last executing test programs: 1m49.559782631s ago: executing program 0 (id=1997): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) 1m48.663308501s ago: executing program 0 (id=2004): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc9, 0x1}}}, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m48.524358957s ago: executing program 0 (id=2006): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x0, 0xad, 0x0, 0x4}, 0x9c) 1m48.380302043s ago: executing program 0 (id=2008): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) 1m48.29870178s ago: executing program 0 (id=2010): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x1001, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) 1m48.165910519s ago: executing program 0 (id=2013): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 1m33.04370401s ago: executing program 32 (id=2013): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 4.526947183s ago: executing program 1 (id=3248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3dcf, 0x80, 0x0, 0x357}, &(0x7f0000000440)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x44ca772ce766c12c, @fd=r0, 0x9, 0xb01, 0x2, 0x12}) io_uring_enter(r0, 0x47bc, 0x2, 0x8, 0x0, 0x0) 4.360319645s ago: executing program 1 (id=3251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'caif0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 3.90631261s ago: executing program 1 (id=3255): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 3.543478493s ago: executing program 3 (id=3260): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 3.07159103s ago: executing program 3 (id=3265): creat(0x0, 0x1aa) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xf) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00309d"], 0x0, 0x0, 0x0, 0x0}) 2.786633248s ago: executing program 2 (id=3268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.76405066s ago: executing program 4 (id=3269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.608374225s ago: executing program 2 (id=3270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.488721476s ago: executing program 4 (id=3271): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.2959102s ago: executing program 4 (id=3272): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000047b012109911a26893330102030109021b00020800100009040803006b97ffff0904080000ff4e48dccfaf1fb84673192c51acdcefd189591ffd02911e87998231e6a8cabc9cf05f42fe520eaa51ee4aa44557efa529b274caeda71052"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x9, 0x0, &(0x7f0000001fc0)) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) 2.269115859s ago: executing program 2 (id=3273): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x20000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2.218295298s ago: executing program 2 (id=3274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a0001060000000001000000070000"], 0x18}], 0x1}, 0x0) 1.703356361s ago: executing program 2 (id=3276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x1280, 0x20) open$dir(&(0x7f0000000140)='./file0\x00', 0x8a882, 0x1a6) 1.578001621s ago: executing program 2 (id=3278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.346910043s ago: executing program 5 (id=3280): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd0c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x800) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4, [0x0, 0x10, 0x0, 0x0, 0x400000]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) 925.647683ms ago: executing program 5 (id=3281): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) dup(r0) syz_io_uring_setup(0x238, 0x0, 0x0, 0x0) getpid() 856.846998ms ago: executing program 5 (id=3282): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 808.596898ms ago: executing program 3 (id=3283): semget$private(0x0, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)={0x5c, r4, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 747.355186ms ago: executing program 1 (id=3284): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000005740)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="2870e96c00160fb4deb8b9d3f31d24ff3e87df25c4a415942b4e4a581a8794107263b94d00f0a1fac0756ffe7ac56c7e97546defe2ccbdd3ca126639b4a50bde347ee9bc1f0810e5ad00e0c99b39fcde4aca10ba6989309a774f656dd414031dbe1718f81a5007d1467ebca9777ffd314a2a94e7bb0770095371c793128564da90a146ac70266a5c3ea2e5169276eb43c722922bdc5c005ce1b83b3c43d922b1e49254d3fbe2dab15cd2a32ef70b04bc9c21d661760de8edd43493311958b793aef6f8b61551b83d26", 0xc9}], 0x1, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0}], 0x2, 0x40800) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000f40)={0x1, 0x4, 0x3, 0x8}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000058c0)=""/85, 0x55}, {&(0x7f0000000200)=""/83, 0x73}], 0x2}, 0x0) 720.929222ms ago: executing program 5 (id=3285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 669.83126ms ago: executing program 3 (id=3286): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b1", 0x2a, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 655.642276ms ago: executing program 1 (id=3287): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) 654.242097ms ago: executing program 4 (id=3288): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000240)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x3a, 0x0, 0x0, 0x10005}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 578.195876ms ago: executing program 5 (id=3289): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f00000006c0)="2cd889f035a5", 0x6) write$char_usb(r0, &(0x7f0000000480)="1f6462", 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40) 566.582011ms ago: executing program 1 (id=3290): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x20, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000fc0)) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 497.74814ms ago: executing program 4 (id=3291): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) tkill(r1, 0x18) 355.175585ms ago: executing program 4 (id=3292): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 277.28089ms ago: executing program 5 (id=3293): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x8) r1 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x2, 0x0, 0x0) 174.409324ms ago: executing program 3 (id=3294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1) 0s ago: executing program 3 (id=3295): gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1, 0x2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x13, r0, 0xfffff000) kernel console output (not intermixed with test programs): .298305][ T5921] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 204.366958][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 18142, setting to 1024 [ 204.410547][ T5921] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 204.427659][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.459766][ T5921] usb 4-1: Product: syz [ 204.464008][ T5921] usb 4-1: Manufacturer: syz [ 204.487706][ T5921] usb 4-1: SerialNumber: syz [ 204.499482][ T5921] usb 4-1: config 0 descriptor?? [ 204.515608][T10331] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 204.698865][ T30] audit: type=1400 audit(1769838421.887:490): avc: denied { ioctl } for pid=10371 comm="syz.4.1796" path="socket:[27846]" dev="sockfs" ino=27846 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.901162][ T1785] usb 4-1: USB disconnect, device number 21 [ 205.419534][T10365] netlink: 'syz.0.1794': attribute type 2 has an invalid length. [ 205.469523][ T5886] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.639020][ T5886] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 205.679911][ T5886] usb 5-1: config 0 has no interface number 0 [ 205.686075][ T5886] usb 5-1: config 0 interface 4 has no altsetting 0 [ 205.708550][ T5886] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.749907][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.770697][ T5886] usb 5-1: config 0 descriptor?? [ 205.818514][ T5886] cp210x 5-1:0.4: cp210x converter detected [ 205.860540][ T30] audit: type=1400 audit(1769838423.047:491): avc: denied { setopt } for pid=10398 comm="syz.3.1808" lport=44745 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 206.045606][ T30] audit: type=1400 audit(1769838423.227:492): avc: denied { read } for pid=10400 comm="syz.0.1809" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.215949][ T5886] cp210x 5-1:0.4: failed to get vendor val 0x000e size 3: -32 [ 206.237166][ T5886] usb 5-1: cp210x converter now attached to ttyUSB0 [ 206.267801][ T5886] usb 5-1: USB disconnect, device number 19 [ 206.276273][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'. [ 206.287225][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.299122][T10412] sock: sock_set_timeout: `syz.3.1814' (pid 10412) tries to set negative timeout [ 206.314855][ T5886] cp210x 5-1:0.4: device disconnected [ 206.330324][ T30] audit: type=1400 audit(1769838423.507:493): avc: denied { read } for pid=10411 comm="syz.3.1814" path="socket:[28048]" dev="sockfs" ino=28048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.544142][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 206.557006][T10420] chnl_net:caif_netlink_parms(): no params data found [ 206.864768][T10428] loop3: detected capacity change from 0 to 2560 [ 206.902807][T10428] buffer_io_error: 138 callbacks suppressed [ 206.902828][T10428] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.923010][ T30] audit: type=1400 audit(1769838424.107:494): avc: denied { setopt } for pid=10431 comm="syz.0.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.969337][T10428] Buffer I/O error on dev loop3, logical block 0, async page read [ 206.996158][T10428] Buffer I/O error on dev loop3, logical block 1, async page read [ 207.033611][T10435] Buffer I/O error on dev loop3, logical block 0, lost async page write [ 207.074473][T10428] loop3: unable to read partition table [ 207.095156][T10428] loop_reread_partitions: partition scan of loop3 (3 ) failed (rc=-5) [ 207.117626][T10435] Buffer I/O error on dev loop3, logical block 1, lost async page write [ 207.136488][T10435] Buffer I/O error on dev loop3, logical block 2, lost async page write [ 207.199232][T10435] Buffer I/O error on dev loop3, logical block 3, lost async page write [ 207.247604][T10435] Buffer I/O error on dev loop3, logical block 4, lost async page write [ 207.287682][T10435] Buffer I/O error on dev loop3, logical block 5, lost async page write [ 207.336498][T10435] Buffer I/O error on dev loop3, logical block 6, lost async page write [ 207.471793][T10447] Process accounting resumed [ 207.698161][T10455] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 208.929958][ T30] audit: type=1400 audit(1769838426.107:495): avc: denied { map } for pid=10497 comm="syz.1.1849" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 210.609227][ T30] audit: type=1400 audit(1769838427.797:496): avc: denied { setopt } for pid=10541 comm="syz.1.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.658400][ T30] audit: type=1400 audit(1769838427.817:497): avc: denied { bind } for pid=10541 comm="syz.1.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 211.407709][ T5853] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 211.559143][T10572] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 211.602840][ T5853] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 211.622599][T10572] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 211.635525][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.647569][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.676268][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.695457][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.704915][ T5886] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 211.748060][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.783013][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.805727][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.835473][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.879291][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.915190][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 211.934837][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.947800][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 211.967634][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.988881][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.006200][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.020083][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.058008][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.070793][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.093033][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.114293][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.123821][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.135009][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.143170][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.157673][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.174781][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.186389][ T5853] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 212.201686][ T5853] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 212.215602][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.227109][ T5853] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 212.237748][ T5853] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 212.246651][ T5853] usb 3-1: Product: syz [ 212.252162][ T5853] usb 3-1: Manufacturer: syz [ 212.256873][ T5853] usb 3-1: SerialNumber: syz [ 212.266238][ T5853] usb 3-1: config 0 descriptor?? [ 212.277910][ T5853] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 212.322208][T10569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.374013][T10569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.375220][ T30] audit: type=1400 audit(1769838429.557:498): avc: denied { mount } for pid=10583 comm="syz.0.1888" name="/" dev="hugetlbfs" ino=28314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 212.406526][ T30] audit: type=1400 audit(1769838429.577:499): avc: denied { mounton } for pid=10583 comm="syz.0.1888" path="/352/file0" dev="hugetlbfs" ino=28314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 212.431347][ T5886] usb 2-1: GET_CAPABILITIES returned 0 [ 212.437037][ T5886] usbtmc 2-1:16.0: can't read capabilities [ 212.490108][ T30] audit: type=1400 audit(1769838429.637:500): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 212.520003][ T5921] usb 3-1: USB disconnect, device number 24 [ 212.606885][ T5921] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 212.651809][ T5886] usb 2-1: USB disconnect, device number 19 [ 212.816652][T10596] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1894'. [ 213.137611][ T5921] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 213.246150][ T30] audit: type=1400 audit(1769838430.427:501): avc: denied { mounton } for pid=10609 comm="syz.4.1901" path=2F3338392FE91F7189591E9233614B dev="tmpfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 213.289514][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 213.291640][T10614] Invalid argument reading file caps for ./file0 [ 213.316494][ T5921] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 213.330201][ T5921] usb 1-1: config 0 has no interface number 0 [ 213.345192][ T5921] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.377561][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.380860][T10617] netlink: 'syz.1.1902': attribute type 4 has an invalid length. [ 213.390422][ T5921] usb 1-1: Product: syz [ 213.398959][ T5921] usb 1-1: Manufacturer: syz [ 213.403589][ T5921] usb 1-1: SerialNumber: syz [ 213.425017][ T5921] usb 1-1: config 0 descriptor?? [ 213.473754][ T5921] smsc95xx v2.0.0 [ 213.537222][T10620] serio: Serial port ptm0 [ 213.739018][T10631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1909'. [ 214.082837][ T5921] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 214.122594][ T5921] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.176385][ T5921] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 214.193640][ T5921] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 214.234779][ T5921] usb 1-1: USB disconnect, device number 27 [ 214.306532][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'. [ 214.508191][ T30] audit: type=1400 audit(1769838431.697:502): avc: denied { ioctl } for pid=10652 comm="syz.2.1918" path="socket:[28921]" dev="sockfs" ino=28921 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.693984][ T30] audit: type=1400 audit(1769838431.877:503): avc: denied { accept } for pid=10658 comm="syz.2.