last executing test programs: 6m29.142407474s ago: executing program 2 (id=1631): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 6m29.031405443s ago: executing program 2 (id=1632): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0x200009) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x3) 6m28.99976622s ago: executing program 2 (id=1634): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) 6m28.891365373s ago: executing program 2 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4020aed2, &(0x7f0000000080)={[{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}) 6m28.804022512s ago: executing program 2 (id=1637): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 6m28.771667874s ago: executing program 2 (id=1638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000004411207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22081, 0x0) 6m13.699411254s ago: executing program 32 (id=1638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000004411207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x22081, 0x0) 4m10.407084581s ago: executing program 4 (id=4468): r0 = io_uring_setup(0x1694, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 4m10.219103064s ago: executing program 4 (id=4469): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 4m10.175204914s ago: executing program 4 (id=4471): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) 4m10.166619917s ago: executing program 4 (id=4472): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$packet_int(r2, 0x107, 0xe, 0x0, &(0x7f00000000c0)) 4m10.092036582s ago: executing program 4 (id=4474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 4m9.979596865s ago: executing program 4 (id=4477): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r1, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 3m54.921883789s ago: executing program 33 (id=4477): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r1, 0x0) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 1m58.617898681s ago: executing program 1 (id=7066): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0xa8af, 0x0, 0x0, 0x3d7}, &(0x7f0000ff0000), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m57.615451315s ago: executing program 1 (id=7083): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x0, 0x4}, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 1m57.443374359s ago: executing program 1 (id=7085): creat(&(0x7f0000000240)='./bus\x00', 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0xa000, 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1m57.443182819s ago: executing program 1 (id=7086): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) 1m57.319074818s ago: executing program 1 (id=7089): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1m57.229437827s ago: executing program 1 (id=7091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m42.046300346s ago: executing program 34 (id=7091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x100}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 27.0658786s ago: executing program 7 (id=8580): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @random="a514a0ed377e", {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x40}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 26.988597802s ago: executing program 7 (id=8583): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x240) 26.937373582s ago: executing program 7 (id=8584): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 18.228772519s ago: executing program 7 (id=8596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = dup(r0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 10.384952633s ago: executing program 7 (id=8596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = dup(r0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 3.743102931s ago: executing program 0 (id=8936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040400) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000818120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.740654167s ago: executing program 0 (id=8938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}}, 0x14}}, 0x48000) 3.67572175s ago: executing program 0 (id=8940): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xe6da) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002"], 0x48) 3.317454414s ago: executing program 0 (id=8944): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1e, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "21f275c0"}, @local=@item_012={0x0, 0x2, 0x9}, @local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) 2.923305272s ago: executing program 7 (id=8596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = dup(r0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 1.419066771s ago: executing program 6 (id=8960): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00008dc000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000015000/0x400000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) 1.368499515s ago: executing program 5 (id=8962): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 1.301872402s ago: executing program 5 (id=8963): r0 = io_uring_setup(0x257c, &(0x7f00000004c0)={0x0, 0xf18c, 0x1, 0x0, 0x102}) io_uring_enter(r0, 0x56c0, 0xe511, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) 1.088688124s ago: executing program 3 (id=8967): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.037854051s ago: executing program 3 (id=8968): pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 958.790429ms ago: executing program 3 (id=8969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000240), &(0x7f0000000280)=@udp6=r2}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x2400, 0x0, 0x0) 901.632166ms ago: executing program 3 (id=8970): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000640)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000600)={0x40, 0x1}, 0x0, 0x0}) 690.712305ms ago: executing program 5 (id=8971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) move_mount(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x154) 609.757744ms ago: executing program 5 (id=8972): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) 546.206729ms ago: executing program 6 (id=8973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) set_tid_address(0x0) 498.714946ms ago: executing program 6 (id=8974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000100), 0x4) 449.576618ms ago: executing program 6 (id=8975): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2}, 0x22) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 314.294821ms ago: executing program 5 (id=8976): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 238.973644ms ago: executing program 3 (id=8977): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) 205.03465ms ago: executing program 0 (id=8978): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x6802}], 0x1}, 0x20000000) 204.333674ms ago: executing program 6 (id=8979): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 87.272814ms ago: executing program 5 (id=8980): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) sendto$inet(r0, &(0x7f0000000180)='f', 0xfdef, 0x0, 0x0, 0x0) 50.60246ms ago: executing program 6 (id=8981): sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x800) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 24.516439ms ago: executing program 3 (id=8982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}}, 0xc000) 0s ago: executing program 0 (id=8983): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): main: sq930x-2.14.0 probing 2770:930c [ 364.680389][T20476] dccp_invalid_packet: pskb_may_pull failed [ 364.884346][T20490] autofs: Bad value for 'fd' [ 365.272951][ T5862] gspca_sq930x: ucbus_write failed -71 [ 365.278541][ T5862] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 365.300856][ T5862] usb 6-1: USB disconnect, device number 25 [ 365.568087][ T29] audit: type=1326 audit(2000000677.900:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20524 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 365.591480][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.610199][ T29] audit: type=1326 audit(2000000677.900:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20524 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 365.634875][ T29] audit: type=1326 audit(2000000677.900:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20524 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 365.659337][ T29] audit: type=1326 audit(2000000677.900:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20524 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 365.685095][ T29] audit: type=1326 audit(2000000677.900:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20524 comm="syz.3.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 366.019408][T20545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6246'. [ 366.205924][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6249'. [ 366.398524][T20559] nbd: nbd1 already in use [ 366.540722][ T5955] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 366.701145][ T5955] usb 6-1: Using ep0 maxpacket: 16 [ 366.713765][ T5955] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.730744][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.751967][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.767206][ T5955] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.778069][ T5955] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.827500][ T5955] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.846393][ T5955] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.855959][ T5955] usb 6-1: Manufacturer: syz [ 366.877278][ T5955] usb 6-1: config 0 descriptor?? [ 367.163885][ T5955] rc_core: IR keymap rc-hauppauge not found [ 367.169833][ T5955] Registered IR keymap rc-empty [ 367.175675][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.203769][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.241274][ T5955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 367.260198][ T5955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45 [ 367.279567][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.310575][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.340723][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.391525][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.414941][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.451972][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.480788][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.500934][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.523901][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.553298][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.600819][ T5955] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 367.632121][ T5955] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 367.642025][ T5955] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 367.659400][ T5955] usb 6-1: USB disconnect, device number 26 [ 368.779163][T20660] netlink: 'syz.5.6292': attribute type 4 has an invalid length. [ 368.819524][T20664] Failed to initialize the IGMP autojoin socket (err -2) [ 369.401674][T20697] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6308'. [ 369.608903][T20712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6314'. [ 369.877311][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6319'. [ 370.598004][ T29] audit: type=1400 audit(2000000682.930:910): avc: denied { listen } for pid=20755 comm="syz.5.6335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.806019][T20774] input: syz0 as /devices/virtual/input/input46 [ 370.831927][T20770] wireguard: wg2: Could not create IPv6 socket [ 371.132274][ T25] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 371.290735][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 371.297518][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.317171][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.330279][ T25] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 371.351148][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 371.357922][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 371.367242][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.377726][ T25] usb 6-1: config 0 descriptor?? [ 371.383154][T20803] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.391713][T20803] bridge0: entered allmulticast mode [ 371.423320][T20803] bridge_slave_1: left allmulticast mode [ 371.429096][T20803] bridge_slave_1: left promiscuous mode [ 371.437875][T20803] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.479133][T20806] netlink: 'syz.6.6355': attribute type 1 has an invalid length. [ 371.565011][T20810] netlink: 'syz.6.6357': attribute type 18 has an invalid length. [ 371.577070][T20810] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.586279][T20810] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.595047][T20810] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.603823][T20810] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.832487][T20822] netlink: 'syz.0.6362': attribute type 4 has an invalid length. [ 371.860195][ T25] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5010.0064/input/input47 [ 371.932990][ T25] kye 0003:0458:5010.0064: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 372.135506][T20837] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.6368'. [ 372.226022][ T29] audit: type=1400 audit(2000000684.560:911): avc: denied { read } for pid=20840 comm="syz.3.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 372.236614][ T25] usb 6-1: USB disconnect, device number 27 [ 372.305853][ T29] audit: type=1326 audit(2000000684.640:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.6.6375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x0 [ 372.707784][ T29] audit: type=1400 audit(2000000685.020:913): avc: denied { getopt } for pid=20872 comm="syz.1.