.363:1630): avc: denied { read } for pid=12024 comm="syz.1.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 264.529780][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.682271][ T6416] hsr_slave_0: left promiscuous mode [ 264.688570][ T6416] hsr_slave_1: left promiscuous mode [ 264.700793][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.708977][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.720761][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.728257][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.755164][ T6416] veth1_macvtap: left promiscuous mode [ 264.760774][ T6416] veth0_macvtap: left promiscuous mode [ 264.766363][ T6416] veth1_vlan: left promiscuous mode [ 264.772199][ T6416] veth0_vlan: left promiscuous mode [ 265.394164][ T30] audit: type=1400 audit(1752384094.363:1631): avc: denied { create } for pid=12051 comm="syz.3.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 265.494899][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2380'. [ 265.511102][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2380'. [ 265.569779][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.571940][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 265.629494][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 265.732026][ T5844] Bluetooth: hci1: command tx timeout [ 265.753958][T12061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2383'. [ 266.093227][T12010] chnl_net:caif_netlink_parms(): no params data found [ 266.455343][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.462546][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.470147][T12010] bridge_slave_0: entered allmulticast mode [ 266.483134][T12010] bridge_slave_0: entered promiscuous mode [ 266.512738][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.528779][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.536614][T12010] bridge_slave_1: entered allmulticast mode [ 266.543822][T12010] bridge_slave_1: entered promiscuous mode [ 266.580117][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.599241][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.610053][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.697709][T12010] team0: Port device team_slave_0 added [ 266.729668][T12010] team0: Port device team_slave_1 added [ 266.784343][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.800684][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.826611][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.839340][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.868417][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.879515][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.889877][ T30] audit: type=1400 audit(1752384095.853:1632): avc: denied { create } for pid=12082 comm="syz.2.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.908374][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.967306][ T30] audit: type=1400 audit(1752384095.933:1633): avc: denied { bind } for pid=12082 comm="syz.2.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 267.006505][T12092] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 267.128112][T12010] hsr_slave_0: entered promiscuous mode [ 267.145840][T12010] hsr_slave_1: entered promiscuous mode [ 267.167487][T12010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.176560][T12010] Cannot create hsr debugfs directory [ 267.217010][ T30] audit: type=1400 audit(1752384096.183:1634): avc: denied { write } for pid=12104 comm="syz.1.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.629433][ T5852] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 267.649776][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.809924][ T5844] Bluetooth: hci1: command tx timeout [ 267.811123][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.851332][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.887727][ T5852] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 267.949260][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.986176][T12010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.994859][ T5852] usb 2-1: config 0 descriptor?? [ 268.016274][T12010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.067535][T12010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.095607][T12010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.188332][T12126] input input41: cannot allocate more than FF_MAX_EFFECTS effects [ 268.277079][T12010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.360457][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.405039][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.412235][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.451075][ T5852] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 268.462626][ T5852] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 268.482115][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.489262][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.523259][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 268.545108][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 268.568011][T12138] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.576971][T12138] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.586140][T12138] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.594929][T12138] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.643548][ T5852] cp2112 0003:10C4:EA90.002C: Part Number: 0x82 Device Version: 0xFE [ 268.689840][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.743594][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.803859][T12010] veth0_vlan: entered promiscuous mode [ 268.818341][T12010] veth1_vlan: entered