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.727855][T10661] kvm: user requested TSC rate below hardware speed [ 215.023881][ T30] audit: type=1400 audit(1769838432.207:504): avc: denied { read open } for pid=10678 comm="syz.2.1930" path="/384/file0" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.174198][ T30] audit: type=1400 audit(1769838432.357:505): avc: denied { ioctl } for pid=10683 comm="syz.1.1933" path="socket:[28525]" dev="sockfs" ino=28525 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 215.344186][T10692] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.557159][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 215.677622][ T5853] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 215.847523][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 215.858041][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.871049][ T5853] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 215.881015][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.889525][ T5853] usb 3-1: Product: syz [ 215.894008][ T5853] usb 3-1: Manufacturer: syz [ 215.899026][ T5853] usb 3-1: SerialNumber: syz [ 215.913167][ T5853] usb 3-1: config 0 descriptor?? [ 215.925429][T10717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.327915][ T5853] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 216.731832][ T5853] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 216.761677][ T5853] usb 3-1: USB disconnect, device number 25 [ 216.917851][ T5886] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 217.097637][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 217.105272][ T5886] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 217.113901][ T5886] usb 5-1: config 0 has no interface number 0 [ 217.120213][ T5886] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.132987][ T5886] usb 5-1: config 0 interface 85 has no altsetting 0 [ 217.141975][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 217.151949][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.160261][ T5886] usb 5-1: Product: syz [ 217.164956][ T5886] usb 5-1: Manufacturer: syz [ 217.169894][ T5886] usb 5-1: SerialNumber: syz [ 217.176755][ T5886] usb 5-1: config 0 descriptor?? [ 217.588227][ T5813] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.594970][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 217.824395][ T5886] appletouch 5-1:0.85: Geyser mode initialized. [ 217.848173][ T5886] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input17 [ 217.977539][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 218.081366][ T5886] usb 5-1: USB disconnect, device number 20 [ 218.081462][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 218.159608][ T5886] appletouch 5-1:0.85: input: appletouch disconnected [ 218.197590][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 218.211226][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.246062][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.286377][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 218.317646][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.330678][ T24] usb 2-1: config 0 descriptor?? [ 218.869945][ T24] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 219.084635][T10801] syzkaller1: entered promiscuous mode [ 219.121888][ T5853] usb 2-1: USB disconnect, device number 20 [ 219.126821][T10801] syzkaller1: entered allmulticast mode [ 219.750733][T10828] bridge0: port 3(syz_tun) entered blocking state [ 219.759117][T10828] bridge0: port 3(syz_tun) entered disabled state [ 219.776552][T10828] syz_tun: entered allmulticast mode [ 219.783506][T10828] syz_tun: entered promiscuous mode [ 219.951814][T10832] loop7: detected capacity change from 0 to 7 [ 220.012203][T10832] Dev loop7: unable to read RDB block 7 [ 220.020324][ C1] blk_print_req_error: 138 callbacks suppressed [ 220.020354][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 220.027603][T10832] loop7: unable to read partition table [ 220.036945][ C1] buffer_io_error: 313 callbacks suppressed [ 220.036964][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 220.073946][T10832] loop7: partition table beyond EOD, truncated [ 220.087609][T10832] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 220.205748][ T24] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 220.241391][ T24] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.488959][ T30] audit: type=1400 audit(1769838438.677:506): avc: denied { setattr } for pid=5806 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.661665][T10875] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.2015'. [ 221.805040][T10881] netlink: 'syz.1.2017': attribute type 39 has an invalid length. [ 221.891176][T10883] netlink: 'syz.3.2019': attribute type 83 has an invalid length. [ 221.933605][ T30] audit: type=1400 audit(1769838439.117:507): avc: denied { ioctl } for pid=10884 comm="syz.2.2018" path="socket:[30835]" dev="sockfs" ino=30835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.128109][T10890] 9pnet: p9_errstr2errno: server reported unknown error [ 222.409137][T10902] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2028'. [ 222.647780][ T30] audit: type=1400 audit(1769838439.827:508): avc: denied { watch } for pid=10913 comm="syz.3.2033" path="/406/file0" dev="hugetlbfs" ino=30886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 222.747715][ T30] audit: type=1400 audit(1769838439.857:509): avc: denied { watch_sb watch_reads } for pid=10913 comm="syz.3.2033" path="/406/file0" dev="hugetlbfs" ino=30886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 222.860070][T10919] netlink: 'syz.2.2034': attribute type 13 has an invalid length. [ 222.881166][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2037'. [ 222.940747][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 223.060673][ T2988] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.060694][T10919] netlink: 'syz.2.2034': attribute type 13 has an invalid length. [ 223.060717][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 223.082869][ T2988] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.154223][ T2988] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.180934][ T2988] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.281807][T10933] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 223.551704][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 223.574095][T10938] xfrm1: entered promiscuous mode [ 223.618121][T10938] xfrm1: entered allmulticast mode [ 223.623840][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 223.688554][ T30] audit: type=1400 audit(1769838440.877:510): avc: denied { getopt } for pid=10926 comm="syz.3.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 223.748017][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.909064][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.129053][ T30] audit: type=1400 audit(1769838441.307:511): avc: denied { connect } for pid=10952 comm="syz.3.2051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 224.307967][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.790636][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.030413][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.387618][ T5853] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 225.577581][ T5853] usb 4-1: Using ep0 maxpacket: 8 [ 225.591345][ T5853] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.613491][ T5853] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.634622][ T5853] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.655218][ T5853] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.679827][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.694667][ T5853] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.708174][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.828436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.956934][ T5853] usb 4-1: GET_CAPABILITIES returned 0 [ 225.971130][ T5853] usbtmc 4-1:16.0: can't read capabilities [ 226.199548][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.219975][ T5921] usb 4-1: USB disconnect, device number 22 [ 226.238043][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.798632][ T5921] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 226.870352][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.932312][T11011] loop8: detected capacity change from 0 to 7 [ 226.948322][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.959514][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 226.986978][ T9951] Dev loop8: unable to read RDB block 7 [ 226.997255][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 227.040891][ T9951] loop8: unable to read partition table [ 227.051232][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 227.051467][ T9951] loop8: partition table beyond EOD, truncated [ 227.093797][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 227.122101][T11011] Dev loop8: unable to read RDB block 7 [ 227.138089][ T5921] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 227.147805][T11011] loop8: unable to read partition table [ 227.153944][T11011] loop8: partition table beyond EOD, truncated [ 227.167559][T11011] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 227.180841][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.214796][ T5921] usb 5-1: config 0 descriptor?? [ 227.448221][ T5921] hdpvr 5-1:0.0: firmware version 0x0 dated [ 227.465356][ T5921] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 227.497417][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 227.538422][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 227.585569][T11019] netlink: 'syz.2.2080': attribute type 18 has an invalid length. [ 227.605061][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 227.640313][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2080'. [ 227.667781][T11019] netlink: 'syz.2.2080': attribute type 18 has an invalid length. [ 227.926366][ T5921] hdpvr 5-1:0.0: Could not setup controls [ 227.948229][ T5921] hdpvr 5-1:0.0: registering videodev failed [ 227.974186][ T5921] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 227.993127][ T30] audit: type=1400 audit(1769838445.167:512): avc: denied { associate } for pid=11026 comm="syz.2.2083" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 228.000705][ T5921] usb 5-1: USB disconnect, device number 21 [ 228.500421][ T2988] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xb [ 228.926190][T11060] input: syz0 as /devices/virtual/input/input19 [ 228.952201][ T5913] net_ratelimit: 3 callbacks suppressed [ 228.952221][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.348028][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.490340][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.508812][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.517574][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.527161][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.555860][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.586794][T11077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.628354][T11075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.697814][ T5886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 229.877836][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 229.889724][ T5886] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 229.907688][ T30] audit: type=1400 audit(1769838447.087:513): avc: denied { ioctl } for pid=11085 comm="syz.2.2108" path="socket:[31312]" dev="sockfs" ino=31312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.935453][ T5886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.948033][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.959100][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.971645][ T5886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.990053][ T5886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.997148][ T5913] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 229.999954][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.047310][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.171577][ T5913] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 230.195444][ T5913] usb 5-1: config 0 has no interface number 0 [ 230.210108][ T5913] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 230.234525][ T5913] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.260879][ T5913] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 