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.225805][T20899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.233737][T20901] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 373.250445][T20901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.394124][T20905] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6399'. [ 373.570585][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6403'. [ 373.881005][T20928] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 373.961618][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6412'. [ 373.990897][ T5862] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 374.143671][ T5862] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 374.153204][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.165151][ T5862] usb 6-1: Product: syz [ 374.170627][ T5862] usb 6-1: Manufacturer: syz [ 374.177544][ T5862] usb 6-1: SerialNumber: syz [ 374.189170][ T5862] usb 6-1: config 0 descriptor?? [ 374.202617][ T5862] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 374.214366][ T5862] usb 6-1: setting power ON [ 374.219219][ T5862] dvb-usb: bulk message failed: -22 (2/0) [ 374.235100][ T5862] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 374.271612][ T5862] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 374.281195][ T5862] dvb_usb_cxusb 6-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 374.441184][ T5862] usb 6-1: USB disconnect, device number 28 [ 374.858205][T20958] loop6: detected capacity change from 0 to 7 [ 374.872184][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.887951][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.898019][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.910273][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.919353][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.931601][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.939712][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.950038][T20958] ldm_validate_partition_table(): Disk read failed. [ 374.958909][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.970248][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.981243][T20958] Buffer I/O error on dev loop6, logical block 0, async page read [ 374.989159][T20958] Dev loop6: unable to read RDB block 0 [ 374.998192][T20958] loop6: unable to read partition table [ 375.006019][T20958] loop6: partition table beyond EOD, truncated [ 375.015730][T20958] loop_reread_partitions: partition scan of loop6 (■швлx№Я╤°ащ┌мз╜d╞д┤рЦГ▌бпиЭт╖√ [ 375.015730][T20958] ) failed (rc=-5) [ 375.180837][T20966] netlink: 'syz.5.6425': attribute type 21 has an invalid length. [ 375.195124][T20966] netlink: 'syz.5.6425': attribute type 6 has an invalid length. [ 375.223270][T20966] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6425'. [ 375.370709][T20970] netlink: 'syz.5.6425': attribute type 21 has an invalid length. [ 375.391713][T20970] netlink: 'syz.5.6425': attribute type 6 has an invalid length. [ 375.403902][T20970] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6425'. [ 375.434380][T20981] overlayfs: conflicting options: userxattr,verity=on [ 376.171894][ T29] audit: type=1400 audit(2000000688.510:914): avc: denied { nlmsg_read } for pid=21028 comm="syz.3.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 376.310601][ T5862] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 376.473029][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 376.489509][ T5862] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 376.499129][ T5862] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 376.509353][ T5862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.520618][ T5862] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 376.529789][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.550026][ T5862] usb 6-1: Product: syz [ 376.554686][ T5862] usb 6-1: Manufacturer: syz [ 376.559297][ T5862] usb 6-1: SerialNumber: syz [ 376.627030][T21053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6452'. [ 377.198752][ T5862] usb 6-1: 0:2 : does not exist [ 377.319030][ T29] audit: type=1326 audit(2000000689.650:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 377.349097][ T29] audit: type=1326 audit(2000000689.650:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 377.373101][ T29] audit: type=1326 audit(2000000689.650:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 377.403653][ T29] audit: type=1326 audit(2000000689.650:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 377.458918][ T5888] usb 6-1: USB disconnect, device number 29 [ 377.480517][ T29] audit: type=1326 audit(2000000689.650:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21091 comm="syz.0.6470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 377.678870][T21105] atomic_op ffff88806cf9c198 conn xmit_atomic 0000000000000000 [ 377.758470][T21111] geneve1: entered allmulticast mode [ 377.880542][ T5955] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 378.044709][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 378.055594][ T5955] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 378.064308][T21124] sit0: entered promiscuous mode [ 378.069652][ T5955] usb 2-1: config 0 has no interface number 0 [ 378.089294][T21124] netlink: 'syz.0.6484': attribute type 1 has an invalid length. [ 378.129307][T21124] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6484'. [ 378.147114][ T5955] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 378.160501][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.188218][ T5955] usb 2-1: Product: syz [ 378.201687][ T5955] usb 2-1: Manufacturer: syz [ 378.206331][ T5955] usb 2-1: SerialNumber: syz [ 378.221404][ T5955] usb 2-1: config 0 descriptor?? [ 378.228732][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.251856][ T5955] i2c-tiny-usb 2-1:0.39: version 70.6d found at bus 002 address 055 [ 378.437220][T21132] sit0: entered allmulticast mode [ 378.466221][T21132] sit0: entered promiscuous mode [ 378.630194][T21139] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6492'. [ 378.635736][ T5955] (null): failure reading functionality [ 378.676387][ T5955] i2c i2c-1: connected i2c-tiny-usb device [ 378.949873][ T5862] usb 2-1: USB disconnect, device number 55 [ 379.410879][ T5862] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 379.574306][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 379.586003][ T5862] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 379.601475][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.623840][ T5862] usb 6-1: config 0 descriptor?? [ 379.643265][ T5862] gspca_main: sq930x-2.14.0 probing 041e:403c [ 379.800481][ T5864] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 379.942523][T21199] netlink: 'syz.0.6517': attribute type 22 has an invalid length. [ 379.951532][T21199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6517'. [ 379.956385][ T5864] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 379.970940][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.979036][ T5864] usb 2-1: Product: syz [ 379.983652][ T5864] usb 2-1: Manufacturer: syz [ 379.988372][ T5864] usb 2-1: SerialNumber: syz [ 379.996851][ T5864] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 380.011775][ T25] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 380.285894][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6525'. [ 380.353844][T21217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6526'. [ 380.439346][T21221] vlan3: entered allmulticast mode [ 380.481031][ T5862] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 380.507058][ T29] audit: type=1400 audit(2000000693.824:920): avc: denied { mounton } for pid=21224 comm="syz.3.6530" path="/1517/file0" dev="tmpfs" ino=7714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 380.550624][ T5862] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 380.562619][ T5862] usb 6-1: USB disconnect, device number 30 [ 380.677577][ T5888] usb 2-1: USB disconnect, device number 56 [ 380.746285][T21237] netlink: 'syz.0.6536': attribute type 2 has an invalid length. [ 380.754874][T21237] netlink: 'syz.0.6536': attribute type 1 has an invalid length. [ 380.795443][T21240] netlink: 47 bytes leftover after parsing attributes in process `syz.0.6537'. [ 380.871061][T21244] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 381.262330][T21265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6549'. [ 381.288060][T21265] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6549'. [ 381.342041][ T25] usb 2-1: Service connection timeout for: 256 [ 381.358826][ T25] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 381.373731][ T25] ath9k_htc: Failed to initialize the device [ 381.386520][ T5888] usb 2-1: ath9k_htc: USB layer deinitialized [ 381.845676][T21284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6555'. [ 381.856509][T21284] bond0: option ad_select: unable to set because the bond device is up [ 382.568584][T21313] input: syz0 as /devices/virtual/input/input48 [ 382.694022][T21320] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6574'. [ 382.995556][T21336] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 383.138739][ T29] audit: type=1326 audit(2000000696.464:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.186747][ T29] audit: type=1326 audit(2000000696.504:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.217731][ T29] audit: type=1326 audit(2000000696.504:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.252769][ T29] audit: type=1326 audit(2000000696.504:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.288451][ T29] audit: type=1326 audit(2000000696.504:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.344432][ T29] audit: type=1326 audit(2000000696.504:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.374713][ T29] audit: type=1326 audit(2000000696.504:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.400063][ T29] audit: type=1326 audit(2000000696.514:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.429532][ T29] audit: type=1326 audit(2000000696.514:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 383.456448][ T29] audit: type=1326 audit(2000000696.514:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21344 comm="syz.0.6586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f05585d19 code=0x7ffc0000 [ 383.540863][ T25] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 383.695714][ T25] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 383.709543][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.729238][ T25] usb 6-1: Product: syz [ 383.735747][ T25] usb 6-1: Manufacturer: syz [ 383.747950][ T25] usb 6-1: SerialNumber: syz [ 383.754644][ T25] usb 6-1: config 0 descriptor?? [ 384.166743][T21386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6605'. [ 384.316252][T21392] can0: slcan on ttyS3. [ 384.381270][T21392] can0 (unregistered): slcan off ttyS3. [ 384.390600][T21392] Falling back ldisc for ttyS3. [ 384.582834][ T25] usb 6-1: Firmware version (0.0) predates our first public release. [ 384.602772][ T25] usb 6-1: Please update to version 0.2 or newer [ 384.680963][ T25] usb 6-1: USB disconnect, device number 31 [ 386.310493][ T5864] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 386.430211][T21519] trusted_key: syz.0.6652 sent an empty control message without MSG_MORE. [ 386.485969][ T5864] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 386.530465][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.557046][ T5864] usb 2-1: Product: syz [ 386.564327][ T5864] usb 2-1: Manufacturer: syz [ 386.569408][ T5864] usb 2-1: SerialNumber: syz [ 386.589385][ T5864] usb 2-1: config 0 descriptor?? [ 386.801226][ T5864] hso 2-1:0.0: Failed to find BULK IN ep [ 386.809117][ T5864] usb-storage 2-1:0.0: USB Mass Storage device detected [ 387.045014][ T5863] usb 2-1: USB disconnect, device number 57 [ 387.280596][ T5864] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 387.433688][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 387.453901][ T5864] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 387.464049][ T5864] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 387.499728][ T5864] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 387.517306][ T5864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 387.535572][ T5864] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 387.545883][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.565812][ T5864] usb 6-1: Product: syz [ 387.576545][ T5864] usb 6-1: Manufacturer: syz [ 387.587454][ T5864] usb 6-1: SerialNumber: syz [ 387.603861][ T5864] usb 6-1: config 0 descriptor?? [ 387.690912][T21591] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 387.828066][ T5864] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input49 [ 387.839015][T21597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6684'. [ 387.846863][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 387.858767][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 387.885842][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 387.911354][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 387.936228][ T5806] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 387.952158][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 387.976983][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.006853][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.024226][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.041782][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.054059][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.066070][T21549] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.077946][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 388.087682][ T5864] usb 6-1: USB disconnect, device number 32 [ 388.101890][ T5176] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 388.859375][T21636] netlink: 'syz.5.6702': attribute type 19 has an invalid length. [ 388.927175][T21629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.112213][T21629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.255481][T21629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.402234][T21629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.576235][T21629] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.643755][T21629] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.675837][T21629] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.821957][T21686] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6723'. [ 389.854509][T21629] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.015335][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 390.015352][ T29] audit: type=1400 audit(2000000703.344:939): avc: denied { write } for pid=21698 comm="syz.5.6730" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 390.052410][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6731'. [ 390.253601][T21712] binder: 21711:21712 ioctl 541b 0 returned -22 [ 390.734353][T21745] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6751'. [ 391.064871][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6758'. [ 391.230453][ T5888] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 391.402463][ T5888] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 391.417338][ T5888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 391.429721][ T5888] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.453399][ T5888] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 391.474225][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 391.485089][ T5888] usb 6-1: Product: syz [ 391.489321][ T5888] usb 6-1: Manufacturer: syz [ 391.498845][ T5888] cdc_wdm 6-1:1.0: skipping garbage [ 391.504914][ T5888] cdc_wdm 6-1:1.0: skipping garbage [ 391.510239][ T5888] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 391.787706][ T5888] usb 6-1: USB disconnect, device number 33 [ 392.339580][T21793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.541859][T21805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=21805 comm=syz.1.6778 [ 392.692443][T21815] tipc: Enabling of bearer rejected, already enabled [ 392.763957][T21821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6787'. [ 392.986987][ T29] audit: type=1326 audit(2000000706.314:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa879385d19 code=0x7ffc0000 [ 393.013383][ T29] audit: type=1326 audit(2000000706.314:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa879385d19 code=0x7ffc0000 [ 393.036834][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.045229][ T29] audit: type=1326 audit(2000000706.314:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa879385d19 code=0x7ffc0000 [ 393.068593][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.076172][ T29] audit: type=1326 audit(2000000706.314:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fa879385d19 code=0x7ffc0000 [ 393.099586][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.107058][ T29] audit: type=1326 audit(2000000706.314:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21832 comm="syz.1.