promiscuous mode [ 268.839851][ T5885] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 268.849161][T12010] veth0_macvtap: entered promiscuous mode [ 268.883903][T12010] veth1_macvtap: entered promiscuous mode [ 268.924541][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.938535][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.951324][T12010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.960553][T12010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.969284][T12010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.989896][T12010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.999871][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 269.017111][ T5885] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 269.041624][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.050678][ T5885] usb 5-1: Product: syz [ 269.054879][ T5885] usb 5-1: Manufacturer: syz [ 269.061837][ T5885] usb 5-1: SerialNumber: syz [ 269.067861][ T5852] cp2112 0003:10C4:EA90.002C: error setting SMBus config [ 269.076060][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.085708][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.092752][ T5885] usb 5-1: config 0 descriptor?? [ 269.114790][ T5885] gspca_main: se401-2.14.0 probing 047d:5003 [ 269.122310][ T5852] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -71 [ 269.133519][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.141613][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.154869][ T5852] usb 2-1: USB disconnect, device number 40 [ 269.196637][T12156] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b2f8bddb73e65c239a40942f00000000000000000000000000) [ 269.199772][ T30] audit: type=1400 audit(1752384098.163:1635): avc: denied { unlink } for pid=12155 comm="syz.2.2415" name="#f" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 269.244849][ T30] audit: type=1400 audit(1752384098.183:1636): avc: denied { mount } for pid=12155 comm="syz.2.2415" name="/" dev="overlay" ino=3027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 269.348110][ T30] audit: type=1400 audit(1752384098.313:1637): avc: denied { connect } for pid=12159 comm="syz.2.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.378127][ T30] audit: type=1400 audit(1752384098.343:1638): avc: denied { bind } for pid=12159 comm="syz.2.2416" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.417600][ T30] audit: type=1400 audit(1752384098.343:1639): avc: denied { node_bind } for pid=12159 comm="syz.2.2416" saddr=fc02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 269.502528][T12166] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2419'. [ 269.579184][ T30] audit: type=1400 audit(1752384098.543:1640): avc: denied { ioctl } for pid=12169 comm="syz.2.2421" path="socket:[46995]" dev="sockfs" ino=46995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 269.635305][ T30] audit: type=1326 audit(1752384098.603:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cf8e929 code=0x7ffc0000 [ 269.663099][ T30] audit: type=1326 audit(1752384098.603:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cf8e929 code=0x7ffc0000 [ 269.701309][ T30] audit: type=1326 audit(1752384098.613:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cf8e929 code=0x7ffc0000 [ 269.727148][ T30] audit: type=1326 audit(1752384098.613:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cf8e929 code=0x7ffc0000 [ 269.728889][ T5885] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 269.750814][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.777008][ T30] audit: type=1326 audit(1752384098.613:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3cf8e929 code=0x7ffc0000 [ 269.813226][ T30] audit: type=1326 audit(1752384098.613:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12171 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e3cf8e929 code=0x7ffc0000 [ 269.840775][ T5940] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 269.893251][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'. [ 269.987295][ T5941] usb 5-1: USB disconnect, device number 29 [ 270.010021][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 270.016465][ T5940] usb 4-1: config 0 has an invalid interface number: 57 but max is 0 [ 270.028584][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.046455][ T5940] usb 4-1: config 0 has no interface number 0 [ 270.053703][ T5940] usb 4-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 46227, setting to 64 [ 270.064833][ T5940] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=57.d9 [ 270.074000][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.084488][ T5940] usb 4-1: config 0 descriptor?? [ 270.284314][T12190] loop4: detected capacity change from 0 to 7 [ 270.294230][T12190] Dev loop4: unable to read RDB block 7 [ 270.302520][T12190] loop4: unable to read partition table [ 270.303169][ T5940] usb 4-1: string descriptor 0 read error: -71 [ 270.309055][T12190] loop4: partition table beyond EOD, [ 270.316895][ T5940] legousbtower 4-1:0.57: interrupt endpoints not found [ 270.317015][T12190] truncated [ 270.326467][ T5940] usb 4-1: USB disconnect, device number 38 [ 270.329390][T12190] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.349440][T12191] Dev loop4: unable to read RDB block 7 [ 270.355684][T12191] loop4: unable to read partition table [ 270.361558][T12191] loop4: partition table beyond EOD, truncated [ 270.769973][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.999831][ T5885] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 271.063611][ T6441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.180084][ T5885] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 