230.270369][ T5886] usb 4-1: GET_CAPABILITIES returned 0 [ 230.284832][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.296077][ T5886] usbtmc 4-1:16.0: can't read capabilities [ 230.320402][ T5913] usb 5-1: Product: syz [ 230.333843][ T5913] usb 5-1: Manufacturer: syz [ 230.347577][ T5913] usb 5-1: SerialNumber: syz [ 230.365878][ T5913] usb 5-1: config 0 descriptor?? [ 230.388965][T11083] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 230.409517][ T5913] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 230.449709][ T5913] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 230.489004][ T5886] usb 4-1: USB disconnect, device number 23 [ 230.674064][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 230.892939][ T5886] usb 5-1: USB disconnect, device number 22 [ 230.922583][ T5886] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 230.957025][ T5886] cyberjack 5-1:0.69: device disconnected [ 231.545655][T11119] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 232.287591][ T5886] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 232.458354][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 232.470366][ T5886] usb 3-1: config 162 has an invalid interface number: 251 but max is 1 [ 232.515598][ T5886] usb 3-1: config 162 has an invalid interface number: 209 but max is 1 [ 232.547232][ T5886] usb 3-1: config 162 has no interface number 0 [ 232.577653][ T5886] usb 3-1: config 162 has no interface number 1 [ 232.584021][ T5886] usb 3-1: config 162 interface 251 altsetting 4 has an endpoint descriptor with address 0x23, changing to 0x3 [ 232.611734][ T5886] usb 3-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.657547][ T5886] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 232.678702][ T5886] usb 3-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 232.699061][ T5886] usb 3-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 232.728262][ T5886] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 232.748206][ T5886] usb 3-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 232.770554][ T5886] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 232.807980][ T5886] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 232.827820][ T5886] usb 3-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 232.859048][ T5886] usb 3-1: config 162 interface 251 has no altsetting 0 [ 232.866062][ T5886] usb 3-1: config 162 interface 209 has no altsetting 0 [ 232.889764][ T5886] usb 3-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 232.912582][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.927505][ T5886] usb 3-1: Product: syz [ 232.932160][ T5886] usb 3-1: Manufacturer: syz [ 232.947663][ T5886] usb 3-1: SerialNumber: syz [ 233.174588][ T5886] io_edgeport 3-1:162.251: required endpoints missing [ 233.389939][ T5886] io_edgeport 3-1:162.209: Edgeport 2 port adapter converter detected [ 233.779997][ T5886] usb 3-1: 䀁 detected [ 233.979904][ T5886] usb 3-1: edge_startup - Error -90 submitting control urb [ 233.992114][ T5886] io_edgeport 3-1:162.209: probe with driver io_edgeport failed with error -90 [ 234.200760][ T5886] usb 3-1: USB disconnect, device number 26 [ 234.261608][T11209] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2148'. [ 234.429052][ T30] audit: type=1400 audit(1769838451.617:514): avc: denied { bind } for pid=11210 comm="syz.3.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 234.630434][ T12] net_ratelimit: 7 callbacks suppressed [ 234.630460][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.645428][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.717355][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'. [ 235.671906][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.068194][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.239549][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2167'. [ 236.298532][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 236.493611][T11260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.712388][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.896131][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.909172][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.919082][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.936584][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.954353][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.193512][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.461959][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 237.472254][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 237.483754][T11292] netlink: 'syz.1.2183': attribute type 6 has an invalid length. [ 237.540174][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 237.578769][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 237.665415][T11299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.673822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.694525][T11292] netlink: 'syz.1.2183': attribute type 6 has an invalid length. [ 237.763324][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.915410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 237.975832][T11271] chnl_net:caif_netlink_parms(): no params data found [ 238.128542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 238.152543][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2189'. [ 238.262836][T11318] netlink: 'syz.2.2189': attribute type 15 has an invalid length. [ 238.281380][T11318] netlink: 'syz.2.2189': attribute type 18 has an invalid length. [ 238.303290][ T30] audit: type=1400 audit(1769838455.487:515): avc: denied { write } for pid=11325 comm="syz.1.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.423683][T11271] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.456907][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.476946][T11271] bridge_slave_0: entered allmulticast mode [ 238.478805][ T30] audit: type=1400 audit(1769838455.657:516): avc: denied { name_bind 0x1000000 } for pid=11328 comm="syz.1.2193" path="socket:[32877]" dev="sockfs" ino=32877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.498824][T11271] bridge_slave_0: entered promiscuous mode [ 238.617730][T11271] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.632998][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.648143][T11271] bridge_slave_1: entered allmulticast mode [ 238.671354][T11271] bridge_slave_1: entered promiscuous mode [ 238.753133][ T12] bridge_slave_1: left allmulticast mode [ 238.760284][ T12] bridge_slave_1: left promiscuous mode [ 238.769225][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.785465][ T12] bridge_slave_0: left allmulticast mode [ 238.795982][ T12] bridge_slave_0: left promiscuous mode [ 238.804055][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.991937][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 239.031274][ T5813] Bluetooth: hci5: command tx timeout [ 239.154829][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.164638][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.174321][ T12] bond0 (unregistering): Released all slaves [ 239.264656][T11335] Process accounting resumed [ 239.339800][ T12] bond1 (unregistering): Released all slaves [ 239.360495][T11271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.379836][T11271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.430917][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 239.469635][ T30] audit: type=1400 audit(1769838456.657:517): avc: denied { wake_alarm } for pid=11353 comm="syz.1.2201" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.748018][ T13] net_ratelimit: 3 callbacks suppressed [ 239.748036][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.761357][T11271] team0: Port device team_slave_0 added [ 239.795850][T11271] team0: Port device team_slave_1 added [ 239.810014][ T30] audit: type=1400 audit(1769838456.987:518): avc: denied { mount } for pid=11367 comm="syz.2.2207" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 239.916151][T11271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.959669][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.046182][T11271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.092867][T11271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.107865][T11271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.186732][T11271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.237577][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 240.267710][ T12] hsr_slave_0: left promiscuous mode [ 240.279564][ T12] hsr_slave_1: left promiscuous mode [ 240.287096][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.303016][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.397257][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.398376][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.423460][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.444694][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.471787][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.499039][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.511797][ T24] usb 3-1: config 0 descriptor?? [ 240.792617][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.973450][ T24] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 241.111698][ T5813] Bluetooth: hci5: command tx timeout [ 241.249704][ T24] usb 3-1: USB disconnect, device number 27 [ 241.359880][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.450105][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.462365][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 241.827807][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.153378][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.308175][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.343030][T11271] hsr_slave_0: entered promiscuous mode [ 242.350059][T11271] hsr_slave_1: entered promiscuous mode [ 242.636614][T11440] overlayfs: upper fs does not support file handles, falling back to index=off. [ 242.704335][ T30] audit: type=1400 audit(1769838459.887:519): avc: denied { setattr } for pid=11438 comm="syz.2.2226" name="file1" dev="overlay" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 242.875371][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.971128][ T5886] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 243.036517][T11271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.073412][T11271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.100816][T11271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.130747][T11271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.152072][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.184195][ T5886] usb 4-1: config 0 has no interfaces? [ 243.190393][ T5813] Bluetooth: hci5: command tx timeout [ 243.219929][ T5886] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 243.240206][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.271032][ T5886] usb 4-1: config 0 descriptor?? [ 243.441275][T11271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.515569][T11271] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.532036][ T30] audit: type=1400 audit(1769838460.717:520): avc: denied { ioctl } for pid=11442 comm="syz.3.2228" path="socket:[33063]" dev="sockfs" ino=33063 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 243.533393][ T5886] usb 4-1: USB disconnect, device number 24 [ 243.588882][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.599633][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.607277][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.609886][T11483] tls_set_device_offload: netdev not found [ 243.649177][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.656608][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.908276][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.012087][T11501] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2239'. [ 244.051452][T11271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.198650][ T5886] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 244.360889][ T5886] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 244.388796][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.435591][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.484689][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.500818][ T5886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.560586][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.571355][T11271] veth0_vlan: entered promiscuous mode [ 244.609720][T11271] veth1_vlan: entered promiscuous mode [ 244.626360][ T5886] usb 3-1: config 0 descriptor?? [ 244.653924][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 244.669804][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 244.686261][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 244.686562][T11271] veth0_macvtap: entered promiscuous mode [ 244.697831][T11534] netlink: 'syz.4.2245': attribute type 5 has an invalid length. [ 244.706297][T11534] netlink: 'syz.4.2245': attribute type 8 has an invalid length. [ 244.732650][T11271] veth1_macvtap: entered promiscuous mode [ 244.740279][T11527] ceph: No mds server is up or the cluster is laggy [ 244.754874][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 244.757046][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 244.767994][T11271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.778984][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 244.785611][T11271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.796460][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.829957][T11534] geneve2: entered promiscuous mode [ 244.835261][T11534] geneve2: entered allmulticast mode [ 244.912524][ T65] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 244.932781][ T65] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 244.962314][ T65] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 245.004848][ T65] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 245.031260][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 245.040541][ T65] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.079460][ T65] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.101605][ T5886] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 245.117637][ T65] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.151145][ T65] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.166302][ T5886] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 245.188445][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.247349][ T30] audit: type=1400 audit(1769838462.427:521): avc: denied { connect } for pid=11546 