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa879385d19 code=0x7ffc0000 [ 393.290225][T21846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6799'. [ 393.856249][T21884] sp0: Synchronizing with TNC [ 394.810872][T21928] program syz.1.6835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.119401][T21947] team0: Device ipvlan2 failed to register rx_handler [ 395.248557][T21953] raw_sendmsg: syz.5.6848 forgot to set AF_INET. Fix it! [ 395.401149][T21960] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 395.653058][T21972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6856'. [ 396.463470][T22019] dlm: no local IP address has been set [ 396.469607][T22019] dlm: cannot start dlm midcomms -107 [ 396.634206][T22025] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 396.685237][T22031] vxcan1: tx address claim with dest, not broadcast [ 397.523101][T22080] kernel read not supported for file /,): (pid: 22080 comm: syz.5.6903) [ 397.559676][ T29] audit: type=1800 audit(2000000966.875:945): pid=22080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.6903" name=",):" dev="mqueue" ino=67079 res=0 errno=0 [ 397.621324][T22084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6906'. [ 398.003424][ T25] kernel write not supported for file /sg0 (pid: 25 comm: kworker/1:0) [ 398.258333][T22122] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6923'. [ 399.345783][T22175] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 399.373974][T22178] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 399.660589][ T5815] Bluetooth: hci0: command 0x0401 tx timeout [ 400.390243][T22220] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6968'. [ 400.812670][T22246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.941806][T22253] kernel profiling enabled (shift: 17) [ 401.333035][T22281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6996'. [ 401.362851][ T5862] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 401.552926][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 401.569727][ T5862] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 401.589630][ T5862] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 401.623615][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7004'. [ 401.637473][ T5862] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 401.675171][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.704241][ T5862] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.740540][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.780678][ T5862] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 401.812663][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.826992][ T5862] usb 2-1: config 0 descriptor?? [ 401.838135][T22313] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 402.004747][T22323] netlink: 'syz.0.7017': attribute type 1 has an invalid length. [ 402.043807][ T5862] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 402.067972][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7018'. [ 402.084197][ T29] audit: type=1400 audit(2000000971.415:946): avc: denied { getopt } for pid=22320 comm="syz.6.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 402.110145][T22328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7018'. [ 402.247482][ T5862] usb 2-1: USB disconnect, device number 58 [ 402.262437][ T5862] usblp0: removed [ 403.202438][ T5863] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 403.211415][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 403.224056][T22389] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7047'. [ 403.234386][T22389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7047'. [ 403.364162][T22399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7051'. [ 403.373640][T22399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.380903][T22399] IPv6: NLM_F_CREATE should be set when creating new route [ 403.388169][T22399] IPv6: NLM_F_CREATE should be set when creating new route [ 403.408460][ T5863] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 403.420402][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.438673][ T5863] usb 6-1: Product: syz [ 403.453411][ T5863] usb 6-1: Manufacturer: syz [ 403.458044][ T5863] usb 6-1: SerialNumber: syz [ 403.482073][ T5863] usb 6-1: config 0 descriptor?? [ 404.324235][ T5863] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 404.355545][ T5863] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 404.370698][ T5863] asix 6-1:0.0: probe with driver asix failed with error -71 [ 404.387746][ T5863] usb 6-1: USB disconnect, device number 34 [ 404.959484][T22475] input: syz1 as /devices/virtual/input/input50 [ 405.342270][T22492] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 405.365706][T22492] cramfs: wrong magic [ 405.651398][ T29] audit: type=1326 audit(2000000974.975:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.5.7097" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24bff85d19 code=0x0 [ 405.674261][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.632038][T22555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.665650][T22557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7121'. [ 406.929401][T22566] autofs4:pid:22566:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc018937e) [ 406.963563][T22566] autofs4:pid:22566:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 407.687515][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7134'. [ 411.621573][T22668] vlan3: entered promiscuous mode [ 411.631190][ T29] audit: type=1400 audit(2000000980.945:948): avc: denied { ioctl } for pid=22666 comm="syz.0.7169" path="socket:[68542]" dev="sockfs" ino=68542 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 411.722892][T22668] vlan3: entered allmulticast mode [ 412.450255][T22680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7174'. [ 412.719774][ T29] audit: type=1326 audit(2000000982.045:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22684 comm="syz.6.7177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x0 [ 412.822860][ T29] audit: type=1400 audit(2000000982.135:950): avc: denied { checkpoint_restore } for pid=22684 comm="syz.6.7177" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.998950][T22717] tap0: tun_chr_ioctl cmd 1074025677 [ 414.010818][T22717] tap0: linktype set to 780 [ 414.455198][T22732] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7197'. [ 414.911527][T22741] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 415.298366][T22752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22752 comm=syz.5.7206 [ 416.057145][ T29] audit: type=1400 audit(2000000985.385:951): avc: denied { read } for pid=22773 comm="syz.5.7216" name="/" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.125171][ T29] audit: type=1400 audit(2000000985.385:952): avc: denied { open } for pid=22773 comm="syz.5.7216" path="/1038/file0" dev="configfs" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.234511][T22776] bond0: (slave bond_slave_1): Releasing backup interface [ 416.650709][ T5955] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 416.801805][ T5955] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 416.810900][ T5955] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.842683][ T5955] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 416.856527][ T5955] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 416.880257][ T5955] usb 6-1: Manufacturer: syz [ 416.951539][ T5955] usb 6-1: config 0 descriptor?? [ 417.061249][ T5955] rc_core: IR keymap rc-hauppauge not found [ 417.069017][ T5955] Registered IR keymap rc-empty [ 417.084535][ T5955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 417.118331][ T5955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 417.453363][ C1] igorplugusb 6-1:0.0: receive overflow, at least 6 lost [ 417.664689][ T5955] usb 6-1: USB disconnect, device number 35 [ 418.139139][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7232'. [ 418.347043][ T29] audit: type=1400 audit(2000000987.675:953): avc: denied { write } for pid=22814 comm="syz.6.7235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 418.462197][T22817] block nbd6: shutting down sockets [ 420.379247][T22867] netlink: 'syz.3.7256': attribute type 21 has an invalid length. [ 420.421523][T22867] netlink: 'syz.3.7256': attribute type 6 has an invalid length. [ 420.429379][T22867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7256'. [ 420.716505][T22873] veth1_macvtap: left promiscuous mode [ 421.171738][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.182156][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.195568][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.203767][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.238485][ T5815] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.246074][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.334193][T22891] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 421.660264][T22891] chnl_net:caif_netlink_parms(): no params data found [ 421.914704][T22891] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.935417][T22891] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.945898][T22891] bridge_slave_0: entered allmulticast mode [ 421.961399][T22891] bridge_slave_0: entered promiscuous mode [ 421.971188][ T29] audit: type=1400 audit(2000000991.295:954): avc: denied { map } for pid=22928 comm="syz.6.7279" path="socket:[70425]" dev="sockfs" ino=70425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.972172][T22891] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.066429][T22891] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.110506][T22891] bridge_slave_1: entered allmulticast mode [ 422.131659][T22891] bridge_slave_1: entered promiscuous mode [ 422.340838][T22891] team0: Port device team_slave_0 added [ 422.393108][T22891] team0: Port device team_slave_1 added [ 422.403955][ T5955] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 422.475743][T22891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.490356][T22891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.547877][T22950] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 422.563797][T22891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.574423][ T5955] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 422.574452][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.594890][T22891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.599163][ T5955] usb 6-1: Product: syz [ 422.606543][ T5955] usb 6-1: Manufacturer: syz [ 422.627027][T22891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.644347][ T5955] usb 6-1: SerialNumber: syz [ 422.653348][T22891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.692882][ T5955] usb 6-1: config 0 descriptor?? [ 422.853653][T22891] hsr_slave_0: entered promiscuous mode [ 422.869802][T22891] hsr_slave_1: entered promiscuous mode [ 422.895667][T22891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.922440][ T5955] int51x1 6-1:0.0: probe with driver int51x1 failed with error -22 [ 422.932365][T22891] Cannot create hsr debugfs directory [ 423.222714][ T5888] usb 6-1: USB disconnect, device number 36 [ 423.243022][T22969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.277987][T22891] netdevsim netdevsim7 netdevsim0: renamed from eth9 [ 423.324915][T22891] netdevsim netdevsim7 netdevsim1: renamed from eth10 [ 423.344518][ T5823] Bluetooth: hci1: command tx timeout [ 423.376850][T22891] netdevsim netdevsim7 netdevsim2: renamed from eth11 [ 423.409444][T22891] netdevsim netdevsim7 netdevsim3: renamed from eth12 [ 423.655818][T22891] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.690091][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.697238][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.742884][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.749991][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.943869][T22891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.269833][T22891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.857480][T22891] veth0_vlan: entered promiscuous mode [ 424.882206][T22891] veth1_vlan: entered promiscuous mode [ 424.961209][T22891] veth0_macvtap: entered promiscuous mode [ 424.985115][T22891] veth1_macvtap: entered promiscuous mode [ 425.035345][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.061726][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.085469][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.096557][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.107506][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.119327][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.131393][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.143683][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.166118][T22891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.183113][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.194910][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.205784][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.216661][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.226968][T22891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.245346][T22891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.269247][T22891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.304766][ T5823] Bluetooth: hci5: unexpected event for opcode 0x0413 [ 425.305695][T22891] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.320979][T22891] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.329245][T22891] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.360376][T22891] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.368582][T22891] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.382643][T22891] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.393418][T22891] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.417679][T22891] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.420584][ T5823] Bluetooth: hci1: command tx timeout [ 425.438244][T22891] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.449892][T22891] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.461759][T22891] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.472186][T22891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.499307][T22891] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 425.524044][T22891] wireguard: wg0: Could not create IPv6 socket [ 425.547012][ T29] audit: type=1400 audit(2000000994.875:955): avc: denied { recv } for pid=5864 comm="kworker/1:4" saddr=172.20.20.24 src=42032 daddr=172.20.20.24 dest=6081 netif=lo scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 425.575017][T22891] wireguard: wg1: Could not create IPv6 socket [ 425.607704][T22891] wireguard: wg2: Could not create IPv6 socket [ 425.687945][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.707807][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.748723][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.785241][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.935398][T23070] overlayfs: failed to clone upperpath [ 426.981716][T23073] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 426.989007][T23073] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 427.177060][T23080] netlink: 'syz.5.7338': attribute type 1 has an invalid length. [ 427.373236][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7342'. [ 427.501843][ T5823] Bluetooth: hci1: command tx timeout [ 427.845416][T23102] program syz.7.7348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.343181][ T5823] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 429.353473][ T5823] Bluetooth: hci5: Injecting HCI hardware error event [ 429.363767][ T5815] Bluetooth: hci5: hardware error 0x00 [ 429.580770][ T5823] Bluetooth: hci1: command tx timeout [ 429.789748][ T29] audit: type=1400 audit(2000000999.115:956): avc: denied { listen } for pid=23172 comm="syz.3.7375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.260484][ T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 430.440459][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 430.457725][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.490186][ T25] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.513753][ T25] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 430.552449][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.569323][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 430.630463][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.656432][ T25] usb 6-1: config 0 descriptor?? [ 430.745636][T23215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7386'. [ 431.152650][ T25] hid (null): nested delimiters [ 431.159806][ T25] hid (null): nested delimiters [ 431.175183][ T25] hid (null): nested delimiters [ 431.199554][ T25] hid (null): report_id 24797 is invalid [ 431.222897][ T25] hid (null): bogus close delimiter [ 431.288972][ T25] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5010.0065/input/input52 [ 431.387284][ T25] kye 0003:0458:5010.0065: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 431.420623][ T5815] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 431.459642][ T25] usb 6-1: USB disconnect, device number 37 [ 431.956083][ T29] audit: type=1804 audit(2000001001.285:957): pid=23268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.7402" name="/" dev="pidfs" ino=23570 res=1 errno=0 [ 432.270989][T23290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7408'. [ 432.366696][T23296] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 432.428363][T23298] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7410'. [ 432.447057][T23298] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 432.879119][T23331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7416'. [ 433.137994][T23344] input: syz1 as /devices/virtual/input/input53 [ 433.175512][T23348] netlink: zone id is out of range [ 433.187974][T23348] netlink: zone id is out of range [ 433.207576][ T29] audit: type=1400 audit(2000001002.535:958): avc: denied { accept } for pid=23347 comm="syz.7.7423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 433.231128][T23348] netlink: zone id is out of range [ 433.241672][T23348] netlink: zone id is out of range [ 433.246809][T23348] netlink: zone id is out of range [ 433.278202][T23348] netlink: zone id is out of range [ 433.303621][T23348] netlink: zone id is out of range [ 433.339990][T23348] netlink: zone id is out of range [ 433.858884][ T5485] wireguard: wg0: Could not create IPv6 socket [ 433.916885][ T29] audit: type=1400 audit(2000001003.245:959): avc: denied { connect } for pid=23386 comm="syz.7.7433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.116801][T23399] netlink: 'syz.7.7436': attribute type 10 has an invalid length. [ 434.210586][ T968] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 434.268132][ T5485] wireguard: wg1: Could not create IPv6 socket [ 434.360586][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 434.372045][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.386823][ T968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.400218][ T968] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 434.420653][ T968] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 434.440254][ T968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.449309][ T5863] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 434.471169][ T968] usb 6-1: config 0 descriptor?? [ 434.634592][ T5863] usb 8-1: Using ep0 maxpacket: 16 [ 434.655349][ T5863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 434.674330][ T5863] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 434.699908][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.725783][ T5863] usb 8-1: Product: syz [ 434.734701][ T5863] usb 8-1: Manufacturer: syz [ 434.747353][ T5863] usb 8-1: SerialNumber: syz [ 434.771259][ T5863] usb 8-1: config 0 descriptor?? [ 434.788197][ T5863] hub 8-1:0.0: bad descriptor, ignoring hub [ 434.818993][ T5863] hub 8-1:0.0: probe with driver hub failed with error -5 [ 434.847834][ T5863] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input54 [ 434.895194][ T968] hid (null): unknown global tag 0xd [ 434.931009][ T5485] wireguard: wg2: Could not create IPv6 socket [ 434.934399][ T968] hid (null): unknown global tag 0xba [ 434.986042][ T968] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0066/input/input55 [ 435.416177][ T968] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0066/input/input56 [ 435.421110][T23458] bridge1: entered promiscuous mode [ 435.492793][ T968] kye 0003:0458:5011.0066: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 435.551095][ T968] usb 6-1: USB disconnect, device number 38 [ 435.955137][ T29] audit: type=1400 audit(2000001005.285:960): avc: denied { accept } for pid=23475 comm="syz.5.7456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 436.261266][T22979] usb 8-1: USB disconnect, device number 2 [ 436.390712][ T25] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 436.472918][T23512] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 436.581419][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 436.599947][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.630801][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.654213][T23522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7472'. [ 436.673732][ T25] usb 6-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 436.696702][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.730943][ T25] usb 6-1: config 0 descriptor?? [ 436.812078][T23528] overlayfs: failed to clone lowerpath [ 437.056426][ T29] audit: type=1400 audit(2000001006.385:961): avc: denied { map } for pid=23539 comm="syz.7.7479" path="socket:[72635]" dev="sockfs" ino=72635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 437.201045][ T29] audit: type=1400 audit(2000001006.385:962): avc: denied { accept } for pid=23539 comm="syz.7.7479" path="socket:[72635]" dev="sockfs" ino=72635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 437.226183][ T25] hid (null): invalid report_size 10276 [ 437.243096][ T25] razer 0003:1532:010D.0067: invalid report_size 10276 [ 437.271413][ T25] razer 0003:1532:010D.0067: item 0 2 1 7 parsing failed [ 437.278819][ T25] razer 0003:1532:010D.0067: probe with driver razer failed with error -22 [ 437.470461][ T46] usb 6-1: USB disconnect, device number 39 [ 437.954613][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7495'. [ 438.180148][T23599] ALSA: seq fatal error: cannot create timer (-19) [ 438.595642][T23624] vivid-004: disconnect [ 438.615446][T23623] vivid-004: reconnect [ 438.629419][T23630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7508'. [ 438.731390][T23640] virtio-fs: tag <(null)> not found [ 438.841323][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7511'. [ 439.677679][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.761325][T23689] netlink: 'syz.3.7527': attribute type 10 has an invalid length. [ 439.938418][ T29] audit: type=1326 audit(2000001009.258:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23697 comm="syz.3.7530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x0 [ 440.235618][T23714] netlink: 'syz.5.7536': attribute type 178 has an invalid length. [ 440.413538][T23726] sg_write: process 2377 (syz.5.7540) changed security contexts after opening file descriptor, this is not allowed. [ 441.291413][ T29] audit: type=1326 audit(2000001010.628:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 441.374599][ T29] audit: type=1326 audit(2000001010.648:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 441.508208][ T29] audit: type=1326 audit(2000001010.648:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 441.603280][ T29] audit: type=1326 audit(2000001010.648:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 441.698518][ T29] audit: type=1326 audit(2000001010.648:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 441.789270][ T29] audit: type=1326 audit(2000001010.648:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 441.894285][ T29] audit: type=1326 audit(2000001010.648:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23770 comm="syz.7.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48ced85d19 code=0x7ffc0000 [ 442.025724][T23811] team0: No ports can be present during mode change [ 442.059935][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7572'. [ 442.091179][T23813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7572'. [ 442.427138][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7579'. [ 442.713832][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7587'. [ 442.739723][T23806] orangefs_mount: mount request failed with -4 [ 442.901384][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 442.901401][ T29] audit: type=1326 audit(2000001012.228:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23814 comm="syz.6.7573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x7fc00000 [ 443.263607][T23894] input: syz1 as /devices/virtual/input/input57 [ 443.582634][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7609'. [ 443.621571][T23915] veth1_vlan: left allmulticast mode [ 443.683347][T23915] netlink: 'syz.6.7609': attribute type 1 has an invalid length. [ 443.702030][T23915] netlink: 'syz.6.7609': attribute type 2 has an invalid length. [ 444.115407][T23942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7617'. [ 444.158760][T23942] net_ratelimit: 4 callbacks suppressed [ 444.158775][T23942] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 444.504430][T23969] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7627'. [ 444.531221][ T5863] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 444.741027][ T5863] usb 8-1: Using ep0 maxpacket: 16 [ 444.747857][ T5863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.759107][ T5863] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.779228][ T5863] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.842466][ T5863] usb 8-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 444.910669][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.946912][ T5863] usb 8-1: config 0 descriptor?? [ 445.408627][ T5863] hid-u2fzero 0003:10C4:8ACF.0068: unknown main item tag 0x0 [ 445.457876][ T5863] hid-u2fzero 0003:10C4:8ACF.0068: unknown main item tag 0x0 [ 445.476769][ T5863] hid-u2fzero 0003:10C4:8ACF.0068: item fetching failed at offset 2/5 [ 445.498949][ T5863] hid-u2fzero 0003:10C4:8ACF.0068: probe with driver hid-u2fzero failed with error -22 [ 445.561628][ T29] audit: type=1326 audit(2000001014.898:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24031 comm="syz.6.7646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9cc7785d19 code=0x0 [ 445.584435][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.660027][T24036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7647'. [ 445.662021][ T5863] usb 8-1: USB disconnect, device number 3 [ 446.770701][ T5955] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 446.820156][T24099] input: syz0 as /devices/virtual/input/input58 [ 446.930700][ T5955] usb 6-1: Using ep0 maxpacket: 16 [ 446.963228][ T5955] usb 6-1: config 6 has an invalid interface number: 1 but max is 0 [ 446.978988][ T5955] usb 6-1: config 6 has no interface number 0 [ 447.011479][ T5955] usb 6-1: config 6 interface 1 has no altsetting 0 [ 447.035496][ T5955] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=ef.14 [ 447.064905][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.086422][ T5955] usb 6-1: Product: syz [ 447.100501][ T5955] usb 6-1: Manufacturer: syz [ 447.105131][ T5955] usb 6-1: SerialNumber: syz [ 447.179343][ T29] audit: type=1400 audit(2000001016.508:974): avc: denied { connect } for pid=24112 comm="syz.0.7669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 447.199464][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.347858][T24077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7658'. [ 447.384480][ T5955] usb 6-1: selecting invalid altsetting 1 [ 447.398115][ T5955] snd-usb-us122l 6-1:6.1: usb_set_interface error [ 447.415957][ T5955] snd-usb-us122l 6-1:6.1: probe with driver snd-usb-us122l failed with error -22 [ 447.453909][ T5955] usb 6-1: USB disconnect, device number 40 [ 448.272154][T24165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7684'. [ 448.616749][T24165] bond0 (unregistering): Released all slaves [ 449.200490][ T29] audit: type=1400 audit(2000001018.528:975): avc: denied { append } for pid=24191 comm="syz.5.7691" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 449.705322][ T29] audit: type=1400 audit(2000001019.038:976): avc: denied { create } for pid=24220 comm="syz.7.