last executing test programs: 9.312684362s ago: executing program 1 (id=3708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) 9.143187166s ago: executing program 1 (id=3711): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x5) 9.106849338s ago: executing program 1 (id=3712): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49) 8.4633167s ago: executing program 1 (id=3718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.624070395s ago: executing program 1 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 3.339988325s ago: executing program 3 (id=3748): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.228999193s ago: executing program 3 (id=3750): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a0002", 0x43) close(r1) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r4) bind$bt_hci(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 2.327591837s ago: executing program 4 (id=3753): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.259321537s ago: executing program 3 (id=3754): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.259056386s ago: executing program 2 (id=3755): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r3, r3, 0x0, 0x7a680000) read$FUSE(r3, 0x0, 0x0) 2.189345878s ago: executing program 2 (id=3756): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) 2.053327385s ago: executing program 2 (id=3757): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 1.889980277s ago: executing program 2 (id=3759): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 1.747604712s ago: executing program 2 (id=3760): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r0, &(0x7f0000000100)="8a510eb48dbdfc", 0x7, 0x9}]) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 1.654236144s ago: executing program 4 (id=3761): userfaultfd(0x80001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) memfd_secret(0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x11fffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.653828389s ago: executing program 2 (id=3762): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) splice(r0, 0x0, r3, 0x0, 0x80, 0x4) 1.618238021s ago: executing program 3 (id=3763): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0xff07}, 0x2000000) 1.51414094s ago: executing program 4 (id=3764): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.399251928s ago: executing program 4 (id=3765): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) timer_create(0x3, 0x0, &(0x7f0000001280)=0x0) timer_settime(r3, 0x1, &(0x7f00000012c0)={{}, {0x0, 0x989680}}, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 983.604633ms ago: executing program 0 (id=3766): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = dup(r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8}, @val={0xc, 0x99, {0x401, 0x73}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) 932.170493ms ago: executing program 0 (id=3767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x7, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x40, 0x2d63, 0x6be, 0xffffffff, 0x0, 0x0, 0x0, 0x10}}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}, {{&(0x7f0000005840)=@file={0x1, './file2\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) 893.785924ms ago: executing program 0 (id=3768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 855.396705ms ago: executing program 0 (id=3769): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 706.037909ms ago: executing program 0 (id=3770): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 642.571269ms ago: executing program 0 (id=3771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x804809d) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r1, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ipv6_getnetconf={0x14, 0x52, 0x304, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x0) 495.382487ms ago: executing program 4 (id=3772): ioperm(0x0, 0x1, 0x1) rmdir(0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 478.505426ms ago: executing program 4 (id=3773): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 170.188018ms ago: executing program 3 (id=3774): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x2, 0x802ce}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xa, r0, &(0x7f0000000100)="8a510eb48dbdfc", 0x7, 0x9}]) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 59.651502ms ago: executing program 1 (id=3726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 3 (id=3775): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0xfffffffc, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r4) kernel console output (not intermixed with test programs): 16420] ldm_validate_partition_table(): Disk read failed. [ 1002.255613][T16420] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.475729][T16420] Buffer I/O error on dev loop6, logical block 0, async page read [ 1002.553848][T16433] tipc: Started in network mode [ 1002.558746][T16433] tipc: Node identity 2e7006939a5c, cluster identity 4711 [ 1002.568654][T16433] tipc: Enabled bearer , priority 0 [ 1002.577368][T16433] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1002.587906][T16433] tipc: Resetting bearer [ 1002.595780][T16420] Dev loop6: unable to read RDB block 0 [ 1002.608287][T16420] loop6: unable to read partition table [ 1002.630645][T16432] tipc: Disabling bearer [ 1002.636549][T16420] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1003.382920][T16441] 9pnet_fd: p9_fd_create_tcp (16441): problem connecting socket to 127.0.0.1 [ 1003.637755][T16448] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2838'. [ 1004.834359][T16480] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.2849'. [ 1005.339870][T16491] loop6: detected capacity change from 0 