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.267666][ T5813] Bluetooth: hci5: command tx timeout [ 245.473207][ T5921] usb 3-1: USB disconnect, device number 28 [ 245.546002][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.591565][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.672720][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.683247][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.719732][ T30] audit: type=1400 audit(1769838462.907:522): avc: denied { mounton } for pid=11271 comm="syz-executor" path="/root/syzkaller.BqnTdk/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 245.783587][ T30] audit: type=1400 audit(1769838462.907:523): avc: denied { mounton } for pid=11271 comm="syz-executor" path="/root/syzkaller.BqnTdk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 245.829385][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.887697][ T30] audit: type=1400 audit(1769838462.907:524): avc: denied { mounton } for pid=11271 comm="syz-executor" path="/root/syzkaller.BqnTdk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 246.028259][ T30] audit: type=1400 audit(1769838462.947:525): avc: denied { mounton } for pid=11271 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 246.147869][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.362866][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2257'. [ 246.868984][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.096856][T11608] sp0: Synchronizing with TNC [ 247.767593][ T5921] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 247.907727][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.939497][ T5921] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 247.954668][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.977322][ T5921] usb 5-1: config 0 descriptor?? [ 247.991141][ T5921] cp210x 5-1:0.0: cp210x converter detected [ 248.069531][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.097028][T11643] raw_sendmsg: syz.1.2282 forgot to set AF_INET. Fix it! [ 248.227779][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.406993][ T5921] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 248.631744][ T5921] usb 5-1: cp210x converter now attached to ttyUSB0 [ 248.829472][ T24] usb 5-1: USB disconnect, device number 23 [ 248.852957][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 248.977829][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.986591][ T24] cp210x 5-1:0.0: device disconnected [ 249.350795][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.440704][ T30] audit: type=1400 audit(1769838466.627:526): avc: denied { mounton } for pid=11689 comm="syz.2.2302" path="/proc/1055/task" dev="proc" ino=33650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 249.671982][T11702] netlink: 'syz.1.2306': attribute type 8 has an invalid length. [ 249.701755][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2306'. [ 249.717376][T11702] bond0: entered promiscuous mode [ 249.737299][ T30] audit: type=1400 audit(1769838466.917:527): avc: denied { read } for pid=11703 comm="syz.3.2308" path="socket:[34011]" dev="sockfs" ino=34011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 249.768241][T11702] bond_slave_0: entered promiscuous mode [ 249.775276][T11702] bond_slave_1: entered promiscuous mode [ 249.873801][T11702] gretap0: entered promiscuous mode [ 249.885269][T11702] bond0: left promiscuous mode [ 249.891185][T11702] bond_slave_0: left promiscuous mode [ 249.896986][T11702] bond_slave_1: left promiscuous mode [ 249.906143][T11702] gretap0: left promiscuous mode [ 249.992737][ T1785] net_ratelimit: 1 callbacks suppressed [ 249.992763][ T1785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.264161][ T30] audit: type=1400 audit(1769838467.447:528): avc: denied { connect } for pid=11720 comm="syz.5.2312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.629333][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.271089][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.670508][ T1785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.701581][ T30] audit: type=1400 audit(1769838468.887:529): avc: denied { bind } for pid=11760 comm="syz.4.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.915705][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.067865][ T5921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 252.230872][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 252.239249][ T5921] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 252.252113][ T5921] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 252.262838][ T5921] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.594431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 252.666821][ T5921] usb 6-1: config 1 interface 0 has no altsetting 0 [ 252.688417][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 252.705182][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.715677][ T1785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.744876][ T5921] usb 6-1: Product: syz [ 252.779614][ T5921] usb 6-1: Manufacturer: syz [ 252.797601][ T5921] usb 6-1: SerialNumber: syz [ 252.937861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 253.059681][ T5921] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 253.284376][ T30] audit: type=1400 audit(1769838470.467:530): avc: denied { ioctl } for pid=11766 comm="syz.5.2331" path="/dev/usb/lp0" dev="devtmpfs" ino=3491 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 253.323874][ T5886] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 253.387154][T11767] usblp0:failed reading printer status (-32) [ 253.399755][ T1785] usb 6-1: USB disconnect, device number 2 [ 253.409409][ T1785] usblp0: removed [ 253.410755][ T30] audit: type=1400 audit(1769838470.587:531): avc: denied { ioctl } for pid=11800 comm="syz.3.2344" path="socket:[33786]" dev="sockfs" ino=33786 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.528929][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.550761][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.574887][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 253.592877][ T5886] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 253.602748][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.629308][ T5886] usb 5-1: config 0 descriptor?? [ 253.751907][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.838293][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.086873][ T5886] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 254.309959][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.408008][T11834] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 254.416594][T11834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.424191][T11834] IPv6: NLM_F_CREATE should be set when creating new route [ 254.556782][T11834] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 254.618084][T11834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.796045][ T1785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.114248][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.194299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 255.220813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 255.754637][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.761117][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831922][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.846610][ T30] audit: type=1326 audit(1769838473.027:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 256.056996][T11893] input: syz1 as /devices/virtual/input/input21 [ 256.198649][ T1785] usb 5-1: USB disconnect, device number 24 [ 256.390655][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.507154][ T30] audit: type=1326 audit(1769838473.677:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 256.698327][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 257.038682][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.350447][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.417529][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 257.583943][T11944] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2395'. [ 257.599611][ T5853] usb 6-1: config 0 has no interfaces? [ 257.605885][ T5853] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.643128][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.716429][ T5853] usb 6-1: config 0 descriptor?? [ 258.002304][ T5921] usb 6-1: USB disconnect, device number 3 [ 258.529731][ T30] audit: type=1400 audit(1769838475.717:534): avc: denied { create } for pid=11979 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.613598][ T30] audit: type=1400 audit(1769838475.717:535): avc: denied { setopt } for pid=11979 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.678292][ T30] audit: type=1400 audit(1769838475.747:536): avc: denied { write } for pid=11979 comm="syz.4.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 259.145688][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'. [ 259.181996][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2413'. [ 259.217821][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'. [ 259.286417][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2413'. [ 259.438108][ T30] audit: type=1326 audit(1769838476.627:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12009 comm="syz.2.2417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f652899aeb9 code=0x0 [ 259.589929][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.877024][T12030] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.951454][T12030] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.997662][ T5921] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 260.158493][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 260.181711][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.205103][ T5921] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.229316][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.238405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.258477][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.267537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.277198][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.297564][ T5921] usb 5-1: config 0 interface 0 has no altsetting 0 [ 260.327624][ T5921] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 260.364993][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.428747][ T5921] usb 5-1: config 0 descriptor?? [ 260.460780][ T5921] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 260.786916][T12027] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2423'. [ 261.025655][ T5921] usb 5-1: USB disconnect, device number 25 [ 261.036282][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.455740][T12077] overlayfs: failed to clone upperpath [ 261.509490][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.519335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.703201][T12085] netlink: 'syz.4.2440': attribute type 1 has an invalid length. [ 261.760487][T12085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.898241][T12085] bond2: (slave geneve3): making interface the new active one [ 261.908346][T12085] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 262.131013][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 262.147984][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.311306][ T24] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 262.362174][ T24] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 262.377621][ T24] usb 3-1: Product: syz [ 262.382138][ T24] usb 3-1: Manufacturer: syz [ 262.411398][ T24] usb 3-1: SerialNumber: syz [ 262.419902][ T24] usb 3-1: config 0 descriptor?? [ 262.438488][ T24] ch341 3-1:0.0: ch341-uart converter detected [ 262.572853][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2446'. [ 262.617605][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2446'. [ 262.788173][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.092986][ T30] audit: type=1400 audit(1769838480.277:538): avc: denied { name_bind } for pid=12128 comm="syz.4.2454" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 263.176743][ T30] audit: type=1400 audit(1769838480.307:539): avc: denied { node_bind } for pid=12128 comm="syz.4.2454" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 263.468664][ T24] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 263.679585][ T5853] usb 3-1: USB disconnect, device number 29 [ 263.696787][ T5853] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 263.719592][ T5853] ch341 3-1:0.0: device disconnected [ 263.741395][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 263.915125][ T30] audit: type=1400 audit(1769838481.097:540): avc: denied { open } for pid=12147 comm="syz.3.2460" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 263.954982][T12148] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.964219][ T65] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.972078][ T30] audit: type=1400 audit(1769838481.127:541): avc: denied { ioctl } for pid=12147 comm="syz.3.2460" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 264.024682][T12141] veth0: entered promiscuous mode [ 264.364521][ T30] audit: type=1400 audit(1769838481.537:542): avc: denied { getopt } for pid=12155 comm="syz.2.