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 449.775035][ T29] audit: type=1400 audit(2000001019.068:977): avc: denied { ioctl } for pid=24220 comm="syz.7.7700" path="socket:[74642]" dev="sockfs" ino=74642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 450.330643][ T5888] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 450.530797][ T5888] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 450.549685][ T5888] usb 6-1: config 0 has no interface number 0 [ 450.599842][ T5888] usb 6-1: config 0 interface 98 has no altsetting 0 [ 450.720046][ T5888] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 450.730065][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.751042][ T5888] usb 6-1: Product: syz [ 450.755238][ T5888] usb 6-1: Manufacturer: syz [ 450.759841][ T5888] usb 6-1: SerialNumber: syz [ 450.783160][ T5888] usb 6-1: config 0 descriptor?? [ 450.950705][ T5864] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 451.017680][ T5888] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 451.220777][ T5864] usb 8-1: Using ep0 maxpacket: 32 [ 451.235845][ T5864] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.250928][ T5864] usb 8-1: config 0 has no interfaces? [ 451.256563][ T5864] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 451.300248][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.315693][ T5864] usb 8-1: config 0 descriptor?? [ 451.584281][T24275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7710'. [ 451.682002][ T5888] usb 6-1: reset high-speed USB device number 41 using dummy_hcd [ 452.118206][T22979] usb 8-1: USB disconnect, device number 4 [ 452.192088][ T5888] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 452.224355][ T5888] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 452.232985][ T5863] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 452.259000][ T5863] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 452.450871][ T5888] usb 6-1: USB disconnect, device number 41 [ 452.888155][T24367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.332820][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7754'. [ 453.670443][ T46] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 453.827945][ T46] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 453.850537][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.881024][ T46] usb 8-1: config 0 descriptor?? [ 454.191886][T24435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7769'. [ 454.308950][ T46] playstation 0003:054C:0DF2.0069: unknown main item tag 0x0 [ 454.326597][ T46] playstation 0003:054C:0DF2.0069: unknown main item tag 0x0 [ 454.337414][ T46] playstation 0003:054C:0DF2.0069: unknown main item tag 0x0 [ 454.345417][ T46] playstation 0003:054C:0DF2.0069: unknown main item tag 0x0 [ 454.353734][ T46] playstation 0003:054C:0DF2.0069: unknown main item tag 0x0 [ 454.364393][ T46] playstation 0003:054C:0DF2.0069: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0 [ 454.486161][T24448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7775'. [ 454.511606][ T46] playstation 0003:054C:0DF2.0069: Invalid reportID received, expected 9 got 0 [ 454.540503][ T46] playstation 0003:054C:0DF2.0069: Failed to retrieve DualSense pairing info: -22 [ 454.549861][ T46] playstation 0003:054C:0DF2.0069: Failed to get MAC address from DualSense [ 454.576609][ T46] playstation 0003:054C:0DF2.0069: Failed to create dualsense. [ 454.597244][ T46] playstation 0003:054C:0DF2.0069: probe with driver playstation failed with error -22 [ 454.738668][ T46] usb 8-1: USB disconnect, device number 5 [ 455.259154][T24466] netlink: 'syz.3.7783': attribute type 2 has an invalid length. [ 455.269800][T24466] netlink: 'syz.3.7783': attribute type 1 has an invalid length. [ 455.633768][ T29] audit: type=1326 audit(2000001024.968:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24462 comm="syz.5.7782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24bff85d19 code=0x7fc00000 [ 455.954127][T24502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.040886][ T5864] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 456.200834][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 456.207531][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.228333][ T5864] usb 6-1: config 0 has no interfaces? [ 456.236599][ T5864] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 456.251858][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.265062][T24519] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 456.283352][ T5864] usb 6-1: config 0 descriptor?? [ 456.542007][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7796'. [ 456.546422][T24530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7812'. [ 456.834237][ T5864] usb 6-1: USB disconnect, device number 42 [ 456.889658][ T29] audit: type=1400 audit(2000001026.218:979): avc: denied { read write } for pid=24537 comm="syz.0.7816" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.040867][ T29] audit: type=1400 audit(2000001026.258:980): avc: denied { open } for pid=24537 comm="syz.0.7816" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.165133][ T29] audit: type=1400 audit(2000001026.268:981): avc: denied { watch } for pid=24537 comm="syz.0.7816" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 457.250068][ T29] audit: type=1400 audit(2000001026.268:982): avc: denied { watch_sb } for pid=24537 comm="syz.0.7816" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.277176][T24547] vivid-000: disconnect [ 457.301075][T24543] vivid-000: reconnect [ 457.331373][ T29] audit: type=1400 audit(2000001026.358:983): avc: denied { ioctl } for pid=24541 comm="syz.7.7817" path="socket:[75410]" dev="sockfs" ino=75410 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 457.399987][ T29] audit: type=1400 audit(2000001026.728:984): avc: denied { read } for pid=24548 comm="syz.6.7821" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 457.465759][ T29] audit: type=1400 audit(2000001026.728:985): avc: denied { open } for pid=24548 comm="syz.6.7821" path="/469/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 457.634275][ T29] audit: type=1326 audit(2000001026.968:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 457.668080][T24561] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input60 [ 457.740909][ T29] audit: type=1326 audit(2000001026.998:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x7ffc0000 [ 457.809994][T24571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 457.879379][T24575] Process accounting resumed [ 458.511178][T24610] syz.6.7848[24610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.511261][T24610] syz.6.7848[24610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.545394][T24610] syz.6.7848[24610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.580460][T24611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7848'. [ 458.759646][T24617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7850'. [ 458.811110][T24617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7850'. [ 458.820116][T24617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7850'. [ 458.862527][T24623] lo: entered allmulticast mode [ 460.428626][T24711] sp0: Synchronizing with TNC [ 460.958275][T24739] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7909'. [ 462.357593][T24806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24806 comm=syz.0.7938 [ 462.767671][T24825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7949'. [ 463.121624][T22979] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 463.281222][T22979] usb 8-1: Using ep0 maxpacket: 16 [ 463.288212][T22979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.358378][T22979] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 463.385689][T22979] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 463.405902][T22979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.445174][T22979] usb 8-1: config 0 descriptor?? [ 463.793890][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 463.793906][ T29] audit: type=1400 audit(2000001033.128:1007): avc: denied { shutdown } for pid=24860 comm="syz.6.7963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.915562][T22979] HID 045e:07da: Invalid code 65791 type 1 [ 463.930734][T22979] HID 045e:07da: Invalid code 768 type 1 [ 463.936416][T22979] HID 045e:07da: Invalid code 769 type 1 [ 463.942640][T22979] HID 045e:07da: Invalid code 770 type 1 [ 463.948295][T22979] HID 045e:07da: Invalid code 771 type 1 [ 463.954063][T22979] HID 045e:07da: Invalid code 772 type 1 [ 463.959710][T22979] HID 045e:07da: Invalid code 773 type 1 [ 463.965441][T22979] HID 045e:07da: Invalid code 774 type 1 [ 463.971640][T22979] HID 045e:07da: Invalid code 775 type 1 [ 463.977286][T22979] HID 045e:07da: Invalid code 776 type 1 [ 463.995516][T22979] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.006A/input/input61 [ 464.062464][T22979] microsoft 0003:045E:07DA.006A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 464.490234][ T5864] usb 8-1: USB disconnect, device number 6 [ 465.378043][ T29] audit: type=1400 audit(2000001034.708:1008): avc: denied { ioctl } for pid=24934 comm="syz.3.7994" path="socket:[78087]" dev="sockfs" ino=78087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 465.480769][T24941] kvm: kvm [24940]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000052) = 0x0 [ 465.695174][T24952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.752199][T24957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8003'. [ 466.129360][T24973] netlink: 'syz.0.8012': attribute type 9 has an invalid length. [ 466.787823][ T29] audit: type=1400 audit(2000001036.118:1009): avc: denied { write } for pid=25010 comm="syz.7.8028" name="/" dev="ocfs2_dlmfs" ino=77482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.795097][T25012] o2cb: This node has not been configured. [ 466.853636][ T29] audit: type=1400 audit(2000001036.118:1010): avc: denied { add_name } for pid=25010 comm="syz.7.8028" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.856771][T25012] o2cb: Cluster check failed. Fix errors before retrying. [ 466.874235][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.894547][ T29] audit: type=1400 audit(2000001036.128:1011): avc: denied { create } for pid=25010 comm="syz.7.8028" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 466.930579][T25012] (syz.7.8028,25012,0):user_dlm_register:674 ERROR: status = -22 [ 466.958908][T25012] (syz.7.8028,25012,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 466.981579][ T29] audit: type=1400 audit(2000001036.128:1012): avc: denied { associate } for pid=25010 comm="syz.7.8028" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 467.125252][T25026] input: syz1 as /devices/virtual/input/input62 [ 468.443925][ T29] audit: type=1400 audit(2000001037.778:1013): avc: denied { create } for pid=25078 comm="syz.6.8057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 468.475025][ T29] audit: type=1400 audit(2000001037.788:1014): avc: denied { sys_admin } for pid=25078 comm="syz.6.8057" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 468.591080][ T29] audit: type=1400 audit(2000001037.838:1015): avc: denied { sys_nice } for pid=25078 comm="syz.6.8057" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 468.656534][T25085] XFS (nullb0): Invalid superblock magic number [ 468.701097][T22979] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 468.899595][T22979] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 468.921049][T22979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.955623][T22979] usb 6-1: config 0 descriptor?? [ 469.579297][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8069'. [ 469.700122][ T29] audit: type=1326 audit(2000001039.028:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.7.8073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48ced85d19 code=0x0 [ 470.018782][T22979] usb 6-1: Cannot set autoneg [ 470.023818][T22979] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 470.066055][T22979] usb 6-1: USB disconnect, device number 43 [ 470.453770][T25162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8093'. [ 470.467743][T25162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8093'. [ 470.840777][T25180] 9p: Unknown uid 00000000004294967295 [ 470.918451][T25186] syz_tun: entered promiscuous mode [ 470.932769][T25186] batadv_slave_0: entered promiscuous mode [ 470.959459][T25186] hsr1: entered allmulticast mode [ 470.964787][T25186] syz_tun: entered allmulticast mode [ 470.982679][T25186] batadv_slave_0: entered allmulticast mode [ 471.150039][T25188] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 471.534758][T25218] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8118'. [ 471.549155][T25218] netlink: 'syz.7.8118': attribute type 7 has an invalid length. [ 471.557171][T25218] netlink: 'syz.7.8118': attribute type 8 has an invalid length. [ 471.565461][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8118'. [ 471.839658][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8126'. [ 471.853057][T25234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8126'. [ 472.646612][ T29] audit: type=1400 audit(2000001041.978:1017): avc: denied { write } for pid=25 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=79011 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 472.830984][ T968] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 472.847858][T25282] netlink: 'syz.6.8147': attribute type 1 has an invalid length. [ 472.856489][T25282] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8147'. [ 473.015519][ T968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.059133][ T968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.093927][ T968] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.118763][ T968] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.131745][ T968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.154407][ T968] usb 8-1: config 0 descriptor?? [ 473.512894][T25313] tipc: Started in network mode [ 473.520592][T25313] tipc: Node identity ffff, cluster identity 4711 [ 473.527021][T25313] tipc: Node number set to 65535 [ 473.600923][ T968] plantronics 0003:047F:FFFF.006B: unknown main item tag 0x0 [ 473.627630][ T968] plantronics 0003:047F:FFFF.006B: No inputs registered, leaving [ 473.654084][ T968] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 473.922133][ T25] usb 8-1: USB disconnect, device number 7 [ 474.477969][T25357] netlink: 340 bytes leftover after parsing attributes in process `syz.0.8178'. [ 474.540568][ T29] audit: type=1400 audit(2000001043.858:1018): avc: denied { mounton } for pid=25358 comm="syz.7.8179" path="/proc/409/cgroup" dev="proc" ino=79237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 474.563594][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.610154][ T29] audit: type=1400 audit(2000001043.858:1019): avc: denied { mounton } for pid=25358 comm="syz.7.8179" path="/proc/409/cgroup" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 