to 2560 [ 1005.355081][T16491] ldm_validate_partition_table(): Disk read failed. [ 1005.363327][T16491] Dev loop6: unable to read RDB block 0 [ 1005.369250][T16491] loop6: unable to read partition table [ 1005.378521][T16491] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1005.427791][T16496] vlan2: entered allmulticast mode [ 1005.433499][T16496] veth1: entered allmulticast mode [ 1006.005105][T16509] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1006.011632][T16509] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1006.019294][T16509] vhci_hcd vhci_hcd.0: Device attached [ 1006.101512][T16511] vhci_hcd: connection closed [ 1006.124571][ T13] vhci_hcd: stop threads [ 1006.270236][T11349] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1006.422084][ T13] vhci_hcd: release socket [ 1006.898683][ T13] vhci_hcd: disconnect device [ 1007.061632][T11349] usb 33-1: enqueue for inactive port 0 [ 1007.130266][T11349] vhci_hcd: vhci_device speed not set [ 1007.412995][T16532] fuse: Unknown parameter '00000000000000000000003' [ 1007.553646][T16542] netlink: 'syz.3.2868': attribute type 1 has an invalid length. [ 1007.586612][T16542] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1007.654585][T16545] 9pnet_fd: Insufficient options for proto=fd [ 1008.285415][T15519] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1008.297338][T15519] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1008.305386][T15519] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1008.314799][T15519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1008.324426][T15519] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1008.540131][T16552] lo speed is unknown, defaulting to 1000 [ 1008.664163][ T5859] syz_tun (unregistering): left allmulticast mode [ 1008.746694][ T30] audit: type=1400 audit(1757554094.124:857): avc: denied { module_request } for pid=16552 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1008.769300][T10307] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1008.776447][T16552] chnl_net:caif_netlink_parms(): no params data found [ 1008.814227][T16559] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1008.820751][T16559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1008.829210][T16559] vhci_hcd vhci_hcd.0: Device attached [ 1008.840245][T11349] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1008.874894][T16552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.882221][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.889676][T16552] bridge_slave_0: entered allmulticast mode [ 1008.897543][T16552] bridge_slave_0: entered promiscuous mode [ 1008.905756][T16552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.913881][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.921864][T16552] bridge_slave_1: entered allmulticast mode [ 1008.929961][T16552] bridge_slave_1: entered promiscuous mode [ 1008.957348][T10307] usb 1-1: Using ep0 maxpacket: 8 [ 1008.979909][T10307] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1008.990241][T11349] usb 3-1: Using ep0 maxpacket: 8 [ 1009.003019][T10307] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1009.009456][T11349] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1009.014788][T10307] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1009.026794][T11349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.044084][T10307] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.050310][T11349] usb 3-1: Product: syz [ 1009.058054][T10307] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1009.064196][T16552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.075851][T10307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.088003][T11349] usb 3-1: Manufacturer: syz [ 1009.092887][T11349] usb 3-1: SerialNumber: syz [ 1009.093650][T16552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.100794][ T10] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 1009.124185][T11349] usb 3-1: config 0 descriptor?? [ 1009.141499][T16566] vhci_hcd: connection reset by peer [ 1009.149713][ T6195] vhci_hcd: stop threads [ 1009.158768][ T6195] vhci_hcd: release socket [ 1009.168417][ T6195] vhci_hcd: disconnect device [ 1009.191215][T16552] team0: Port device team_slave_0 added [ 1009.203328][T16552] team0: Port device team_slave_1 added [ 1009.251748][T16552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.258860][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.286387][T16552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.305275][T16552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.312797][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.314875][T10307] usb 1-1: GET_CAPABILITIES returned 0 [ 1009.339200][T16552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.357100][T11349] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1009.400124][T10307] usbtmc 1-1:16.0: can't read capabilities [ 1009.422496][T16552] hsr_slave_0: entered promiscuous mode [ 1009.439678][T16552] hsr_slave_1: entered promiscuous mode [ 1009.448343][T16552] debugfs: 'hsr0' already exists in 'hsr' [ 1009.456402][T16552] Cannot create hsr debugfs directory [ 1009.533221][T10307] usb 1-1: USB disconnect, device number 31 [ 1009.704153][T16574] fuse: Unknown parameter '00000000000000000000003' [ 1009.874451][T16580] fuse: Unknown parameter 'group_id00000000000000000000' [ 1010.351384][ T5848] Bluetooth: hci5: command tx timeout [ 1010.486065][T16590] random: crng reseeded on system resumption [ 1010.671301][ T30] audit: type=1326 audit(1757554096.044:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1010.782506][ T30] audit: type=1326 audit(1757554096.044:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1010.848610][T16552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1010.862218][ T30] audit: type=1326 audit(1757554096.084:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1010.887364][ T30] audit: type=1326 audit(1757554096.084:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1010.916641][T16552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1010.925370][ T30] audit: type=1326 audit(1757554096.204:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1010.952974][T16552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1010.960514][ T30] audit: type=1326 audit(1757554096.214:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1010.987806][T16552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1011.006548][ T30] audit: type=1326 audit(1757554096.214:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1011.042069][ T30] audit: type=1326 audit(1757554096.224:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1011.067838][ T30] audit: type=1326 audit(1757554096.234:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.4.2884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1011.127100][T11349] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1011.168659][T11349] usb 3-1: USB disconnect, device number 30 [ 1011.211281][T16552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.245466][T16552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.264484][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.271573][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.302822][T16552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1011.361147][T16552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1011.384344][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.391508][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.452542][T16606] netlink: 'syz.0.2886': attribute type 1 has an invalid length. [ 1011.484545][T16606] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1011.887685][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.048849][T16552] veth0_vlan: entered promiscuous mode [ 1012.068018][T16552] veth1_vlan: entered promiscuous mode [ 1012.126259][T16552] veth0_macvtap: entered promiscuous mode [ 1012.139070][T16552] veth1_macvtap: entered promiscuous mode [ 1012.229825][T16552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.287002][T16552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.309645][T10284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.319048][T10284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.328166][T10284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.339532][T10284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.398560][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.413336][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.437113][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.443736][ T5848] Bluetooth: hci5: command tx timeout [ 1012.445805][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.457757][T16142] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1012.610505][T16142] usb 1-1: Using ep0 maxpacket: 8 [ 1012.654406][T16142] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1012.723137][T16142] usb 1-1: config 0 has no interface number 0 [ 1012.865002][T16142] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1012.902598][T16142] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1012.934494][T16142] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1012.966847][T16142] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1013.018331][T16142] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1013.067430][T16142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.107361][T16142] usb 1-1: config 0 descriptor?? [ 1013.143902][T16142] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1013.806765][T16658] random: crng reseeded on system resumption [ 1014.372299][ T10] vhci_hcd: vhci_device speed not set [ 1014.582515][ T5848] Bluetooth: hci5: command tx timeout [ 1014.717888][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1014.717904][ T30] audit: type=1326 audit(1757554100.084:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1014.751217][ T30] audit: type=1326 audit(1757554100.084:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1014.774680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.834045][ T30] audit: type=1326 audit(1757554100.084:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1014.857433][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.994594][ T30] audit: type=1326 audit(1757554100.084:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.063448][ T30] audit: type=1326 audit(1757554100.084:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.113868][ T30] audit: type=1326 audit(1757554100.084:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.156987][T16681] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1015.163510][T16681] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1015.171230][T16681] vhci_hcd vhci_hcd.0: Device attached [ 1015.219013][T10307] usb 1-1: USB disconnect, device number 32 [ 1015.237889][ T30] audit: type=1326 audit(1757554100.084:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.286016][T10307] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1015.325478][ T30] audit: type=1326 audit(1757554100.084:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.353489][ T30] audit: type=1326 audit(1757554100.084:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.456070][ T30] audit: type=1326 audit(1757554100.084:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16656 comm="syz.4.