271.188295][ T5885] usb 2-1: config 8 has no interface number 0 [ 271.204276][ T5885] usb 2-1: config 8 interface 177 has no altsetting 0 [ 271.219744][ T5885] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 271.228786][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.466739][ T5885] usb 2-1: string descriptor 0 read error: -71 [ 271.474028][ T5885] ir_toy 2-1:8.177: required endpoints not found [ 271.482617][ T5885] usb 2-1: USB disconnect, device number 41 [ 271.809777][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.849814][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.915626][ T6441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.041176][ T6441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.181422][ T6441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.233274][ T5852] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 273.363010][ T6441] bridge_slave_1: left allmulticast mode [ 273.368712][ T6441] bridge_slave_1: left promiscuous mode [ 273.391516][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.403122][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 273.410440][ T6441] bridge_slave_0: left allmulticast mode [ 273.416094][ T6441] bridge_slave_0: left promiscuous mode [ 273.419954][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.432679][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.440908][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.451403][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.459867][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.470834][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.478315][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.489933][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.525141][ T5852] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 273.545221][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.576362][ T5852] usb 3-1: config 0 descriptor?? [ 273.639761][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 273.791366][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.802845][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.813431][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 273.828576][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 273.838129][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.852534][ T24] usb 5-1: config 0 descriptor?? [ 273.893131][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.916611][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.928274][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.939220][ T6441] bond0 (unregistering): Released all slaves [ 274.003532][ T5852] ft260 0003:0403:6030.002D: unknown main item tag 0x0 [ 274.144546][T12252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.201715][ T5852] ft260 0003:0403:6030.002D: chip code: 6424 8183 [ 274.252506][T12233] chnl_net:caif_netlink_parms(): no params data found [ 274.285420][ T24] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xe [ 274.300886][ T24] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 274.323888][ T24] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 274.337904][ T6441] hsr_slave_0: left promiscuous mode [ 274.347604][ T6441] hsr_slave_1: left promiscuous mode [ 274.354624][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.370232][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.380771][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.388175][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.414662][ T6441] veth1_macvtap: left promiscuous mode [ 274.420262][ T6441] veth0_macvtap: left promiscuous mode [ 274.425775][ T6441] veth1_vlan: left promiscuous mode [ 274.431354][ T6441] veth0_vlan: left promiscuous mode [ 274.505562][ T24] usb 5-1: USB disconnect, device number 30 [ 274.631461][ T974] usb 3-1: USB disconnect, device number 24 [ 274.762638][ T6441] team0 (unregistering): Port device team_slave_1 removed [ 274.793399][ T6441] team0 (unregistering): Port device team_slave_0 removed [ 274.906867][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 274.906880][ T30] audit: type=1400 audit(1752384103.873:1660): avc: denied { ioctl } for pid=12261 comm="syz.1.2458" path="socket:[46076]" dev="sockfs" ino=46076 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 274.938173][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.117636][T12270] netlink: 'syz.4.2460': attribute type 1 has an invalid length. [ 275.130400][T12270] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2460'. [ 275.413834][T12284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.472902][T12286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.478735][T12233] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.490584][ T5841] Bluetooth: hci1: command tx timeout [ 275.511390][T12233] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.518573][T12233] bridge_slave_0: entered allmulticast mode [ 275.550941][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 275.565679][T12290] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2468'. [ 275.587680][T12233] bridge_slave_0: entered promiscuous mode [ 275.603485][T12233] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.619908][T12233] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.637389][T12233] bridge_slave_1: entered allmulticast mode [ 275.644785][T12233] bridge_slave_1: entered promiscuous mode [ 275.661336][T12296] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2471'. [ 275.703760][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.724100][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.733319][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 