474.633763][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.738069][T25416] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8205'. [ 476.928511][T25494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=25494 comm=syz.0.8236 [ 476.998066][T22979] libceph: mon0 (1)[c::]:6789 connect error [ 477.071082][T25497] ceph: No mds server is up or the cluster is laggy [ 477.607574][T25542] tipc: Started in network mode [ 477.613352][T25542] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 477.626512][T25542] tipc: Enabled bearer , priority 0 [ 477.646126][T25544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8257'. [ 477.798403][T25549] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8259'. [ 478.499080][T25579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8272'. [ 478.621015][T22979] tipc: Node number set to 11578026 [ 478.724215][T25585] Trying to write to read-only block-device nullb0 [ 478.929101][ T29] audit: type=1400 audit(2000001048.258:1020): avc: denied { write } for pid=25599 comm="syz.7.8284" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 479.070216][T25610] netlink: 'syz.5.8287': attribute type 29 has an invalid length. [ 479.094614][T25610] netlink: 'syz.5.8287': attribute type 29 has an invalid length. [ 479.260807][T25622] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 479.782668][T25650] SELinux: policydb version 0 does not match my version range 15-33 [ 479.791104][T25650] SELinux: failed to load policy [ 479.918164][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8308'. [ 479.988487][ T29] audit: type=1326 audit(2000001049.318:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25659 comm="syz.3.8310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e39985d19 code=0x0 [ 480.833825][T25691] pim6reg1: entered allmulticast mode [ 480.977463][ T29] audit: type=1400 audit(2000001050.298:1022): avc: denied { associate } for pid=25698 comm="syz.5.8325" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 481.201714][T25710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8330'. [ 481.365816][T25716] wireguard: wg2: Could not create IPv6 socket [ 481.435703][T25719] syz_tun: entered promiscuous mode [ 481.460770][T25719] syz_tun: left promiscuous mode [ 481.970556][T22979] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 482.122010][T22979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.133114][T22979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.143221][T22979] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 482.153984][T22979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.165951][T22979] usb 6-1: config 0 descriptor?? [ 482.327462][T25764] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8354'. [ 482.594938][T22979] cm6533_jd 0003:0D8C:0022.006C: unknown main item tag 0x0 [ 482.610367][T22979] cm6533_jd 0003:0D8C:0022.006C: unknown main item tag 0x0 [ 482.617624][T22979] cm6533_jd 0003:0D8C:0022.006C: unknown main item tag 0x0 [ 482.632640][T22979] cm6533_jd 0003:0D8C:0022.006C: unknown main item tag 0x0 [ 482.640227][T22979] cm6533_jd 0003:0D8C:0022.006C: unknown main item tag 0x0 [ 482.648762][T22979] cm6533_jd 0003:0D8C:0022.006C: No inputs registered, leaving [ 482.670584][T22979] cm6533_jd 0003:0D8C:0022.006C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 482.911749][ T25] usb 6-1: USB disconnect, device number 44 [ 483.222391][ T29] audit: type=1326 audit(2000001052.558:1023): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e39985d19 code=0x0 [ 484.770508][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 484.935230][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 484.943034][ T25] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 484.981492][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.992935][ T25] usb 8-1: config 0 descriptor?? [ 485.003667][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 485.902171][ T29] audit: type=1400 audit(2000001055.238:1024): avc: denied { bind } for pid=25909 comm="syz.5.8418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 485.977741][T25912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.025908][ T25] gspca_sunplus: reg_w_riv err -71 [ 486.034711][ T25] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 486.048847][ T25] usb 8-1: USB disconnect, device number 8 [ 486.652564][T25949] vivid-003: ================= START STATUS ================= [ 486.661107][T25949] vivid-003: Radio HW Seek Mode: Bounded [ 486.667191][T25949] vivid-003: Radio Programmable HW Seek: false [ 486.673512][T25949] vivid-003: RDS Rx I/O Mode: Block I/O [ 486.679088][T25949] vivid-003: Generate RBDS Instead of RDS: false [ 486.686240][T25949] vivid-003: RDS Reception: true [ 486.691407][T25949] vivid-003: RDS Program Type: 0 inactive [ 486.697164][T25949] vivid-003: RDS PS Name: inactive [ 486.702641][T25949] vivid-003: RDS Radio Text: inactive [ 486.709387][T25949] vivid-003: RDS Traffic Announcement: false inactive [ 486.716854][T25949] vivid-003: RDS Traffic Program: false inactive [ 486.723287][T25949] vivid-003: RDS Music: false inactive [ 486.728792][T25949] vivid-003: ================== END STATUS ================== [ 487.122892][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 487.134445][ T5823] CPU: 0 UID: 0 PID: 5823 Comm: kworker/u9:5 Not tainted 6.13.0-rc3-syzkaller #0 [ 487.143592][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 487.153668][ T5823] Workqueue: hci1 hci_rx_work [ 487.158375][ T5823] Call Trace: [ 487.161659][ T5823] [ 487.164594][ T5823] dump_stack_lvl+0x16c/0x1f0 [ 487.169292][ T5823] sysfs_warn_dup+0x7f/0xa0 [ 487.173818][ T5823] sysfs_create_dir_ns+0x24d/0x2b0 [ 487.178955][ T5823] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 487.184619][ T5823] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.190014][ T5823] ? kobject_add_internal+0x12d/0x990 [ 487.195408][ T5823] ? do_raw_spin_unlock+0x172/0x230 [ 487.200626][ T5823] kobject_add_internal+0x2c8/0x990 [ 487.205850][ T5823] kobject_add+0x16f/0x240 [ 487.210285][ T5823] ? __pfx_kobject_add+0x10/0x10 [ 487.215232][ T5823] ? class_to_subsys+0x3e/0x160 [ 487.220104][ T5823] ? do_raw_spin_unlock+0x172/0x230 [ 487.225319][ T5823] ? kobject_put+0xab/0x5a0 [ 487.229845][ T5823] device_add+0x289/0x1a70 [ 487.234278][ T5823] ? __pfx_dev_set_name+0x10/0x10 [ 487.239313][ T5823] ? __pfx_device_add+0x10/0x10 [ 487.244183][ T5823] ? mgmt_send_event_skb+0x2f2/0x460 [ 487.249493][ T5823] hci_conn_add_sysfs+0x17e/0x230 [ 487.254538][ T5823] le_conn_complete_evt+0x107f/0x1da0 [ 487.259931][ T5823] ? __pfx_lock_release+0x10/0x10 [ 487.264981][ T5823] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 487.270715][ T5823] ? trace_contention_end+0xee/0x140 [ 487.276017][ T5823] ? __mutex_lock+0x1cc/0xa60 [ 487.280718][ T5823] hci_le_conn_complete_evt+0x23c/0x370 [ 487.286289][ T5823] hci_le_meta_evt+0x2e2/0x5d0 [ 487.291077][ T5823] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 487.297171][ T5823] hci_event_packet+0x666/0x1180 [ 487.302136][ T5823] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 487.307432][ T5823] ? __pfx_hci_event_packet+0x10/0x10 [ 487.312809][ T5823] ? mark_held_locks+0x9f/0xe0 [ 487.317598][ T5823] ? kcov_remote_start+0x3cf/0x6e0 [ 487.322708][ T5823] ? lockdep_hardirqs_on+0x7c/0x110 [ 487.327905][ T5823] hci_rx_work+0x2c5/0x16b0 [ 487.332422][ T5823] ? process_one_work+0x921/0x1ba0 [ 487.337544][ T5823] process_one_work+0x9c5/0x1ba0 [ 487.342489][ T5823] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 487.348134][ T5823] ? __pfx_process_one_work+0x10/0x10 [ 487.353523][ T5823] ? rcu_is_watching+0x12/0xc0 [ 487.358298][ T5823] ? assign_work+0x1a0/0x250 [ 487.362953][ T5823] worker_thread+0x6c8/0xf00 [ 487.367544][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 487.372663][ T5823] kthread+0x2c1/0x3a0 [ 487.376723][ T5823] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.381911][ T5823] ? __pfx_kthread+0x10/0x10 [ 487.386494][ T5823] ret_from_fork+0x45/0x80 [ 487.390898][ T5823] ? __pfx_kthread+0x10/0x10 [ 487.395510][ T5823] ret_from_fork_asm+0x1a/0x30 [ 487.400309][ T5823] [ 487.404743][ T5823] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 487.418832][ T5823] Bluetooth: hci1: failed to register connection device [ 488.215102][ T29] audit: type=1400 audit(2000001057.548:1025): avc: denied { watch_sb watch_reads } for pid=26024 comm="syz.6.8467" path="/580/net_prio.prioidx" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 488.310393][ T25] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 488.421272][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8468'. [ 488.430552][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8468'. [ 488.441622][T26030] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8468'. [ 488.471404][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 488.493900][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 488.516140][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 488.528317][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.543027][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.554819][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.571688][ T25] usb 6-1: config 0 descriptor?? [ 488.578258][T26017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 488.582030][T26037] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 488.628301][T26039] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8472'. [ 488.994331][ T25] plantronics 0003:047F:FFFF.006D: unknown main item tag 0xd [ 489.014427][ T25] plantronics 0003:047F:FFFF.006D: No inputs registered, leaving [ 489.028880][ T25] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 489.043336][T26057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.208786][T26062] netlink: 72 bytes leftover after parsing attributes in process `syz.7.8482'. [ 489.263552][ T968] usb 6-1: USB disconnect, device number 45 [ 489.293469][T26068] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 489.325962][T26068] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.346579][ T29] audit: type=1326 audit(2000001058.678:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26034 comm="syz.6.8471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x7fc00000 [ 489.375499][T26068] gretap1: entered promiscuous mode [ 489.384964][T26068] gretap1: entered allmulticast mode [ 489.511293][ T5815] Bluetooth: hci1: command tx timeout [ 490.146077][T26106] netlink: 'syz.5.8501': attribute type 1 has an invalid length. [ 490.155402][T26106] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8501'. [ 490.377946][T26115] ALSA: mixer_oss: invalid OSS volume '' [ 490.581811][ T29] audit: type=1400 audit(2000001059.908:1027): avc: denied { mount } for pid=26120 comm="syz.7.8507" name="/" dev="autofs" ino=81798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 490.655646][ T29] audit: type=1400 audit(2000001059.988:1028): avc: denied { unmount } for pid=22891 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 490.844384][T26130] 9p: Unknown access argument  Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є    [ 490.966830][ T29] audit: type=1326 audit(2000001060.298:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26133 comm="syz.6.8513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x0 [ 491.429111][ T29] audit: type=1400 audit(2000001060.758:1030): avc: denied { mounton } for pid=26146 comm="syz.5.8519" path=2F313331392FE91F7189591E9233614B dev="tmpfs" ino=6737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 491.695923][T26158] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 491.751295][ T46] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 491.865098][T26158] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 491.885189][T26163] loop8: detected capacity change from 0 to 1 [ 491.910588][ T46] usb 8-1: Using ep0 maxpacket: 8 [ 491.919225][T26163] Dev loop8: unable to read RDB block 1 [ 491.934809][ T46] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 491.935837][T26163] loop8: unable to read partition table [ 491.960069][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.985772][T26163] loop8: partition table beyond EOD, truncated [ 491.991417][ T46] usb 8-1: config 0 descriptor?? [ 492.004396][T26163] loop_reread_partitions: partition scan of loop8 (■швлx№Я╤°ащ┌мз╜d╞д┤рЦГ▌бпиЭт╖√ [ 492.004396][T26163] ) failed (rc=-5) [ 492.800040][T26197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.063836][ T46] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 493.085411][ T46] asix 8-1:0.0: probe with driver asix failed with error -71 [ 493.104257][ T46] usb 8-1: USB disconnect, device number 9 [ 493.182419][T26217] vlan4: entered promiscuous mode [ 493.917234][ T29] audit: type=1400 audit(2000001063.248:1031): avc: denied { read } for pid=26252 comm="syz.5.8564" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 493.984569][ T29] audit: type=1400 audit(2000001063.318:1032): avc: denied { execute } for pid=26252 comm="syz.5.8564" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 494.752254][T26254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 494.758757][T26254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 494.775870][T26254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 494.789511][T26254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.795653][T26254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 494.804107][T26254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 494.814008][T26254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 494.950288][T26268] Invalid source name [ 495.980428][ T5815] Bluetooth: hci0: command 0x0401 tx timeout [ 496.084907][T26306] 9p: Unknown access argument  Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є   Є    [ 496.178003][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 496.297394][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 496.317924][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 496.328154][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 496.336523][ T5823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 496.345819][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 496.397405][T26307] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 496.900202][T26307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.087051][T26307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.311514][T26307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.503209][T26307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.566436][T26354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8606'. [ 497.738998][T26307] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.768062][T26307] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.799293][T26307] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.851341][T26307] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.878497][T26307] netdevsim netdevsim7 netdevsim0: renamed from eth9 [ 497.916802][T26307] netdevsim