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.580549][T12167] SELinux: failed to load policy [ 264.739429][T12175] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 264.761717][T12179] Invalid ELF header len 30 [ 264.761916][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2472'. [ 264.809540][T12175] bond2: entered promiscuous mode [ 264.815197][T12175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.863413][T12181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.879200][T12181] bond2: (slave bond3): making interface the new active one [ 264.892011][T12181] bond3: entered promiscuous mode [ 264.899958][T12181] bond2: (slave bond3): Enslaving as an active interface with an up link [ 265.024355][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.032303][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.074573][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.082240][T12193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.090424][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.097786][T12193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.121140][T12193] bridge0: entered allmulticast mode [ 265.141283][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 265.218449][ T65] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.229880][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 265.232432][ T65] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.257031][ T65] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.278583][ T65] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.347942][ T36] net_ratelimit: 5 callbacks suppressed [ 265.347962][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.356827][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.372761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.776960][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2489'. [ 265.988761][ T5072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.997277][ T5813] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 266.005932][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.014698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.153371][ T5799] udevd[5799]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 266.206824][ T9951] udevd[9951]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 266.291809][T12230] 9pnet: p9_errstr2errno: server reported unknown error di3 [ 266.808575][T12242] SELinux: failed to load policy [ 267.116018][ T5853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.147580][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 267.268275][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.276905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.341128][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.355092][ T24] usb 4-1: config 0 has no interface number 0 [ 267.388650][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.423037][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.434132][ T24] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 267.452092][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.500373][ T24] usb 4-1: config 0 descriptor?? [ 267.909165][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.017653][ T24] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.001C/input/input22 [ 268.154857][ T24] holtek_kbd 0003:04D9:A055.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 268.242397][ T24] usb 4-1: USB disconnect, device number 25 [ 268.373877][T12286] fido_id[12286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 268.740734][ T30] audit: type=1400 audit(1769838485.927:543): avc: denied { write } for pid=12307 comm="syz.2.2524" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 268.777114][T12309] binder: 12307:12309 ioctl c018620c 200000000280 returned -1 [ 268.794369][ T30] audit: type=1400 audit(1769838485.957:544): avc: denied { map } for pid=12307 comm="syz.2.2524" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 269.418014][T12337] netlink: 'syz.2.2533': attribute type 29 has an invalid length. [ 269.433085][T12337] netlink: 'syz.2.2533': attribute type 29 has an invalid length. [ 269.460544][T12337] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2533'. [ 269.482071][T12340] netlink: 'syz.4.2534': attribute type 19 has an invalid length. [ 269.572506][T12340] netlink: 'syz.4.2534': attribute type 19 has an invalid length. [ 270.303156][T12357] SELinux: ebitmap: truncated map [ 270.342503][T12357] SELinux: failed to load policy [ 270.715726][T12375] net_ratelimit: 9 callbacks suppressed [ 270.715756][T12375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.735627][T12375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.744940][T12375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.053651][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2556'. [ 271.108984][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.117871][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.126499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.347244][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2561'. [ 271.510547][T12404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2563'. [ 271.748499][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.757314][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.765868][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.786906][ C0] Unknown status report in ack skb [ 271.888054][T12420] netlink: 'syz.1.2570': attribute type 1 has an invalid length. [ 272.010176][T12420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.017662][ T5853] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 272.070588][T12423] bond1: (slave geneve2): making interface the new active one [ 272.088150][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.120118][T12423] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 272.121489][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2574'. [ 272.168166][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 272.179410][ T5853] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 272.198924][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.219940][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.245637][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.294121][ T5853] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.323483][ T5853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.348099][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.525361][T12445] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 272.616795][ T5853] usb 5-1: usb_control_msg returned -32 [ 272.623531][ T5853] usbtmc 5-1:16.0: can't read capabilities [ 272.740189][T12445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.783520][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 272.817669][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 272.826858][T12455] netlink: 'syz.2.2584': attribute type 15 has an invalid length. [ 272.863182][T12453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.879284][T12453] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 272.903269][T12453] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 273.065273][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'. [ 273.065651][ T5072] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 273.088218][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 273.108242][T12455] netlink: 'syz.2.2584': attribute type 15 has an invalid length. [ 273.127056][ T5072] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 273.197671][ T5072] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 273.215847][ T5072] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 273.217538][ T5867] usb 5-1: USB disconnect, device number 26 [ 273.290537][T12466] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2589'. [ 273.896866][T12491] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 274.318630][ T5867] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 274.398811][T12508] netlink: 'syz.1.2606': attribute type 4 has an invalid length. [ 274.453532][T12508] netlink: 'syz.1.2606': attribute type 4 has an invalid length. [ 274.489344][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 274.516165][ T5867] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 274.537753][ T5867] usb 4-1: config 179 has no interface number 0 [ 274.559426][ T5867] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 274.598319][ T5867] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 274.624869][ T5867] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.657669][ T5867] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 274.680640][ T5867] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 274.695313][ T5867] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 274.706515][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.756066][T12499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.236919][T12527] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 275.303955][T12516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.397984][T12499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.438604][T12499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.470504][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2610'. [ 276.027670][ T1785] usb 4-1: USB disconnect, device number 26 [ 276.027861][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 276.042419][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 276.173931][T12531] vlan2: entered promiscuous mode [ 276.188621][T12531] bond0: entered promiscuous mode [ 276.211967][T12531] bond_slave_0: entered promiscuous mode [ 276.231104][T12527] net_ratelimit: 15 callbacks suppressed [ 276.231125][T12527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.250151][T12531] bond_slave_1: entered promiscuous mode [ 276.281653][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.330627][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.361499][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.407530][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.460857][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.527095][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.577515][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.586753][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.868519][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.437893][T12555] netlink: 'syz.4.2619': attribute type 10 has an invalid length. [ 277.508346][ T2988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.604943][T12555] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 277.688094][T12555] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.796697][T12559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.206459][ T30] audit: type=1400 audit(1769838495.387:545): avc: denied { create } for pid=12571 comm="syz.4.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 278.291676][T12576] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.327563][ T1785] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 278.338206][T12576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.479313][ T1785] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 278.500613][ T1785] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 278.537583][ T1785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.546475][ T1785] usb 4-1: Product: syz [ 278.571988][ T1785] usb 4-1: Manufacturer: syz [ 278.582216][ T1785] usb 4-1: SerialNumber: syz [ 278.600290][ T1785] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 278.641627][T12589] netlink: 'syz.2.2633': attribute type 12 has an invalid length. [ 278.818066][T12527] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 278.979406][T12527] usb 6-1: Using ep0 maxpacket: 32 [ 278.986717][T12527] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 278.997543][T12525] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 279.017334][T12527] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 279.035882][T12527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 279.037123][ T1785] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.056004][T12527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.080549][T12527] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.088589][ T1785] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 279.104830][T12527] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.107733][ T1785] usb 4-1: media controller created [ 279.171244][ T1785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.189561][T12527] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 279.211313][T12525] usb 3-1: Using ep0 maxpacket: 16 [ 279.221012][T12527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.231239][T12525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.262207][T12525] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 279.284355][T12527] usb 6-1: config 0 descriptor?? [ 279.298258][T12525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.315859][T12525] usb 3-1: config 0 descriptor?? [ 279.506462][T12526] usb 4-1: USB disconnect, device number 27 [ 279.539729][T12527] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 279.596945][T12527] usb 6-1: USB disconnect, device number 4 [ 279.611098][T12527] usblp0: removed [ 279.743487][T12525] betop 0003:11C0:5506.001D: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.2-1/input0 [ 279.828406][T12525] betop 0003:11C0:5506.001D: no inputs found [ 279.850545][ T30] audit: type=1400 audit(1769838497.037:546): avc: denied { read write } for pid=12616 comm="syz.4.2645" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 279.907747][ T36] wlan1: Trigger new scan to find an IBSS to join [ 279.938205][ T30] audit: type=1400 audit(1769838497.037:547): avc: denied { open } for pid=12616 comm="syz.4.2645" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 279.979606][T12525] usb 3-1: USB disconnect, device number 30 [ 280.107690][T12527] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.187144][ T30] audit: type=1400 audit(1769838497.367:548): avc: denied { bind } for pid=12624 comm="syz.3.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.267691][ T30] audit: type=1400 audit(1769838497.447:549): avc: denied { accept } for pid=12626 comm="syz.3.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.298620][T12527] usb 6-1: Using ep0 maxpacket: 32 [ 280.308871][T12527] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.318356][T12527] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.356958][T12527] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.373564][T12527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.408354][T12527] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.423622][T12527] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.444546][T12527] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.457229][T12527] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.478481][T12527] usb 6-1: config 0 descriptor?? [ 280.547007][T12629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.559951][T12629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.581464][T12629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 280.694089][T12527] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.736793][T12629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.748181][T12629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.763620][T12629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 280.782784][T12638] batadv_slave_1: entered promiscuous mode [ 280.792416][T12637] batadv_slave_1: left promiscuous mode [ 280.854049][T12629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.866128][T12629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.878181][T12629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 280.960911][T12629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.972477][T12629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.983841][T12629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 281.041391][ T2988] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 281.146426][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.177666][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 281.207527][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.282718][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.320783][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 281.344666][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.413522][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.426548][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 281.458333][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.518372][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.538127][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 281.557854][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 281.817529][ T30] audit: type=1400 audit(1769838498.997:550): avc: denied { read } for pid=12667 comm="syz.3.