275.747717][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.758761][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.768734][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.781711][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.793969][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.806077][ T24] usb 5-1: config 0 descriptor?? [ 275.964541][T12233] team0: Port device team_slave_0 added [ 275.970416][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.007688][T12233] team0: Port device team_slave_1 added [ 276.136239][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.155790][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.184824][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.200330][T12305] vlan4: entered allmulticast mode [ 276.209802][T12305] bond0: entered allmulticast mode [ 276.214930][T12305] bond_slave_0: entered allmulticast mode [ 276.230007][T12305] bond_slave_1: entered allmulticast mode [ 276.241014][ T24] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 276.248272][ T24] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max [ 276.274525][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.289775][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.315760][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.370001][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.446836][ T24] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 276.470359][ T24] microsoft 0003:045E:07DA.002F: no inputs found [ 276.476751][ T24] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 276.498699][ T24] usb 5-1: USB disconnect, device number 31 [ 276.565255][T12233] hsr_slave_0: entered promiscuous mode [ 276.572849][T12233] hsr_slave_1: entered promiscuous mode [ 276.579563][T12233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.613868][T12233] Cannot create hsr debugfs directory [ 276.828286][T12315] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2480'. [ 276.891352][ T24] IPVS: starting estimator thread 0... [ 276.999766][T12320] IPVS: using max 46 ests per chain, 110400 per kthread [ 277.009822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.307672][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2494'. [ 277.401834][ T30] audit: type=1400 audit(1752384106.373:1661): avc: denied { setopt } for pid=12352 comm="syz.3.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 277.430028][ T5852] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 277.441513][T12233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.451225][T12233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.461846][T12233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.471494][T12233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.524900][T12233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.540006][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 277.561514][T12233] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.570347][ T5841] Bluetooth: hci1: command tx timeout [ 277.578909][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.586062][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.591125][ T5852] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.604437][ T5852] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.614323][ T5852] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.623797][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.625429][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.638911][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.648064][T12338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 277.658327][ T5852] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.730080][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 277.739976][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.753317][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.767746][ T24] usb 3-1: config 0 descriptor?? [ 277.837306][ T30] audit: type=1400 audit(1752384106.803:1662): avc: denied { setopt } for pid=12369 comm="syz.3.2500" lport=57887 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 277.861011][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.863481][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.938349][ T5852] usb 2-1: USB disconnect, device number 42 [ 277.956510][ T30] audit: type=1400 audit(1752384106.923:1663): avc: denied { getopt } for pid=12372 comm="syz.3.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 277.964273][T12233] veth0_vlan: entered promiscuous mode [ 277.976259][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.987258][T12233] veth1_vlan: entered promiscuous mode [ 278.020752][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 278.024519][T12233] veth0_macvtap: entered promiscuous mode [ 278.039437][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.041250][T12233] veth1_macvtap: entered promiscuous mode [ 278.054630][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.062433][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 278.073275][ T24] usb 3-1: media controller created [ 278.089066][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.115439][T12233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.159491][T12233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.169439][ T30] audit: type=1400 audit(1752384107.133:1664): avc: denied { bind } for pid=12376 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 278.171658][T12233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.203411][T12233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.208343][ T24] az6027: usb out operation failed. (-71) [ 