netdevsim7 netdevsim1: renamed from eth10 [ 497.952393][T26307] netdevsim netdevsim7 netdevsim2: renamed from eth11 [ 498.002869][T26307] netdevsim netdevsim7 netdevsim3: renamed from eth12 [ 498.038436][T26374] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 498.061401][ T5815] Bluetooth: hci0: command 0x0401 tx timeout [ 498.118615][T26378] binder: 26375:26378 ioctl c018620b 20000040 returned -14 [ 498.382102][ T5815] Bluetooth: hci1: command tx timeout [ 498.922727][T26307] veth0_vlan: entered promiscuous mode [ 498.947197][T26307] veth1_vlan: entered promiscuous mode [ 499.018924][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.031482][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.052868][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.073385][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.090450][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.107602][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.119962][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.144078][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.158237][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.169793][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.180155][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.199340][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.210578][T26307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.222141][T26307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.236903][T26307] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 499.259064][T26307] wireguard: wg0: Could not create IPv6 socket [ 499.291832][T26307] wireguard: wg1: Could not create IPv6 socket [ 499.312449][T26307] wireguard: wg2: Could not create IPv6 socket [ 499.377548][ T1092] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 499.530957][ T29] audit: type=1326 audit(2000001068.848:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26425 comm="syz.5.8631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24bff85d19 code=0x0 [ 500.150507][ T5815] Bluetooth: hci0: command 0x0401 tx timeout [ 500.296594][T26442] bridge_slave_0: left allmulticast mode [ 500.305728][T26442] bridge_slave_0: left promiscuous mode [ 500.320713][T26442] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.338991][T26442] bond0: (slave bond_slave_0): Releasing backup interface [ 500.362329][T26442] bond0: (slave bond_slave_1): Releasing backup interface [ 500.394868][T26442] team0: Port device team_slave_0 removed [ 500.418413][T26442] team0: Port device team_slave_1 removed [ 500.427295][T26442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.439485][T26442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.457734][T26442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.479984][T26442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.567570][T26451] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 501.107057][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.884601][ T29] audit: type=1400 audit(2000001071.218:1034): avc: denied { mounton } for pid=26488 comm="syz.6.8656" path="/615/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 502.088101][ T29] audit: type=1400 audit(2000001071.418:1035): avc: denied { mounton } for pid=26495 comm="syz.6.8659" path="/618/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 502.940550][ T968] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 503.104569][ T968] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 503.120544][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.128586][ T968] usb 6-1: Product: syz [ 503.151107][ T968] usb 6-1: Manufacturer: syz [ 503.155749][ T968] usb 6-1: SerialNumber: syz [ 503.163241][ T968] usb 6-1: config 0 descriptor?? [ 503.169862][ T968] ch341 6-1:0.0: ch341-uart converter detected [ 503.421368][ T29] audit: type=1326 audit(2000001072.747:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26512 comm="syz.6.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x7fc00000 [ 503.726602][T26548] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 504.000622][T26557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8685'. [ 504.198052][ T968] usb 6-1: failed to send control message: -71 [ 504.207232][ T968] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 504.236349][ T968] usb 6-1: USB disconnect, device number 46 [ 504.254269][ T968] ch341 6-1:0.0: device disconnected [ 504.548324][T26583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8696'. [ 504.564844][T26583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8696'. [ 504.682431][T26587] bridge_slave_0: left allmulticast mode [ 504.688707][T26587] bridge_slave_0: left promiscuous mode [ 504.695031][T26587] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.709689][T26587] bridge_slave_1: left allmulticast mode [ 504.718132][T26587] bridge_slave_1: left promiscuous mode [ 504.726564][T26587] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.746011][T26587] bond0: (slave bond_slave_0): Releasing backup interface [ 504.750854][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.774233][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.787534][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.798625][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.808517][ T5823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 504.816061][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.838173][T26587] team0: Port device team_slave_0 removed [ 504.900112][T26587] team0: Port device team_slave_1 removed [ 504.907352][T26587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.915208][T26587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.025056][T26591] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 505.334795][T26591] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.419492][T26591] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.527594][T26591] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.657147][T26591] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.786155][T26591] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.802536][T26591] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.823276][T26591] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.841929][T26591] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.859095][T26591] netdevsim netdevsim7 netdevsim0: renamed from eth9 [ 505.899678][T26591] netdevsim netdevsim7 netdevsim1: renamed from eth10 [ 505.945216][T26591] netdevsim netdevsim7 netdevsim2: renamed from eth11 [ 505.978438][T26591] netdevsim netdevsim7 netdevsim3: renamed from eth12 [ 506.065092][ T29] audit: type=1400 audit(2000001075.387:1037): avc: denied { create } for pid=26638 comm="syz.3.8720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 506.545777][T26591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.562038][T26591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.579866][T26591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.605022][T26591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.618255][T26591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.629967][T26591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.641459][T26591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.658941][T26591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.683911][T26591] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 506.709116][T26591] wireguard: wg0: Could not create IPv6 socket [ 506.730755][T26591] wireguard: wg1: Could not create IPv6 socket [ 506.744214][T26591] wireguard: wg2: Could not create IPv6 socket [ 506.868376][ T5815] Bluetooth: hci1: command tx timeout [ 506.998789][T26678] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.8733'. [ 507.910252][T26717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8750'. [ 507.921682][T26717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8750'. [ 508.077955][ T968] kernel write not supported for file bpf-map (pid: 968 comm: kworker/0:2) [ 508.396815][T26740] can0: slcan on ttyS3. [ 508.451065][T26739] can0 (unregistered): slcan off ttyS3. [ 508.791177][ T46] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 508.952054][ T46] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 508.971424][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.001566][ T46] usb 6-1: config 0 descriptor?? [ 509.013583][ T46] cp210x 6-1:0.0: cp210x converter detected [ 509.417817][ T46] usb 6-1: cp210x converter now attached to ttyUSB0 [ 509.458130][ T29] audit: type=1400 audit(2000001078.787:1038): avc: denied { mounton } for pid=26783 comm="syz.6.8781" path="/668/file0" dev="ramfs" ino=86728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 509.627231][ T46] usb 6-1: USB disconnect, device number 47 [ 509.646534][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 509.667809][ T46] cp210x 6-1:0.0: device disconnected [ 509.767460][T26798] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 509.917058][T26808] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 510.188449][T26822] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 510.561528][ T46] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 510.712056][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 510.750083][ T46] usb 6-1: config 63 has too many interfaces: 254, using maximum allowed: 32 [ 510.760599][ T46] usb 6-1: config 63 has 1 interface, different from the descriptor's value: 254 [ 510.785372][ T46] usb 6-1: config 63 has no interface number 0 [ 510.801286][ T46] usb 6-1: config 63 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 510.835176][ T46] usb 6-1: config 63 interface 19 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 510.870384][ T46] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 510.879621][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.927071][ T46] usb 6-1: probing VID:PID(2201:012C) [ 510.936083][ T46] usb 6-1: vub300 testing BULK OUT EndPoint(0) 02 [ 510.946630][ T46] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 511.004420][ T46] vub300 6-1:63.19: probe with driver vub300 failed with error -22 [ 511.029598][T26875] mkiss: ax0: crc mode is auto. [ 511.106114][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8826'. [ 511.175222][ T5862] usb 6-1: USB disconnect, device number 48 [ 512.167370][ T29] audit: type=1326 audit(2000001081.497:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26913 comm="syz.6.8840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc7785d19 code=0x0 [ 512.402857][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 512.418845][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 512.427292][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 512.435808][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.445803][ T5815] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 512.453057][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.479925][T26917] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 512.635283][T26917] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.704980][T26917] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.789664][T26917] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.866329][T26917] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.944809][T26917] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.967676][T26917] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.984566][T26917] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.002669][T26917] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.018489][T26917] netdevsim netdevsim7 netdevsim0: renamed from eth9 [ 513.089997][T26917] netdevsim netdevsim7 netdevsim1: renamed from eth10 [ 513.191568][T26917] netdevsim netdevsim7 netdevsim2: renamed from eth11 [ 513.244614][T26917] netdevsim netdevsim7 netdevsim3: renamed from eth12 [ 513.743090][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.759905][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.771993][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.783649][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.795518][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.808540][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.820210][T26917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.836928][T26917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.854410][T26917] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 513.877848][T26917] wireguard: wg0: Could not create IPv6 socket [ 513.886268][T26917] wireguard: wg1: Could not create IPv6 socket [ 513.894586][T26917] wireguard: wg2: Could not create IPv6 socket [ 515.058421][T26990] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8869'. [ 515.125653][ T29] audit: type=1400 audit(2000001084.457:1040): avc: denied { setopt } for pid=26995 comm="syz.0.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 515.213144][ T29] audit: type=1400 audit(2000001084.547:1041): avc: denied { watch watch_reads } for pid=26999 comm="syz.0.8872" path="pipe:[3951]" dev="pipefs" ino=3951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 516.136823][ T29] audit: type=1400 audit(2000001085.467:1042): avc: denied { watch_sb watch_reads } for pid=27027 comm="syz.5.8884" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 516.161916][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.462717][ T5863] usb 6-1: [UEAGLE-ATM] firmware is not available [ 517.010589][T27061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8900'. [ 517.929026][T27111] lo speed is unknown, defaulting to 1000 [ 517.942758][T27111] lo speed is unknown, defaulting to 1000 [ 517.948724][T27111] lo speed is unknown, defaulting to 1000 [ 518.025546][T27111] infiniband sz1: set active [ 518.030437][ T5863] lo speed is unknown, defaulting to 1000 [ 518.036875][T27111] infiniband sz1: added lo [ 518.067710][T27111] RDS/IB: sz1: added [ 518.071929][T27111] smc: adding ib device sz1 with port count 1 [ 518.078132][T27111] smc: ib device sz1 port 1 has pnetid [ 518.084815][ T5863] lo speed is unknown, defaulting to 1000 [ 518.094469][T27111] lo speed is unknown, defaulting to 1000 [ 518.150556][T27111] lo speed is unknown, defaulting to 1000 [ 518.158071][ C0] vcan0: j1939_tp_rxtimer: 0xffff888031e03000: rx timeout, send abort [ 518.169398][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031e03000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 518.238702][T27111] lo speed is unknown, defaulting to 1000 [ 518.385694][T27111] lo speed is unknown, defaulting to 1000 [ 518.518009][T27111] lo speed is unknown, defaulting to 1000 [ 518.892848][T27147] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 518.951249][ T5864] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 518.972678][ T5815] block nbd6: Receive control failed (result -107) [ 519.027447][T27148] block nbd6: shutting down sockets [ 519.130489][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 519.137287][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.149586][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.160186][ T5864] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 519.169800][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.198345][ T5864] usb 6-1: config 0 descriptor?? [ 519.597718][T27166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27166 comm=syz.3.8948 [ 519.631407][ T5864] appleir 0003:05AC:8241.006E: unknown main item tag 0x0 [ 519.647225][ T5864] appleir 0003:05AC:8241.006E: unknown main item tag 0x0 [ 519.655716][ T5864] appleir 0003:05AC:8241.006E: unknown main item tag 0x0 [ 519.670424][ T5864] appleir 0003:05AC:8241.006E: unknown main item tag 0x0 [ 519.677996][ T5864] appleir 0003:05AC:8241.006E: unknown main item tag 0x0 [ 519.690247][ T5864] appleir 0003:05AC:8241.006E: No inputs registered, leaving [ 519.704152][ T5864] appleir 0003:05AC:8241.006E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 519.922761][ T5864] usb 6-1: USB disconnect, device number 49 [ 519.998464][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.009878][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.019165][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.032788][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.044183][ T5823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 520.053038][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.076174][T27176] ICMPv6: NDISC: Failed to initialize the control socket (err -2) [ 521.069247][T27176] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.222638][T27176] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.344459][T27176] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.417270][T27176] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.463857][ T29] audit: type=1400 audit(2000001090.797:1043): avc: denied { nlmsg_write } for pid=27212 comm="syz.3.