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.880180][ T30] audit: type=1400 audit(1769838499.067:551): avc: denied { remount } for pid=12672 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 282.104342][ T1785] usb 6-1: USB disconnect, device number 5 [ 282.129886][ T1785] usblp0: removed [ 282.246010][T12686] bridge0: entered allmulticast mode [ 282.262632][T12686] pim6reg: entered allmulticast mode [ 282.274623][T12686] pim6reg: left allmulticast mode [ 282.280711][T12686] bridge0: left allmulticast mode [ 282.933994][T12709] block nbd3: shutting down sockets [ 282.948170][ T36] wlan1: Trigger new scan to find an IBSS to join [ 284.096529][T12757] ip6gre1: entered promiscuous mode [ 284.112303][T12757] ip6gre1: entered allmulticast mode [ 284.330443][ T30] audit: type=1326 audit(1769838501.507:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12766 comm="syz.3.2701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7953b9aeb9 code=0x0 [ 284.384489][ T30] audit: type=1400 audit(1769838501.547:553): avc: denied { name_bind } for pid=12769 comm="syz.5.2702" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 284.740463][T12525] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 284.897515][T12525] usb 5-1: Using ep0 maxpacket: 32 [ 284.905258][T12525] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 284.921525][T12525] usb 5-1: config 0 has no interface number 0 [ 284.933988][T12525] usb 5-1: config 0 interface 182 has no altsetting 0 [ 284.945317][T12525] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 284.957759][T12525] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.970307][T12525] usb 5-1: Product: syz [ 284.975318][T12525] usb 5-1: Manufacturer: syz [ 284.984590][T12525] usb 5-1: SerialNumber: syz [ 284.992825][T12525] usb 5-1: config 0 descriptor?? [ 285.004209][T12525] hub 5-1:0.182: bad descriptor, ignoring hub [ 285.010994][T12525] hub 5-1:0.182: probe with driver hub failed with error -5 [ 285.255933][T12525] kaweth 5-1:0.182: Firmware present in device. [ 285.440177][T12525] kaweth 5-1:0.182: Statistics collection: 0 [ 285.446260][T12525] kaweth 5-1:0.182: Multicast filter limit: 0 [ 285.459832][T12525] kaweth 5-1:0.182: MTU: 0 [ 285.464996][T12525] kaweth 5-1:0.182: Read MAC address 00:00:00:00:00:00 [ 285.909805][ T2988] wlan1: Trigger new scan to find an IBSS to join [ 286.071893][T12525] kaweth 5-1:0.182: kaweth interface created at eth5 [ 286.119339][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2729'. [ 286.344400][T12828] syz.5.2729 (12828) used greatest stack depth: 17752 bytes left [ 286.479896][T12527] usb 5-1: USB disconnect, device number 27 [ 286.840539][ T2988] wlan1: Creating new IBSS network, BSSID e6:fd:0e:16:35:ef [ 287.233388][T12880] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2742'. [ 287.246401][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 287.277796][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2745'. [ 287.365775][ T30] audit: type=1400 audit(1769838504.547:554): avc: denied { map } for pid=12888 comm="syz.1.2746" path="socket:[38923]" dev="sockfs" ino=38923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 287.711626][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2755'. [ 288.027622][ T5924] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 288.157206][T12931] fuse: Bad value for 'fd' [ 288.217871][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 288.235222][ T5924] usb 3-1: config index 0 descriptor too short (expected 80, got 72) [ 288.252323][ T5924] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 288.297556][ T5924] usb 3-1: config 0 has no interfaces? [ 288.308801][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.348526][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 288.356641][ T5924] usb 3-1: SerialNumber: syz [ 288.405937][ T5924] usb 3-1: config 0 descriptor?? [ 288.692476][ T5924] usb 3-1: USB disconnect, device number 31 [ 288.767963][T12525] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 288.931379][T12525] usb 6-1: Using ep0 maxpacket: 32 [ 288.938717][T12525] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 288.949202][T12525] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 288.959509][T12525] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 288.968963][T12525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.978983][T12525] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 288.989618][T12525] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 289.004081][T12525] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 289.019431][T12525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.033635][T12525] usb 6-1: config 0 descriptor?? [ 289.262889][T12525] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 289.297229][T12525] usb 6-1: USB disconnect, device number 6 [ 289.304683][ T30] audit: type=1400 audit(1769838506.487:555): avc: denied { write } for pid=12954 comm="syz.3.2769" path="socket:[38512]" dev="sockfs" ino=38512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 289.357187][T12525] usblp0: removed [ 289.697601][ T30] audit: type=1400 audit(1769838506.867:556): avc: denied { read } for pid=12972 comm="syz.2.2776" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 289.753477][ T30] audit: type=1400 audit(1769838506.867:557): avc: denied { open } for pid=12972 comm="syz.2.2776" path="/574/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 289.802084][T12525] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 289.903626][T12983] IPVS: Error joining to the multicast group [ 290.021562][T12990] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 290.022647][T12525] usb 6-1: Using ep0 maxpacket: 32 [ 290.061930][T12525] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 290.075561][T12990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.089053][T12525] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 290.099293][T12525] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 290.127781][T12525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.141882][T12525] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.174045][T12525] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.206337][T12525] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 290.218316][T12525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.233771][T12525] usb 6-1: config 0 descriptor?? [ 290.448351][T12525] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 290.716100][ T1785] usb 6-1: USB disconnect, device number 7 [ 290.728318][ T1785] usblp0: removed [ 290.935400][ T30] audit: type=1400 audit(1769838508.117:558): avc: denied { watch_sb } for pid=13023 comm="syz.2.2797" path="/577" dev="tmpfs" ino=3007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 291.704948][T13054] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2808'. [ 291.739393][T13055] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2809'. [ 292.082330][ T30] audit: type=1804 audit(1769838509.267:559): pid=13066 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2814" name="/newroot/579/file0/file1" dev="overlay" ino=3024 res=1 errno=0 [ 292.139379][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 292.174173][T13071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2815'. [ 292.580000][T13096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2828'. [ 292.622680][T13096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2828'. [ 292.769244][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2833'. [ 292.799269][T13107] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 293.038100][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2837'. [ 293.051578][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2837'. [ 293.389753][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2843'. [ 293.435876][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.455687][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.481273][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.500117][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.129859][ T30] audit: type=1400 audit(1769838511.257:560): avc: denied { read } for pid=13146 comm="syz.4.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.245647][ T30] audit: type=1326 audit(1769838512.427:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.270182][ T30] audit: type=1326 audit(1769838512.427:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.304869][ T30] audit: type=1326 audit(1769838512.427:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.337608][ T30] audit: type=1326 audit(1769838512.427:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.363183][ T30] audit: type=1326 audit(1769838512.427:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.388429][ T30] audit: type=1326 audit(1769838512.427:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.412949][ T30] audit: type=1326 audit(1769838512.427:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.442749][ T30] audit: type=1326 audit(1769838512.427:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.468524][ T30] audit: type=1326 audit(1769838512.427:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 295.493578][ T30] audit: type=1326 audit(1769838512.427:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a2e39aeb9 code=0x7fc00000 [ 296.812707][T13230] xt_hashlimit: size too large, truncated to 1048576 [ 297.427480][T13159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.925610][T13275] __nla_validate_parse: 5 callbacks suppressed [ 297.925629][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'. [ 298.052656][T13275] team0: entered promiscuous mode [ 298.085338][T13275] team0: entered allmulticast mode [ 298.097914][T13275] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.284815][T13282] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2899'. [ 299.100292][T13323] syz_tun: entered allmulticast mode [ 299.123344][T13322] syz_tun: left allmulticast mode [ 299.310679][T13331] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2919'. [ 299.360354][T13335] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2921'. [ 299.403701][T13337] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2920'. [ 300.349485][ T1785] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 300.361354][T13376] fuse: Bad value for 'fd' [ 300.509673][ T1785] usb 3-1: Using ep0 maxpacket: 32 [ 300.523600][ T1785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.549995][ T1785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.588662][ T1785] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 300.619446][ T1785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.630545][ T1785] usb 3-1: config 0 descriptor?? [ 300.656462][T13395] netlink: 'syz.5.2941': attribute type 1 has an invalid length. [ 300.826927][T13400] bond1: (slave bridge1): making interface the new active one [ 300.841558][T13361] clip:clip_setentry: non-CLIP VCC [ 300.851421][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 300.851449][ T30] audit: type=1400 audit(1769838774.024:634): avc: denied { create } for pid=13360 comm="syz.2.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 300.875174][T13400] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 300.906637][ T1785] usbhid 3-1:0.0: can't add hid device: -71 [ 300.916709][ T1785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 300.935936][ T30] audit: type=1400 audit(1769838774.024:635): avc: denied { ioctl } for pid=13360 comm="syz.2.2930" path="socket:[40682]" dev="sockfs" ino=40682 ioctlcmd=0x61e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 300.967682][ T1785] usb 3-1: USB disconnect, device number 32 [ 301.843232][T13456] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2966'. [ 301.970450][ T5924] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 302.128938][ T5924] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.137408][ T5924] usb 6-1: config 0 has no interface number 0 [ 302.144037][ T5924] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.155670][ T5924] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.166471][ T5924] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 302.175908][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.188618][ T5924] usb 6-1: config 0 descriptor?? [ 302.666413][ T5924] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.001E/input/input24 [ 302.737815][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 302.755154][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2977'. [ 302.781315][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 302.805301][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2977'. [ 302.829139][ T5924] holtek_kbd 0003:04D9:A055.001E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 303.041197][T13488] netlink: 'syz.1.2979': attribute type 3 has an invalid length. [ 303.138353][ T5924] usb 6-1: USB disconnect, device number 8 [ 303.168552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 303.177085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 303.185663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 303.194390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 303.576771][T13497] cgroup: fork rejected by pids controller in /syz2 [ 304.290708][T13565] program syz.3.2999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.396565][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 304.405783][T13574] netlink: 'syz.3.3002': attribute type 11 has an invalid length. [ 304.417192][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 