278.212983][T12233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.226924][ T24] az6027: usb out operation failed. (-71) [ 278.226939][ T24] stb0899_attach: Driver disabled by Kconfig [ 278.226949][ T24] az6027: no front-end attached [ 278.226949][ T24] [ 278.228939][ T24] az6027: usb out operation failed. (-71) [ 278.232942][T12233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.245967][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 278.273080][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 278.286185][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 278.295742][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 278.313554][ T24] usb 3-1: USB disconnect, device number 25 [ 278.375481][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 278.375624][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.400605][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.459772][ T6409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.471124][ T6409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.829770][ T6007] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 278.979982][ T6007] usb 4-1: Using ep0 maxpacket: 16 [ 278.988448][ T6007] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 278.990122][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 278.999712][ T6007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.028074][ T6007] usb 4-1: Product: syz [ 279.036773][ T6007] usb 4-1: Manufacturer: syz [ 279.047119][ T6007] usb 4-1: SerialNumber: syz [ 279.059390][ T6007] usb 4-1: config 0 descriptor?? [ 279.073629][ T6007] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 279.089899][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.141837][ T30] audit: type=1400 audit(1752384108.113:1665): avc: denied { execute } for pid=12398 comm="syz.4.2513" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.165416][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.199767][ T30] audit: type=1400 audit(1752384108.113:1666): avc: denied { ioctl } for pid=12398 comm="syz.4.2513" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.239833][ T24] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 279.247997][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 279.261840][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 279.291384][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 279.291434][ T6007] usb 4-1: clie_3_5_startup: get config number failed: -71 [ 279.316053][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.330584][ T6007] visor 4-1:0.0: probe with driver visor failed with error -71 [ 279.343794][ T6007] usb 4-1: USB disconnect, device number 39 [ 279.353580][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.368538][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.402521][ T24] usb 2-1: config 0 descriptor?? [ 279.411992][T12393] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 279.863957][ T24] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 279.884043][ T24] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 280.098241][ T24] usb 2-1: USB disconnect, device number 43 [ 280.129822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.221855][ T6416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.279793][ T6007] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 280.432359][ T6007] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 280.443673][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.455702][ T6007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.466071][ T6007] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 280.480275][ T6007] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 280.489304][ T6007] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 280.497584][ T6007] usb 4-1: Manufacturer: syz [ 280.503643][ T6007] usb 4-1: config 0 descriptor?? [ 280.916156][ T6007] appleir 0003:05AC:8243.0031: unknown main item tag 0x0 [ 280.925037][ T6007] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 281.138341][ T5941] usb 4-1: USB disconnect, device number 40 [ 281.169763][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.914548][ T6416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.003359][ T6416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.136171][ T30] audit: type=1326 audit(1752384111.103:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.1.2522" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58b758e929 code=0x0 [ 282.159116][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.194584][ T6416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.209747][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 282.451083][ T5841] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 282.461241][ T5841] Bluetooth: hci2: Injecting HCI hardware error event [ 282.470689][ T5841] Bluetooth: hci2: hardware error 0x00 [ 282.582267][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.591960][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.603969][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.612624][ T6416] bridge_slave_1: left allmulticast mode [ 282.618848][ T6416] bridge_slave_1: left promiscuous mode [ 282.641223][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.650472][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.658015][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.685835][ T6416] bridge_slave_0: left allmulticast mode [ 282.692556][ T6416] bridge_slave_0: left promiscuous mode [ 282.698316][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.766608][ T30] audit: type=1400 audit(1752384111.733:1668): avc: denied { ioctl } for pid=12442 