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 521.521271][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 521.579279][T27176] netdevsim netdevsim7 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.594765][T27176] netdevsim netdevsim7 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.611574][T27176] netdevsim netdevsim7 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.624701][T27176] netdevsim netdevsim7 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.636286][T27176] netdevsim netdevsim7 netdevsim0: renamed from eth9 [ 521.666515][T27176] netdevsim netdevsim7 netdevsim1: renamed from eth10 [ 521.703146][T27176] netdevsim netdevsim7 netdevsim2: renamed from eth11 [ 521.734230][T27176] netdevsim netdevsim7 netdevsim3: renamed from eth12 [ 522.098464][T27176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.136656][T27176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.140918][ T5815] Bluetooth: hci1: command tx timeout [ 522.147452][T27176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.175831][ T29] audit: type=1326 audit(2000001091.507:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27229 comm="syz.5.8972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24bff85d19 code=0x0 [ 522.176249][T27176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.224244][T27176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.249810][T27176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.261505][T27176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.272328][T27176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.338693][T27176] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 522.389931][T27176] wireguard: wg0: Could not create IPv6 socket [ 522.402979][T27176] wireguard: wg1: Could not create IPv6 socket [ 522.422441][T27176] wireguard: wg2: Could not create IPv6 socket [ 522.558579][T27254] ------------[ cut here ]------------ [ 522.564517][T27254] WARNING: CPU: 1 PID: 27254 at net/core/skbuff.c:6072 skb_try_coalesce+0x18d3/0x1db0 [ 522.574131][T27254] Modules linked in: [ 522.578071][T27254] CPU: 1 UID: 0 PID: 27254 Comm: syz.5.8980 Not tainted 6.13.0-rc3-syzkaller #0 [ 522.587230][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 522.597333][T27254] RIP: 0010:skb_try_coalesce+0x18d3/0x1db0 [ 522.603194][T27254] Code: 00 48 c1 e0 2a 48 c1 ea 03 80 3c 02 00 0f 85 e3 04 00 00 48 8b 85 d0 00 00 00 48 89 44 24 38 e9 3d ef ff ff e8 be c8 96 f8 90 <0f> 0b 90 e9 ea f3 ff ff e8 b0 c8 96 f8 48 8b 44 24 68 48 83 e8 01 [ 522.622894][T27254] RSP: 0018:ffffc9000396f370 EFLAGS: 00010287 [ 522.629017][T27254] RAX: 0000000000002af6 RBX: ffff8880667ce0f0 RCX: ffffc9001da83000 [ 522.637053][T27254] RDX: 0000000000080000 RSI: ffffffff89034b82 RDI: 0000000000000004 [ 522.645092][T27254] RBP: ffff8880667ce370 R08: 0000000000000004 R09: 0000000000007c6f [ 522.653128][T27254] R10: 0000000000007def R11: 0000000000000002 R12: ffff888079820ac0 [ 522.661145][T27254] R13: ffff8880667ce16e R14: 0000000000007def R15: 0000000000007c6f [ 522.669121][T27254] FS: 00007f24c0e376c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 522.678106][T27254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.684718][T27254] CR2: 000000002000f000 CR3: 000000002e12e000 CR4: 00000000003526f0 [ 522.692770][T27254] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 522.700861][T27254] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 522.708842][T27254] Call Trace: [ 522.712204][T27254] [ 522.715158][T27254] ? __warn+0xea/0x3c0 [ 522.719248][T27254] ? skb_try_coalesce+0x18d3/0x1db0 [ 522.724520][T27254] ? report_bug+0x3c0/0x580 [ 522.729083][T27254] ? handle_bug+0x54/0xa0 [ 522.733848][T27254] ? exc_invalid_op+0x17/0x50 [ 522.738553][T27254] ? asm_exc_invalid_op+0x1a/0x20 [ 522.743661][T27254] ? skb_try_coalesce+0x18d2/0x1db0 [ 522.744885][T27258] : entered promiscuous mode [ 522.748863][T27254] ? skb_try_coalesce+0x18d3/0x1db0 [ 522.748947][T27254] mptcp_try_coalesce+0x128/0x310 [ 522.764165][T27254] ? __pfx___lock_acquire+0x10/0x10 [ 522.769383][T27254] ? __pfx_mptcp_try_coalesce+0x10/0x10 [ 522.774978][T27254] ? sk_leave_memory_pressure+0xdd/0x130 [ 522.780656][T27254] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 522.786485][T27254] ? sock_rfree+0x1ee/0x2e0 [ 522.791029][T27254] __mptcp_move_skbs_from_subflow+0xf8d/0x24c0 [ 522.797231][T27254] mptcp_data_ready+0x30e/0x8e0 [ 522.802122][T27254] ? __pfx_mptcp_data_ready+0x10/0x10 [ 522.807514][T27254] ? tcp_update_pacing_rate+0x1f6/0x350 [ 522.813128][T27254] subflow_data_ready+0x51d/0x7d0 [ 522.818163][T27254] ? __pfx_subflow_data_ready+0x10/0x10 [ 522.823754][T27254] ? __pfx_tcp_grow_window+0x10/0x10 [ 522.829071][T27254] tcp_data_ready+0x146/0x5b0 [ 522.833787][T27254] ? tcp_event_data_recv+0xb6e/0x1410 [ 522.839165][T27254] ? __pfx_tcp_data_ready+0x10/0x10 [ 522.844415][T27254] tcp_data_queue+0x1a6f/0x4d80 [ 522.849287][T27254] ? tcp_urg+0x110/0xb80 [ 522.853566][T27254] ? __pfx_tcp_data_queue+0x10/0x10 [ 522.858787][T27254] ? tcp_send_dupack+0x810/0x810 [ 522.863779][T27254] ? read_tsc+0x9/0x20 [ 522.867875][T27254] ? ktime_get+0x1ac/0x300 [ 522.872356][T27254] tcp_rcv_established+0x7df/0x20d0 [ 522.877600][T27254] ? __pfx_tcp_rcv_established+0x10/0x10 [ 522.883277][T27254] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 522.888406][T27254] ? __pfx_ipv4_dst_check+0x10/0x10 [ 522.893667][T27254] tcp_v4_do_rcv+0x5ca/0xa90 [ 522.898273][T27254] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 522.903427][T27254] __release_sock+0x31b/0x400 [ 522.908114][T27254] ? release_sock+0x21/0x220 [ 522.912854][T27254] release_sock+0x5a/0x220 [ 522.917290][T27254] __mptcp_push_pending+0x400/0x560 [ 522.922571][T27254] ? __pfx___mptcp_push_pending+0x10/0x10 [ 522.928332][T27254] ? __virt_addr_valid+0x5e/0x590 [ 522.933395][T27254] ? __phys_addr+0xc6/0x150 [ 522.937912][T27254] ? __phys_addr_symbol+0x30/0x80 [ 522.943013][T27254] ? __check_object_size+0x488/0x710 [ 522.948323][T27254] mptcp_sendmsg+0x1960/0x1f20 [ 522.953144][T27254] ? __pfx_sock_has_perm+0x1/0x10 [ 522.958184][T27254] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 522.963369][T27254] ? __fget_files+0x206/0x3a0 [ 522.968056][T27254] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 522.973217][T27254] inet_sendmsg+0x119/0x140 [ 522.977764][T27254] __sys_sendto+0x42a/0x4f0 [ 522.982328][T27254] ? __pfx___sys_sendto+0x10/0x10 [ 522.987376][T27254] ? sock_common_setsockopt+0x2e/0xf0 [ 522.992823][T27254] ? lock_acquire+0x2f/0xb0 [ 522.997352][T27254] ? xfd_validate_state+0x5d/0x180 [ 523.002512][T27254] ? rcu_is_watching+0x12/0xc0 [ 523.007298][T27254] __x64_sys_sendto+0xe0/0x1c0 [ 523.012128][T27254] ? do_syscall_64+0x91/0x250 [ 523.016819][T27254] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.022070][T27254] do_syscall_64+0xcd/0x250 [ 523.026614][T27254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.027719][T27267] vxcan2: entered promiscuous mode [ 523.032549][T27254] RIP: 0033:0x7f24bff85d19 [ 523.032572][T27254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.032591][T27254] RSP: 002b:00007f24c0e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.032613][T27254] RAX: ffffffffffffffda RBX: 00007f24c0175fa0 RCX: 00007f24bff85d19 [ 523.032626][T27254] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 0000000000000003 [ 523.032638][T27254] RBP: 00007f24c0001a20 R08: 0000000000000000 R09: 0000000000000000 [ 523.032651][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.061810][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.108172][T27254] R13: 0000000000000000 R14: 00007f24c0175fa0 R15: 00007ffd8ba1b548 [ 523.116205][T27254] [ 523.119223][T27254] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 523.126483][T27254] CPU: 1 UID: 0 PID: 27254 Comm: syz.5.8980 Not tainted 6.13.0-rc3-syzkaller #0 [ 523.135484][T27254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 523.145532][T27254] Call Trace: [ 523.148791][T27254] [ 523.151715][T27254] dump_stack_lvl+0x3d/0x1f0 [ 523.156311][T27254] panic+0x71d/0x800 [ 523.160191][T27254] ? __pfx_panic+0x10/0x10 [ 523.164595][T27254] ? show_trace_log_lvl+0x29d/0x3d0 [ 523.169805][T27254] ? skb_try_coalesce+0x18d3/0x1db0 [ 523.174982][T27254] check_panic_on_warn+0xab/0xb0 [ 523.179901][T27254] __warn+0xf6/0x3c0 [ 523.183778][T27254] ? skb_try_coalesce+0x18d3/0x1db0 [ 523.188982][T27254] report_bug+0x3c0/0x580 [ 523.193298][T27254] handle_bug+0x54/0xa0 [ 523.197434][T27254] exc_invalid_op+0x17/0x50 [ 523.201921][T27254] asm_exc_invalid_op+0x1a/0x20 [ 523.206764][T27254] RIP: 0010:skb_try_coalesce+0x18d3/0x1db0 [ 523.212547][T27254] Code: 00 48 c1 e0 2a 48 c1 ea 03 80 3c 02 00 0f 85 e3 04 00 00 48 8b 85 d0 00 00 00 48 89 44 24 38 e9 3d ef ff ff e8 be c8 96 f8 90 <0f> 0b 90 e9 ea f3 ff ff e8 b0 c8 96 f8 48 8b 44 24 68 48 83 e8 01 [ 523.232135][T27254] RSP: 0018:ffffc9000396f370 EFLAGS: 00010287 [ 523.238184][T27254] RAX: 0000000000002af6 RBX: ffff8880667ce0f0 RCX: ffffc9001da83000 [ 523.246134][T27254] RDX: 0000000000080000 RSI: ffffffff89034b82 RDI: 0000000000000004 [ 523.254099][T27254] RBP: ffff8880667ce370 R08: 0000000000000004 R09: 0000000000007c6f [ 523.262135][T27254] R10: 0000000000007def R11: 0000000000000002 R12: ffff888079820ac0 [ 523.270093][T27254] R13: ffff8880667ce16e R14: 0000000000007def R15: 0000000000007c6f [ 523.278052][T27254] ? skb_try_coalesce+0x18d2/0x1db0 [ 523.283246][T27254] mptcp_try_coalesce+0x128/0x310 [ 523.288253][T27254] ? __pfx___lock_acquire+0x10/0x10 [ 523.293444][T27254] ? __pfx_mptcp_try_coalesce+0x10/0x10 [ 523.298973][T27254] ? sk_leave_memory_pressure+0xdd/0x130 [ 523.304589][T27254] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 523.310383][T27254] ? sock_rfree+0x1ee/0x2e0 [ 523.314885][T27254] __mptcp_move_skbs_from_subflow+0xf8d/0x24c0 [ 523.321049][T27254] mptcp_data_ready+0x30e/0x8e0 [ 523.325917][T27254] ? __pfx_mptcp_data_ready+0x10/0x10 [ 523.331274][T27254] ? tcp_update_pacing_rate+0x1f6/0x350 [ 523.336802][T27254] subflow_data_ready+0x51d/0x7d0 [ 523.341812][T27254] ? __pfx_subflow_data_ready+0x10/0x10 [ 523.347357][T27254] ? __pfx_tcp_grow_window+0x10/0x10 [ 523.352626][T27254] tcp_data_ready+0x146/0x5b0 [ 523.357300][T27254] ? tcp_event_data_recv+0xb6e/0x1410 [ 523.362653][T27254] ? __pfx_tcp_data_ready+0x10/0x10 [ 523.367863][T27254] tcp_data_queue+0x1a6f/0x4d80 [ 523.372726][T27254] ? tcp_urg+0x110/0xb80 [ 523.376960][T27254] ? __pfx_tcp_data_queue+0x10/0x10 [ 523.382154][T27254] ? tcp_send_dupack+0x810/0x810 [ 523.387087][T27254] ? read_tsc+0x9/0x20 [ 523.391148][T27254] ? ktime_get+0x1ac/0x300 [ 523.395554][T27254] tcp_rcv_established+0x7df/0x20d0 [ 523.400758][T27254] ? __pfx_tcp_rcv_established+0x10/0x10 [ 523.406406][T27254] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 523.411513][T27254] ? __pfx_ipv4_dst_check+0x10/0x10 [ 523.416700][T27254] tcp_v4_do_rcv+0x5ca/0xa90 [ 523.421279][T27254] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 523.426393][T27254] __release_sock+0x31b/0x400 [ 523.431052][T27254] ? release_sock+0x21/0x220 [ 523.435625][T27254] release_sock+0x5a/0x220 [ 523.440019][T27254] __mptcp_push_pending+0x400/0x560 [ 523.445208][T27254] ? __pfx___mptcp_push_pending+0x10/0x10 [ 523.450909][T27254] ? __virt_addr_valid+0x5e/0x590 [ 523.455917][T27254] ? __phys_addr+0xc6/0x150 [ 523.460408][T27254] ? __phys_addr_symbol+0x30/0x80 [ 523.465432][T27254] ? __check_object_size+0x488/0x710 [ 523.470710][T27254] mptcp_sendmsg+0x1960/0x1f20 [ 523.475477][T27254] ? __pfx_sock_has_perm+0x1/0x10 [ 523.480491][T27254] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 523.485619][T27254] ? __fget_files+0x206/0x3a0 [ 523.490276][T27254] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 523.495381][T27254] inet_sendmsg+0x119/0x140 [ 523.499871][T27254] __sys_sendto+0x42a/0x4f0 [ 523.504360][T27254] ? __pfx___sys_sendto+0x10/0x10 [ 523.509366][T27254] ? sock_common_setsockopt+0x2e/0xf0 [ 523.514732][T27254] ? lock_acquire+0x2f/0xb0 [ 523.519222][T27254] ? xfd_validate_state+0x5d/0x180 [ 523.524330][T27254] ? rcu_is_watching+0x12/0xc0 [ 523.529078][T27254] __x64_sys_sendto+0xe0/0x1c0 [ 523.533825][T27254] ? do_syscall_64+0x91/0x250 [ 523.538498][T27254] ? lockdep_hardirqs_on+0x7c/0x110 [ 523.543676][T27254] do_syscall_64+0xcd/0x250 [ 523.548165][T27254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.554072][T27254] RIP: 0033:0x7f24bff85d19 [ 523.558468][T27254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.578057][T27254] RSP: 002b:00007f24c0e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.586451][T27254] RAX: ffffffffffffffda RBX: 00007f24c0175fa0 RCX: 00007f24bff85d19 [ 523.594404][T27254] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 0000000000000003 [ 523.602353][T27254] RBP: 00007f24c0001a20 R08: 0000000000000000 R09: 0000000000000000 [ 523.610311][T27254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.618286][T27254] R13: 0000000000000000 R14: 00007f24c0175fa0 R15: 00007ffd8ba1b548 [ 523.626245][T27254] [ 523.629466][T27254] Kernel Offset: disabled [ 523.633911][T27254] Rebooting in 86400 seconds..