304.426572][T13574] netlink: 'syz.3.3002': attribute type 11 has an invalid length. [ 304.783402][ T30] audit: type=1326 audit(1769838777.964:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13589 comm="syz.3.3007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7953b9aeb9 code=0x0 [ 306.258398][T12527] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 306.440785][T12527] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 306.451845][T12527] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.467691][T12527] usb 6-1: Product: syz [ 306.472088][T12527] usb 6-1: Manufacturer: syz [ 306.491014][T13646] overlayfs: failed to clone upperpath [ 306.496696][T12527] usb 6-1: SerialNumber: syz [ 306.517645][T12527] usb 6-1: config 0 descriptor?? [ 306.617551][ T5921] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 306.642148][T13652] overlayfs: failed to clone upperpath [ 306.787508][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 306.790077][ T30] audit: type=1400 audit(1769838779.964:637): avc: denied { sys_module } for pid=13653 comm="syz.1.3033" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 306.809368][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 306.845345][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 306.874507][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 306.884079][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.897505][ T5921] usb 3-1: Product: syz [ 306.901774][ T5921] usb 3-1: Manufacturer: syz [ 306.916683][ T5921] usb 3-1: SerialNumber: syz [ 306.924061][ T5921] usb 3-1: config 0 descriptor?? [ 306.941007][ T5921] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 306.982081][T13659] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3034'. [ 307.017644][ T5921] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 307.298948][ T30] audit: type=1400 audit(1769838780.474:638): avc: denied { set_context_mgr } for pid=13665 comm="syz.3.3037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 307.553912][ T5921] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 307.570260][ T5921] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 307.986785][T12527] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 307.997085][ T5921] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 308.003475][T12527] usb 6-1: USB disconnect, device number 9 [ 308.017809][T12527] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 308.024633][ T5921] em28xx 3-1:0.0: No AC97 audio processor [ 308.056456][ T5476] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 308.068219][ T5921] usb 3-1: USB disconnect, device number 33 [ 308.085608][ T5921] em28xx 3-1:0.0: Disconnecting em28xx [ 308.096000][ T5921] em28xx 3-1:0.0: Freeing device [ 308.246966][T12527] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 311.312318][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3068'. [ 311.801217][T13791] evm: overlay not supported [ 311.842697][ T30] audit: type=1400 audit(1769838785.024:639): avc: denied { mounton } for pid=13792 comm="syz.3.3079" path="/file0" dev="ramfs" ino=42243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 312.328096][T12527] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 312.507563][T12527] usb 4-1: Using ep0 maxpacket: 16 [ 312.517907][T12527] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.531151][T12527] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.545269][T12527] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.555178][T12527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.564753][T12527] usb 4-1: Product: syz [ 312.570615][T12527] usb 4-1: Manufacturer: syz [ 312.576229][T12527] usb 4-1: SerialNumber: syz [ 312.586913][T12527] usb 4-1: config 0 descriptor?? [ 312.605669][T12527] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.622018][T12527] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 312.692734][ T30] audit: type=1400 audit(1769838785.874:640): avc: denied { read write } for pid=13827 comm="syz.1.3095" name="file0" dev="tmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 312.747117][ T30] audit: type=1400 audit(1769838785.874:641): avc: denied { open } for pid=13827 comm="syz.1.3095" path="/702/file0" dev="tmpfs" ino=3611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 312.791975][ T30] audit: type=1400 audit(1769838785.904:642): avc: denied { ioctl } for pid=13827 comm="syz.1.3095" path="/702/file0" dev="tmpfs" ino=3611 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 313.086173][ T30] audit: type=1400 audit(1769838786.264:643): avc: denied { accept } for pid=13840 comm="syz.1.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 313.232045][T12527] em28xx 4-1:0.0: unknown em28xx chip ID (155) [ 313.433296][T12527] em28xx 4-1:0.0: Config register raw data: 0x23 [ 313.440287][T12527] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 313.448153][T12527] em28xx 4-1:0.0: No AC97 audio processor [ 313.644872][T12527] usb 4-1: USB disconnect, device number 28 [ 313.987567][ T30] audit: type=1400 audit(1769838787.164:644): avc: denied { bind } for pid=13857 comm="syz.5.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.260595][ T30] audit: type=1400 audit(1769838787.434:645): avc: denied { write } for pid=13870 comm="syz.5.3112" name="unix" dev="proc" ino=4026533989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 314.344157][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 314.673209][T13894] netlink: zone id is out of range [ 314.678512][T13894] netlink: zone id is out of range [ 314.683860][T13894] netlink: zone id is out of range [ 314.690482][T13894] netlink: zone id is out of range [ 314.695639][T13894] netlink: zone id is out of range [ 314.701414][T13894] netlink: zone id is out of range [ 314.706710][T13894] netlink: zone id is out of range [ 314.712236][T13894] netlink: zone id is out of range [ 314.713102][T13897] SELinux: failed to load policy [ 314.717752][T13894] netlink: zone id is out of range [ 314.727971][T13894] netlink: zone id is out of range [ 314.745656][ T30] audit: type=1400 audit(1769838787.924:646): avc: denied { append } for pid=13892 comm="syz.3.3122" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 314.965642][T13914] all: renamed from bridge_slave_0 [ 315.078036][ T30] audit: type=1400 audit(1769838788.254:647): avc: denied { create } for pid=13916 comm="syz.5.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 315.138218][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 315.150769][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3133'. [ 315.304980][ T30] audit: type=1400 audit(1769838788.484:648): avc: denied { cmd } for pid=13927 comm="syz.1.3135" path="socket:[42502]" dev="sockfs" ino=42502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 315.553047][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 315.899765][T13940] bridge_slave_1: left allmulticast mode [ 315.913359][T13940] bridge_slave_1: left promiscuous mode [ 315.925977][T13940] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.019385][T13940] bridge_slave_0: left allmulticast mode [ 316.037845][T13940] bridge_slave_0: left promiscuous mode [ 316.043730][T13940] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.318821][T13965] netlink: 'syz.1.3148': attribute type 1 has an invalid length. [ 317.004139][T13965] bond2: entered promiscuous mode [ 317.046690][T13965] bond2: entered allmulticast mode [ 317.068679][T13965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.136760][T13967] erspan1: entered allmulticast mode [ 317.193197][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204160][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.241697][T13967] bond2: (slave erspan1): making interface the new active one [ 317.278448][T13967] erspan1: entered promiscuous mode [ 317.309083][T13967] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 317.780592][T13982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.871640][T13997] bond3: option arp_validate: invalid value (2048) [ 317.919056][T13997] bond3 (unregistering): Released all slaves [ 318.465151][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.154416][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.211018][T14028] bridge_slave_0 (unregistering): left allmulticast mode [ 319.247783][T14051] sctp: [Deprecated]: syz.5.3181 (pid 14051) Use of int in max_burst socket option. [ 319.247783][T14051] Use struct sctp_assoc_value instead [ 319.253572][T14028] bridge_slave_0 (unregistering): left promiscuous mode [ 319.294981][T14028] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.985878][T14070] xt_hashlimit: size too large, truncated to 1048576 [ 321.048707][ T30] audit: type=1800 audit(1769838794.224:649): pid=14104 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3201" name="bus" dev="overlay" ino=3452 res=0 errno=0 [ 321.353221][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 321.397706][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 321.406888][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 321.458150][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 321.772480][T14131] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.3215'. [ 321.810064][ T5921] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 321.817930][T14129] net_ratelimit: 34 callbacks suppressed [ 321.817942][T14129] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.940264][T14138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14138 comm=syz.3.3218 [ 321.992540][T14138] netlink: 'syz.3.3218': attribute type 1 has an invalid length. [ 322.014205][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.025881][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.054822][ T5921] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 322.064737][T14145] bond2: (slave bridge1): making interface the new active one [ 322.071848][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.074482][T14145] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 322.104355][ T5921] usb 6-1: config 0 descriptor?? [ 322.339185][T14149] binder: 14148:14149 ioctl c0306201 200000000640 returned -22 [ 322.355614][ T30] audit: type=1400 audit(1769838795.534:650): avc: denied { read write } for pid=14152 comm="syz.2.3223" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 322.408531][ T30] audit: type=1400 audit(1769838795.534:651): avc: denied { open } for pid=14152 comm="syz.2.3223" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 322.547630][T12525] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 322.719297][T12525] usb 5-1: Using ep0 maxpacket: 8 [ 322.735288][T12525] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 322.737971][ T5921] usb 6-1: language id specifier not provided by device, defaulting to English [ 322.765413][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3226'. [ 322.775605][T12525] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.807951][T12525] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.820759][T12525] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 322.834502][T12525] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 322.875294][T12525] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.932723][T12525] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.963554][T12525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.141047][ T5921] uclogic 0003:256C:006D.001F: interface is invalid, ignoring [ 323.191133][T12525] usb 5-1: usb_control_msg returned -32 [ 323.201489][T12525] usbtmc 5-1:16.0: can't read capabilities [ 323.246590][T14177] overlayfs: failed to clone upperpath [ 323.257550][T12519] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 323.401210][ T5921] usb 6-1: USB disconnect, device number 10 [ 323.420730][T12519] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 323.431602][T12519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.440140][T12519] usb 3-1: Product: syz [ 323.444562][T12519] usb 3-1: Manufacturer: syz [ 323.450046][T12519] usb 3-1: SerialNumber: syz [ 323.465607][T12519] usb 3-1: config 0 descriptor?? [ 323.684002][T12519] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 323.947537][T14191] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 324.150860][T12525] usb 5-1: USB disconnect, device number 28 [ 324.294145][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3240'. [ 324.707349][T12519] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 324.726905][T12519] usb 3-1: USB disconnect, device number 34 [ 325.384055][T14220] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3249'. [ 325.857789][T12526] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 326.039413][T12526] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 326.059182][T12526] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.074124][T12526] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.083572][T12526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.350564][T14252] kernel read not supported for file /cpuacct.usage_percpu (pid: 14252 comm: syz.2.3262) [ 326.395523][ T30] audit: type=1800 audit(1769838799.554:652): pid=14252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3262" name="cpuacct.usage_percpu" dev="mqueue" ino=44080 res=0 errno=0 [ 326.447281][T12526] usb 6-1: usb_control_msg returned -32 [ 326.473015][T12526] usbtmc 6-1:16.0: can't read capabilities [ 326.616653][ T30] audit: type=1400 audit(1769838799.794:653): avc: denied { shutdown } for pid=14256 comm="syz.4.