comm="syz.4.2533" path="pid:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 282.788196][T12449] netlink: 'syz.3.2535': attribute type 4 has an invalid length. [ 282.987663][ T30] audit: type=1400 audit(1752384111.953:1669): avc: denied { append } for pid=12451 comm="syz.1.2536" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.000191][T12452] loop6: detected capacity change from 0 to 2560 [ 283.011400][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.029423][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.029919][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.048091][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.048175][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.067836][ T6416] bond0 (unregistering): Released all slaves [ 283.070197][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 283.083469][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 283.090035][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.096954][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 283.111132][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 0 [ 283.111239][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.121076][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 0 [ 283.121099][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 0 [ 283.130369][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.138639][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 0 [ 283.148531][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.156077][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 0 [ 283.207863][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.230875][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.243384][T12452] ldm_validate_partition_table(): Disk read failed. [ 283.250151][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.258012][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.269260][T12452] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.308574][T12452] Dev loop6: unable to read RDB block 0 [ 283.314705][T12452] loop6: unable to read partition table [ 283.338326][T12452] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 283.533109][ T30] audit: type=1400 audit(1752384112.503:1670): avc: denied { write } for pid=12468 comm="syz.1.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 283.746939][ T6416] hsr_slave_0: left promiscuous mode [ 283.757903][ T6416] hsr_slave_1: left promiscuous mode [ 283.763835][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.772204][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.820370][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.827821][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.916660][ T6416] veth1_macvtap: left promiscuous mode [ 283.940790][ T6416] veth0_macvtap: left promiscuous mode [ 283.946451][ T6416] veth1_vlan: left promiscuous mode [ 283.956554][ T6416] veth0_vlan: left promiscuous mode [ 284.289756][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 284.329821][ T6007] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 284.492143][ T6007] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.510016][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.535134][ T6007] usb 3-1: config 0 descriptor?? [ 284.556237][ T6007] cp210x 3-1:0.0: cp210x converter detected [ 284.610051][ T5841] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 284.687838][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 284.704022][ T5841] Bluetooth: hci1: command tx timeout [ 284.739995][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 285.106133][T12439] chnl_net:caif_netlink_parms(): no params data found [ 285.179851][ T6007] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 285.202399][ T6007] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 285.221468][ T6007] usb 3-1: cp210x converter now attached to ttyUSB0 [ 285.236102][ T6007] usb 3-1: USB disconnect, device number 26 [ 285.318738][ T6007] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 285.329806][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 285.355922][T12439] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.372180][ T6007] cp210x 3-1:0.0: device disconnected [ 285.384819][T12439] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.401615][T12439] bridge_slave_0: entered allmulticast mode [ 285.409064][T12439] bridge_slave_0: entered promiscuous mode [ 285.423028][T12439] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.445392][T12439] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.453123][T12439] bridge_slave_1: entered allmulticast mode [ 285.467512][T12439] bridge_slave_1: entered promiscuous mode [ 285.540994][T12439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.564735][T12439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.599068][ T30] audit: type=1400 audit(1752384114.563:1671): avc: denied { mounton } for pid=12534 comm="syz.3.2576" path="/578/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.672402][T12439] team0: Port device team_slave_0 added [ 285.677957][ T30] audit: type=1400 audit(1752384114.643:1672): avc: denied { append } for pid=12539 comm="syz.3.2568" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.686929][T12439] team0: Port device team_slave_1 added [ 285.777530][T12439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.818422][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.844338][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.861009][T12439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.875368][T12439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.882381][T12439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.922904][T12439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.015789][T12439] hsr_slave_0: entered promiscuous mode [ 286.044354][T12439] hsr_slave_1: entered promiscuous mode [ 286.069219][T12439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.097183][T12439] Cannot create hsr debugfs directory [ 286.139873][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.174317][T12549] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 286.186420][T12549] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 286.194831][T12549] CPU: 1 UID: 0 PID: 12549 Comm: syz.1.2572 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 286.206893][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.216947][T12549] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 286.223884][T12549] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 286.243483][T12549] RSP: 0018:ffffc900046ef300 EFLAGS: 00010202 [ 286.249533][T12549] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000bfc9000 [ 286.257488][T12549] RDX: 000000000000000b RSI: ffffffff89932fec RDI: 0000000000000058 [ 286.265456][T12549] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 286.273414][T12549] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce8e1e0 [ 286.281369][T12549] R13: 0000000000000058 R14: ffffffff8ce8e1c0 R15: ffff88802b184000 [ 286.289321][T12549] FS: 00007f58b53f66c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 286.298234][T12549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.304815][T12549] CR2: 00007f8e3d17f2d8 CR3: 000000007d2e5000 CR4: 00000000003526f0 [ 286.312792][T12549] Call Trace: [ 286.316059][T12549] [ 286.318975][T12549] drr_qlen_notify+0x24/0x150 [ 286.323640][T12549] qdisc_tree_reduce_backlog+0x224/0x500 [ 286.329258][T12549] hhf_change+0x892/0xde0 [ 286.333580][T12549] ? __pfx_hhf_change+0x10/0x10 [ 286.338449][T12549] ? __pfx_qdisc_get_stab+0x10/0x10 [ 286.343720][T12549] hhf_init+0x2f1/0x8c0 [ 286.347874][T12549] ? __pfx_hhf_init+0x10/0x10 [ 286.352539][T12549] qdisc_create+0x457/0xfc0 [ 286.357026][T12549] tc_modify_qdisc+0x12bb/0x2130 [ 286.361948][T12549] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 286.367225][T12549] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 286.369742][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 286.372490][T12549] rtnetlink_rcv_msg+0x3c9/0xe90 [ 286.384233][T12549] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.389683][T12549] ? ref_tracker_free+0x37c/0x830 [ 286.394692][T12549] netlink_rcv_skb+0x158/0x420 [ 286.399434][T12549] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.404878][T12549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.410145][T12549] ? netlink_deliver_tap+0x1ae/0xd30 [ 286.415417][T12549] netlink_unicast+0x53a/0x7f0 [ 286.420162][T12549] ? __pfx_netlink_unicast+0x10/0x10 [ 286.425426][T12549] netlink_sendmsg+0x8d1/0xdd0 [ 286.430170][T12549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.435436][T12549] ____sys_sendmsg+0xa95/0xc70 [ 286.440182][T12549] ? copy_msghdr_from_user+0x10a/0x160 [ 286.445626][T12549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.450891][T12549] ? __pfx_futex_wake_mark+0x10/0x10 [ 286.456173][T12549] ___sys_sendmsg+0x134/0x1d0 [ 286.460835][T12549] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.466016][T12549] ? __lock_acquire+0x622/0x1c90 [ 286.470943][T12549] __sys_sendmsg+0x16d/0x220 [ 286.475520][T12549] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.480614][T12549] ? __x64_sys_futex+0x1e0/0x4c0 [ 286.485542][T12549] do_syscall_64+0xcd/0x4c0 [ 286.490032][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.495906][T12549] RIP: 0033:0x7f58b758e929 [ 286.500307][T12549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.519903][T12549] RSP: 002b:00007f58b53f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.528300][T12549] RAX: ffffffffffffffda RBX: 00007f58b77b5fa0 RCX: 00007f58b758e929 [ 286.536251][T12549] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 286.544203][T12549] RBP: 00007f58b7610b39 R08: 0000000000000000 R09: 0000000000000000 [ 286.552154][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.560104][T12549] R13: 0000000000000000 R14: 00007f58b77b5fa0 R15: 00007fff0e076ca8 [ 286.568072][T12549] [ 286.571075][T12549] Modules linked in: [ 286.574979][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.580990][T12549] ---[ end trace 0000000000000000 ]--- [ 286.586435][T12549] RIP: 0010:__list_del_entry_valid_or_report+0x20/0x200 [ 286.593421][T12549] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 54 55 53 48 89 fb 48 83 c7 08 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 8b 01 00 00 48 89 da 48 8b 6b 08 48 b8 00 00 00 [ 286.613062][T12549] RSP: 0018:ffffc900046ef300 EFLAGS: 00010202 [ 286.619122][T12549] RAX: dffffc0000000000 RBX: 0000000000000050 RCX: ffffc9000bfc9000 [ 286.627119][T12549] RDX: 000000000000000b RSI: ffffffff89932fec RDI: 0000000000000058 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.635126][T12549] RBP: 0000000000000050 R08: 0000000000000005 R09: 0000000000000000 [ 286.643124][T12549] R10: 00000000000a0009 R11: 0000000000000001 R12: ffffffff8ce8e1e0 [ 286.651113][T12549] R13: 0000000000000058 R14: ffffffff8ce8e1c0 R15: ffff88802b184000 [ 286.659104][T12549] FS: 00007f58b53f66c0(0000) GS:ffff888124816000(0000) knlGS:0000000000000000 [ 286.668060][T12549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.674669][T12549] CR2: 00007f8e3d17f2d8 CR3: 000000007d2e5000 CR4: 00000000003526f0 [ 286.682678][T12549] Kernel panic - not syncing: Fatal exception in interrupt [ 286.690057][T12549] Kernel Offset: disabled [ 286.694361][T12549] Rebooting in 86400 seconds..