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.827731][T12526] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 326.919129][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 326.946478][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 326.989183][T12526] usb 4-1: Using ep0 maxpacket: 16 [ 327.016339][T12527] usb 6-1: USB disconnect, device number 11 [ 327.033524][T12526] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 327.043665][T12526] usb 4-1: config 1 has no interface number 0 [ 327.062468][T12526] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 327.078498][T12526] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 327.090462][T12526] usb 4-1: config 1 interface 105 has no altsetting 0 [ 327.106827][T12526] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 327.117692][T12526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.125854][T12526] usb 4-1: Product: syz [ 327.140499][T12526] usb 4-1: Manufacturer: syz [ 327.147852][T12526] usb 4-1: SerialNumber: syz [ 327.162509][T14260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.170077][T14260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.587927][ T5867] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 327.718458][T14260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.768548][T14260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 327.906596][T14288] IPv4: Oversized IP packet from 172.20.20.24 [ 327.916669][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 327.924471][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 327.954824][ T5867] usb 5-1: config 8 has an invalid interface number: 8 but max is 1 [ 327.964458][ T5867] usb 5-1: config 8 has an invalid interface number: 8 but max is 1 [ 327.974166][ T5867] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 328.011587][ T5867] usb 5-1: config 8 has no interface number 0 [ 328.027540][ T5867] usb 5-1: config 8 interface 8 has no altsetting 1 [ 328.066057][ T5867] usb 5-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 328.084178][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.094960][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3277'. [ 328.114898][ T5867] usb 5-1: Product: syz [ 328.121650][ T5867] usb 5-1: Manufacturer: syz [ 328.126301][ T5867] usb 5-1: SerialNumber: syz [ 328.138654][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3277'. [ 328.239463][T12526] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 328.264379][T12526] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 328.296217][T12526] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 328.347265][T12526] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7e:0b:04:68:91:7a [ 328.376581][T12527] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 328.377619][ T30] audit: type=1400 audit(1769838801.554:654): avc: denied { getopt } for pid=14280 comm="syz.4.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.422817][T12526] usb 4-1: USB disconnect, device number 29 [ 328.432697][ T5867] qmi_wwan 5-1:8.8: probe with driver qmi_wwan failed with error -22 [ 328.443407][T12526] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 328.461853][ T5867] usb 5-1: USB disconnect, device number 29 [ 328.473747][T14300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.504263][T14300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.518007][T14300] bond0 (unregistering): Released all slaves [ 328.527602][T12527] usb 3-1: Using ep0 maxpacket: 16 [ 328.549664][T12527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.566754][T12527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.593113][T12527] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.606408][T12527] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 328.619892][T12526] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 328.641043][T12527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.649914][T12526] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 328.663142][T12527] usb 3-1: config 0 descriptor?? [ 328.677671][T12526] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 329.076965][ T30] audit: type=1400 audit(1769838802.254:655): avc: denied { execmod } for pid=14316 comm="syz.4.3288" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 329.102932][T12527] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 329.150972][T12527] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 329.165993][T12527] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 329.186102][T12527] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 329.203571][T12527] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 329.244155][T12527] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 329.300781][ T30] audit: type=1400 audit(1769838802.484:656): avc: denied { append } for pid=14295 comm="syz.2.3278" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 329.301214][T14296] random: crng reseeded on system resumption [ 329.370739][T12527] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 329.412641][ T30] audit: type=1400 audit(1769838802.484:657): avc: denied { open } for pid=14295 comm="syz.2.3278" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 329.424052][T12527] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 329.493347][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 329.536096][ T30] audit: type=1400 audit(1769838802.664:658): avc: denied { listen } for pid=14332 comm="syz.5.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.560721][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 329.566608][T14331] netlink: 'syz.4.3292': attribute type 30 has an invalid length. [ 329.590090][T12527] usb 3-1: USB disconnect, device number 35 [ 329.606077][T14336] netlink: 'syz.4.3292': attribute type 30 has an invalid length. [ 329.615509][ T5867] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 329.637264][T12527] ------------[ cut here ]------------ [ 329.642770][T12527] workqueue: work disable count underflowed [ 329.648680][T12527] WARNING: kernel/workqueue.c:4359 at enable_work+0x2d1/0x320, CPU#0: kworker/0:16/12527 [ 329.650079][ T30] audit: type=1400 audit(1769838802.704:659): avc: denied { accept } for pid=14332 comm="syz.5.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.659105][T12527] Modules linked in: [ 329.659190][T12527] CPU: 0 UID: 0 PID: 12527 Comm: kworker/0:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 329.659224][T12527] Tainted: [L]=SOFTLOCKUP [ 329.659233][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 329.709343][T12527] Workqueue: usb_hub_wq hub_event [ 329.714605][T12527] RIP: 0010:enable_work+0x2d1/0x320 [ 329.719949][T12527] Code: ff e8 93 74 38 00 e8 6e 3b a8 09 e9 61 ff ff ff e8 84 74 38 00 90 0f 0b 90 e9 17 fe ff ff e8 76 74 38 00 48 8d 3d ef ba eb 0e <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ca c6 a2 00 e9 [ 329.739809][T12527] RSP: 0018:ffffc9000bad7348 EFLAGS: 00010087 [ 329.746100][T12527] RAX: 00000000000102db RBX: 0000000000000000 RCX: ffffc9001b804000 [ 329.754171][T12527] RDX: 0000000000100000 RSI: ffffffff81ce86ea RDI: ffffffff90ba41e0 [ 329.762760][T12527] RBP: ffff88807874d738 R08: 0000000000000007 R09: 0000000000000000 [ 329.770737][T12527] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 329.778889][T12527] R13: 1ffff9200175ae6a R14: ffff88807874d698 R15: 000000007fffffff [ 329.787000][T12527] FS: 0000000000000000(0000) GS:ffff8881245db000(0000) knlGS:0000000000000000 [ 329.796102][T12527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.802780][T12527] CR2: 000055559303ea28 CR3: 000000005e9c0000 CR4: 00000000003526f0 [ 329.810746][T12527] Call Trace: [ 329.814108][T12527] [ 329.817035][T12527] ? __pfx_enable_work+0x10/0x10 [ 329.821964][T12527] ? __pfx___might_resched+0x10/0x10 [ 329.827250][T12527] cancel_delayed_work_sync+0x96/0xf0 [ 329.832908][T12527] thermal_zone_device_unregister+0x28e/0x4e0 [ 329.839189][T12527] ? __pfx_shield_remove+0x10/0x10 [ 329.844335][T12527] power_supply_unregister+0x10a/0x150 [ 329.849808][T12527] shield_remove+0x75/0x130 [ 329.854410][T12527] ? __pfx_shield_remove+0x10/0x10 [ 329.859517][T12527] hid_device_remove+0xd1/0x270 [ 329.864441][T12527] ? __pfx_hid_device_remove+0x10/0x10 [ 329.869977][T12527] device_remove+0xcb/0x180 [ 329.874598][T12527] device_release_driver_internal+0x42e/0x600 [ 329.880831][T12527] bus_remove_device+0x22f/0x440 [ 329.885801][T12527] device_del+0x376/0x9b0 [ 329.890127][T12527] ? __pfx_device_del+0x10/0x10 [ 329.894984][T12527] ? do_raw_spin_lock+0x128/0x260 [ 329.900021][T12527] hid_destroy_device+0x19c/0x240 [ 329.905139][T12527] usbhid_disconnect+0xa0/0xe0 [ 329.909930][T12527] usb_unbind_interface+0x1dd/0x9e0 [ 329.915267][T12527] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 329.921113][T12527] ? __pfx_usb_unbind_interface+0x10/0x10 [ 329.926861][T12527] device_remove+0x12a/0x180 [ 329.931683][T12527] device_release_driver_internal+0x42e/0x600 [ 329.937793][T12527] bus_remove_device+0x22f/0x440 [ 329.943134][T12527] device_del+0x376/0x9b0 [ 329.947517][T12527] ? kfree_const+0x5a/0x70 [ 329.951941][T12527] ? __pfx_device_del+0x10/0x10 [ 329.956774][T12527] ? kobject_put+0xb9/0x640 [ 329.961456][T12527] usb_disable_device+0x367/0x810 [ 329.966494][T12527] usb_disconnect+0x2e2/0x9a0 [ 329.971375][T12527] hub_event+0x1d0c/0x4af0 [ 329.976022][T12527] ? __lock_acquire+0x4a5/0x2630 [ 329.981163][T12527] ? do_raw_spin_unlock+0x145/0x1e0 [ 329.987094][T12527] ? __pfx_hub_event+0x10/0x10 [ 329.991980][T12527] ? interval_tree_iter_next+0x130/0x2e0 [ 329.997757][T12527] ? process_one_work+0x80b/0x1840 [ 330.003216][T12527] ? rcu_is_watching+0x12/0xc0 [ 330.008043][T12527] process_one_work+0x9c2/0x1840 [ 330.013100][T12527] ? __pfx_process_one_work+0x10/0x10 [ 330.018694][T12527] ? assign_work+0x19c/0x250 [ 330.023545][T12527] worker_thread+0x5da/0xe40 [ 330.028284][T12527] ? kthread+0x17d/0x730 [ 330.032558][T12527] ? __pfx_worker_thread+0x10/0x10 [ 330.037697][T12527] kthread+0x3b3/0x730 [ 330.041905][T12527] ? __pfx_kthread+0x10/0x10 [ 330.046560][T12527] ? ret_from_fork+0x79/0xaf0 [ 330.051295][T12527] ? ret_from_fork+0x79/0xaf0 [ 330.056003][T12527] ? rcu_is_watching+0x12/0xc0 [ 330.060811][T12527] ? __pfx_kthread+0x10/0x10 [ 330.065419][T12527] ret_from_fork+0x754/0xaf0 [ 330.070134][T12527] ? __pfx_ret_from_fork+0x10/0x10 [ 330.075287][T12527] ? __switch_to+0x7b9/0x10c0 [ 330.079969][T12527] ? __pfx_kthread+0x10/0x10 [ 330.084564][T12527] ret_from_fork_asm+0x1a/0x30 [ 330.089358][T12527] [ 330.092643][T12527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 330.100007][T12527] CPU: 0 UID: 0 PID: 12527 Comm: kworker/0:16 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.111193][T12527] Tainted: [L]=SOFTLOCKUP [ 330.115501][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 330.125857][T12527] Workqueue: usb_hub_wq hub_event [ 330.130901][T12527] Call Trace: [ 330.134274][T12527] [ 330.137300][T12527] dump_stack_lvl+0x100/0x190 [ 330.141980][T12527] vpanic+0x20d/0x630 [ 330.145947][T12527] panic+0xd1/0xd1 [ 330.149656][T12527] ? __pfx_panic+0x10/0x10 [ 330.154499][T12527] check_panic_on_warn.cold+0x19/0x34 [ 330.159855][T12527] ? enable_work+0x2d1/0x320 [ 330.164441][T12527] __warn.cold+0x191/0x2f8 [ 330.168851][T12527] __report_bug+0x296/0x3d0 [ 330.173337][T12527] ? enable_work+0x2d1/0x320 [ 330.177930][T12527] ? __pfx___report_bug+0x10/0x10 [ 330.182938][T12527] ? enable_work+0x2ca/0x320 [ 330.187601][T12527] ? find_held_lock+0x2b/0x80 [ 330.192261][T12527] ? __flush_work+0x928/0xcb0 [ 330.196933][T12527] ? __flush_work+0x928/0xcb0 [ 330.201780][T12527] report_bug_entry+0xe1/0x290 [ 330.206542][T12527] ? enable_work+0x2d1/0x320 [ 330.211129][T12527] handle_bug+0x1c9/0x2a0 [ 330.215674][T12527] exc_invalid_op+0x17/0x50 [ 330.220221][T12527] asm_exc_invalid_op+0x1a/0x20 [ 330.225074][T12527] RIP: 0010:enable_work+0x2d1/0x320 [ 330.230347][T12527] Code: ff e8 93 74 38 00 e8 6e 3b a8 09 e9 61 ff ff ff e8 84 74 38 00 90 0f 0b 90 e9 17 fe ff ff e8 76 74 38 00 48 8d 3d ef ba eb 0e <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ca c6 a2 00 e9 [ 330.251252][T12527] RSP: 0018:ffffc9000bad7348 EFLAGS: 00010087 [ 330.257321][T12527] RAX: 00000000000102db RBX: 0000000000000000 RCX: ffffc9001b804000 [ 330.265278][T12527] RDX: 0000000000100000 RSI: ffffffff81ce86ea RDI: ffffffff90ba41e0 [ 330.273240][T12527] RBP: ffff88807874d738 R08: 0000000000000007 R09: 0000000000000000 [ 330.281196][T12527] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 330.289148][T12527] R13: 1ffff9200175ae6a R14: ffff88807874d698 R15: 000000007fffffff [ 330.297109][T12527] ? enable_work+0x2ca/0x320 [ 330.301703][T12527] ? enable_work+0x2ca/0x320 [ 330.306316][T12527] ? __pfx_enable_work+0x10/0x10 [ 330.311269][T12527] ? __pfx___might_resched+0x10/0x10 [ 330.316550][T12527] cancel_delayed_work_sync+0x96/0xf0 [ 330.321917][T12527] thermal_zone_device_unregister+0x28e/0x4e0 [ 330.327994][T12527] ? __pfx_shield_remove+0x10/0x10 [ 330.333103][T12527] power_supply_unregister+0x10a/0x150 [ 330.338568][T12527] shield_remove+0x75/0x130 [ 330.343152][T12527] ? __pfx_shield_remove+0x10/0x10 [ 330.348351][T12527] hid_device_remove+0xd1/0x270 [ 330.353224][T12527] ? __pfx_hid_device_remove+0x10/0x10 [ 330.358743][T12527] device_remove+0xcb/0x180 [ 330.363233][T12527] device_release_driver_internal+0x42e/0x600 [ 330.369375][T12527] bus_remove_device+0x22f/0x440 [ 330.374308][T12527] device_del+0x376/0x9b0 [ 330.378657][T12527] ? __pfx_device_del+0x10/0x10 [ 330.383490][T12527] ? do_raw_spin_lock+0x128/0x260 [ 330.388533][T12527] hid_destroy_device+0x19c/0x240 [ 330.393727][T12527] usbhid_disconnect+0xa0/0xe0 [ 330.398489][T12527] usb_unbind_interface+0x1dd/0x9e0 [ 330.403684][T12527] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 330.409311][T12527] ? __pfx_usb_unbind_interface+0x10/0x10 [ 330.415016][T12527] device_remove+0x12a/0x180 [ 330.419588][T12527] device_release_driver_internal+0x42e/0x600 [ 330.425643][T12527] bus_remove_device+0x22f/0x440 [ 330.430576][T12527] device_del+0x376/0x9b0 [ 330.434893][T12527] ? kfree_const+0x5a/0x70 [ 330.439396][T12527] ? __pfx_device_del+0x10/0x10 [ 330.444240][T12527] ? kobject_put+0xb9/0x640 [ 330.448762][T12527] usb_disable_device+0x367/0x810 [ 330.453870][T12527] usb_disconnect+0x2e2/0x9a0 [ 330.458552][T12527] hub_event+0x1d0c/0x4af0 [ 330.463003][T12527] ? __lock_acquire+0x4a5/0x2630 [ 330.468042][T12527] ? do_raw_spin_unlock+0x145/0x1e0 [ 330.473276][T12527] ? __pfx_hub_event+0x10/0x10 [ 330.478117][T12527] ? interval_tree_iter_next+0x130/0x2e0 [ 330.483922][T12527] ? process_one_work+0x80b/0x1840 [ 330.489262][T12527] ? rcu_is_watching+0x12/0xc0 [ 330.494441][T12527] process_one_work+0x9c2/0x1840 [ 330.499642][T12527] ? __pfx_process_one_work+0x10/0x10 [ 330.505351][T12527] ? assign_work+0x19c/0x250 [ 330.509943][T12527] worker_thread+0x5da/0xe40 [ 330.515359][T12527] ? kthread+0x17d/0x730 [ 330.519621][T12527] ? __pfx_worker_thread+0x10/0x10 [ 330.525272][T12527] kthread+0x3b3/0x730 [ 330.529777][T12527] ? __pfx_kthread+0x10/0x10 [ 330.534575][T12527] ? ret_from_fork+0x79/0xaf0 [ 330.539828][T12527] ? ret_from_fork+0x79/0xaf0 [ 330.544517][T12527] ? rcu_is_watching+0x12/0xc0 [ 330.549387][T12527] ? __pfx_kthread+0x10/0x10 [ 330.554496][T12527] ret_from_fork+0x754/0xaf0 [ 330.559454][T12527] ? __pfx_ret_from_fork+0x10/0x10 [ 330.564763][T12527] ? __switch_to+0x7b9/0x10c0 [ 330.569517][T12527] ? __pfx_kthread+0x10/0x10 [ 330.574118][T12527] ret_from_fork_asm+0x1a/0x30 [ 330.579005][T12527] [ 330.582485][T12527] Kernel Offset: disabled [ 330.587025][T12527] Rebooting in 86400 seconds..