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ad418eba9 code=0x7ffc0000 [ 1015.481555][T11054] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1015.510119][T16682] vhci_hcd: connection reset by peer [ 1015.520697][ T78] vhci_hcd: stop threads [ 1015.533092][ T78] vhci_hcd: release socket [ 1015.547855][ T78] vhci_hcd: disconnect device [ 1016.600238][ T5848] Bluetooth: hci5: command tx timeout [ 1018.175845][T16739] tipc: Enabling of bearer rejected, failed to enable media [ 1019.295537][T16764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1019.302057][T16764] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1019.310995][T16764] vhci_hcd vhci_hcd.0: Device attached [ 1020.328057][T16765] vhci_hcd: connection closed [ 1020.328274][T10016] vhci_hcd: stop threads [ 1021.223801][T10016] vhci_hcd: release socket [ 1021.239747][T10016] vhci_hcd: disconnect device [ 1021.349366][T11054] vhci_hcd: vhci_device speed not set [ 1021.357875][T16794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1021.481443][T16796] fuse: Bad value for 'user_id' [ 1021.543543][T16796] fuse: Bad value for 'user_id' [ 1022.205543][T16821] tipc: Enabling of bearer rejected, failed to enable media [ 1023.148309][T16839] fuse: Bad value for 'user_id' [ 1023.160326][T11349] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1023.205656][T16839] fuse: Bad value for 'user_id' [ 1023.370281][T11349] usb 3-1: Using ep0 maxpacket: 8 [ 1023.381534][T11349] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1023.394363][T11349] usb 3-1: config 57 has an invalid interface number: 229 but max is 0 [ 1023.417278][T11349] usb 3-1: config 57 has no interface number 0 [ 1023.436546][T11349] usb 3-1: config 57 interface 229 has no altsetting 0 [ 1023.606782][T11349] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 1023.625625][T11349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.673188][T11349] usb 3-1: Product: syz [ 1023.772029][T11349] usb 3-1: Manufacturer: syz [ 1023.784437][T11349] usb 3-1: SerialNumber: syz [ 1024.446657][T11349] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1025.012963][T11349] usb 3-1: USB disconnect, device number 31 [ 1025.439367][T16869] tipc: Started in network mode [ 1025.445429][T16869] tipc: Node identity , cluster identity 4711 [ 1025.455182][T16869] tipc: Failed to obtain node identity [ 1025.461384][T16869] tipc: Enabling of bearer rejected, failed to enable media [ 1025.475436][T16870] tipc: Enabling of bearer rejected, failed to enable media [ 1026.581983][T16889] fuse: Bad value for 'fd' [ 1028.418521][T16903] overlayfs: failed to resolve './file0': -2 [ 1029.925203][T11349] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1029.965033][T16926] fuse: Bad value for 'fd' [ 1030.080925][T11349] usb 2-1: Using ep0 maxpacket: 16 [ 1030.088309][T11349] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.099329][T11349] usb 2-1: config 0 has no interface number 0 [ 1030.108041][T11349] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1030.119881][T11349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.128024][T11349] usb 2-1: Product: syz [ 1030.130608][ T5883] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1030.137870][T11349] usb 2-1: Manufacturer: syz [ 1030.151998][T11349] usb 2-1: SerialNumber: syz [ 1030.170324][T11349] usb 2-1: config 0 descriptor?? [ 1030.182961][T11349] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1030.360429][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 1030.380565][ T5883] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1030.389274][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.402748][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.414864][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1030.430194][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.439338][ T5883] usb 5-1: Product: syz [ 1030.455106][ T5883] usb 5-1: Manufacturer: syz [ 1030.459725][ T5883] usb 5-1: SerialNumber: syz [ 1030.479910][T15519] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1030.489656][T15519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1030.497670][T15519] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1030.508697][T15519] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1030.517740][T15519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1030.597745][T16937] lo speed is unknown, defaulting to 1000 [ 1030.778624][T16937] chnl_net:caif_netlink_parms(): no params data found [ 1030.822405][T16029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.834214][T16029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1030.919970][T16029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.930446][T16029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1030.933052][ T5883] usb 5-1: 0:2 : does not exist [ 1030.954217][ T5883] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1031.004063][ T5883] usb 5-1: USB disconnect, device number 37 [ 1031.034421][T16937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.038858][T10353] udevd[10353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.054773][T16937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.072185][T16937] bridge_slave_0: entered allmulticast mode [ 1031.079822][T16937] bridge_slave_0: entered promiscuous mode [ 1031.109833][T16029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.123266][T16029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1031.145751][T16937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.156982][T16937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.164703][T16937] bridge_slave_1: entered allmulticast mode [ 1031.171736][T16937] bridge_slave_1: entered promiscuous mode [ 1031.214809][T16029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.226991][T16029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1031.248352][T16937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.261086][T16937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.316624][T16937] team0: Port device team_slave_0 added [ 1031.352505][T16937] team0: Port device team_slave_1 added [ 1031.432807][T16937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.439912][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.471805][T16937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.489426][T16937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.514273][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.540987][T16937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.794150][T11349] gspca_spca1528: reg_r err -71 [ 1031.802511][T11349] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1031.830857][T11349] usb 2-1: USB disconnect, device number 37 [ 1032.202279][T16029] bond0 (unregistering): Released all slaves [ 1032.384414][T16029] bond1 (unregistering): Released all slaves [ 1032.602190][T15519] Bluetooth: hci4: command tx timeout [ 1032.874101][T16976] overlayfs: failed to resolve './file0': -2 [ 1033.141313][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 1033.214745][T16029] bond2 (unregistering): Released all slaves [ 1033.216972][T16981] fuse: Bad value for 'fd' [ 1033.959540][T16991] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1034.125679][T16029] bond3 (unregistering): Released all slaves [ 1034.260026][T16029] bond4 (unregistering): Released all slaves [ 1034.291999][T16029] bond5 (unregistering): Released all slaves [ 1034.384821][T16029] bond6 (unregistering): Released all slaves [ 1034.416236][T16029] bond7 (unregistering): Released all slaves [ 1034.477276][T16029] bond8 (unregistering): Released all slaves [ 1034.503719][T16029] bond9 (unregistering): Released all slaves [ 1034.517863][T16029] bond10 (unregistering): Released all slaves [ 1034.536487][T16029] bond11 (unregistering): Released all slaves [ 1034.680478][T15519] Bluetooth: hci4: command tx timeout [ 1035.099856][T16029] bond12 (unregistering): Released all slaves [ 1035.482726][T17014] rdma_op ffff88807744e1f0 conn xmit_rdma 0000000000000000 [ 1035.522087][ T8670] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1035.750249][ T8670] usb 5-1: Using ep0 maxpacket: 16 [ 1035.954464][ T8670] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.963510][ T8670] usb 5-1: config 0 has no interface number 0 [ 1036.001876][T16029] bond13 (unregistering): Released all slaves [ 1036.006291][ T8670] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1036.019904][ T8670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.044701][ T8670] usb 5-1: Product: syz [ 1036.083971][ T8670] usb 5-1: Manufacturer: syz [ 1036.089015][ T8670] usb 5-1: SerialNumber: syz [ 1036.096816][ T8670] usb 5-1: config 0 descriptor?? [ 1036.116192][ T8670] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1036.381372][T16029] bond14 (unregistering): Released all slaves [ 1036.770275][T15519] Bluetooth: hci4: command tx timeout [ 1037.145439][T16937] hsr_slave_0: entered promiscuous mode [ 1037.192134][T16937] hsr_slave_1: entered promiscuous mode [ 1037.222099][T16937] debugfs: 'hsr0' already exists in 'hsr' [ 1037.230888][T16937] Cannot create hsr debugfs directory [ 1037.302556][T16029] tipc: Left network mode [ 1037.412972][T17025] fuse: Bad value for 'fd' [ 1037.605713][T17031] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1037.612245][T17031] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1037.620260][T17031] vhci_hcd vhci_hcd.0: Device attached [ 1037.741099][T17032] vhci_hcd: connection closed [ 1037.749446][T10284] vhci_hcd: stop threads [ 1037.768466][ T8670] gspca_spca1528: reg_r err -71 [ 1037.788008][ T8670] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 1037.849658][T10284] vhci_hcd: release socket [ 1037.860571][ T10] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 1037.901924][T10284] vhci_hcd: disconnect device [ 1037.926207][ T8670] usb 5-1: USB disconnect, device number 38 [ 1038.831692][T15519] Bluetooth: hci4: command tx timeout [ 1039.035250][T16029] hsr_slave_0: left promiscuous mode [ 1039.107430][T16029] hsr_slave_1: left promiscuous mode [ 1039.188797][T16029] veth1_macvtap: left promiscuous mode [ 1039.194536][T16029] veth0_macvtap: left promiscuous mode [ 1039.200345][T16029] veth1_vlan: left promiscuous mode [ 1039.414133][T16029] pim6reg (unregistering): left allmulticast mode [ 1039.675918][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 1040.467975][T17075] fuse: Bad value for 'fd' [ 1042.920250][ T5883] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1042.997100][ T10] vhci_hcd: vhci_device speed not set [ 1043.130215][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 1043.141472][ T5883] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1043.149553][ T5883] usb 2-1: config 0 has no interface number 0 [ 1043.607641][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1043.619046][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1043.630958][ T5883] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1043.648840][ T5883] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1043.674253][ T5883] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1043.689519][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.713723][ T5883] usb 2-1: config 0 descriptor?? [ 1043.766304][ T5883] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1045.545239][T11054] usb 2-1: USB disconnect, device number 38 [ 1045.553823][T11054] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1046.330446][ T8670] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1046.561480][ T8670] usb 4-1: Using ep0 maxpacket: 8 [ 1046.653820][ T8670] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1046.705828][ T8670] usb 4-1: config 57 has an invalid interface number: 229 but max is 0 [ 1046.749479][ T8670] usb 4-1: config 57 has no interface number 0 [ 1046.784521][ T8670] usb 4-1: config 57 interface 229 has no altsetting 0 [ 1046.837490][ T8670] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 1046.891026][T17140] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1046.897565][T17140] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1046.905318][T17140] vhci_hcd vhci_hcd.0: Device attached [ 1046.932046][ T8670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.972977][T17147] vhci_hcd: connection closed [ 1046.983107][ T1320] vhci_hcd: stop threads [ 1047.038365][ T8670] usb 4-1: Product: syz [ 1047.089341][ T8670] usb 4-1: Manufacturer: syz [ 1047.096242][ T1320] vhci_hcd: release socket [ 1047.145470][ T8670] usb 4-1: SerialNumber: syz [ 1047.151517][ T1320] vhci_hcd: disconnect device [ 1047.191162][T11349] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 1047.275079][T11349] usb 35-1: enqueue for inactive port 0 [ 1047.420792][T11349] vhci_hcd: vhci_device speed not set [ 1047.729916][ T8670] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1048.090967][ T8670] usb 4-1: USB disconnect, device number 45 [ 1048.703407][T17162] tipc: Started in network mode [ 1048.708296][T17162] tipc: Node identity 16704892fdff, cluster identity 4711 [ 1048.842411][T17162] tipc: Enabled bearer , priority 0 [ 1048.894742][T17162] tipc: Resetting bearer [ 1048.998669][T17166] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1049.547403][T17159] tipc: Disabling bearer [ 1049.639457][T17178] dvmrp1: entered allmulticast mode [ 1049.898351][T17191] syz_tun: entered allmulticast mode [ 1049.915181][T16937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1049.952717][T16937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1050.093363][T16937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1050.612687][T16937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1050.826117][T16937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.979547][T16937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.001715][ T2859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.009944][ T2859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.053074][ T2859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.060239][ T2859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.080364][T16937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.294955][T16937] veth0_vlan: entered promiscuous mode [ 1053.475420][T16937] veth1_vlan: entered promiscuous mode [ 1053.786800][T17258] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 1054.005869][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.542254][T16937] veth0_macvtap: entered promiscuous mode [ 1054.571242][T16937] veth1_macvtap: entered promiscuous mode [ 1054.626871][T17265] 9pnet_fd: p9_fd_create_tcp (17265): problem connecting socket to 127.0.0.1 [ 1054.657437][T16937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.691322][T16937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.702387][T17267] tipc: Started in network mode [ 1054.716792][T17267] tipc: Node identity b2a0d5375675, cluster identity 4711 [ 1054.747833][T17267] tipc: Enabled bearer , priority 0 [ 1054.790037][T17267] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1054.822431][ T1320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.850942][ T1320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.874445][T17275] tipc: Resetting bearer [ 1054.905528][ T1320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.112954][T17266] tipc: Disabling bearer [ 1055.288323][ T1320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.605347][ T6906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.644651][ T6906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.747265][T16029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.761697][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1055.819985][T16029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.930804][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1056.281587][ T10] usb 4-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 1056.323634][ T10] usb 4-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.447794][ T10] usb 4-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 1056.469226][ T10] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1056.530200][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.633589][ T10] usb 4-1: string descriptor 0 read error: -71 [ 1057.660386][T17329] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1057.672920][ T10] uvcvideo 4-1:73.0: probe with driver uvcvideo failed with error -22 [ 1057.723121][ T10] usb 4-1: USB disconnect, device number 46 [ 1057.759414][T17331] syzkaller0: entered promiscuous mode [ 1057.772911][T17331] syzkaller0: entered allmulticast mode [ 1057.802465][T17331] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1057.833527][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1057.844906][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1057.853546][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1057.873156][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1057.898173][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1058.029416][ T5856] syz_tun (unregistering): left allmulticast mode [ 1058.129818][T17332] lo speed is unknown, defaulting to 1000 [ 1058.641351][T16029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.652811][T16029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1058.674276][T17341] tipc: Started in network mode [ 1058.681078][T17341] tipc: Node identity d6e2f908b7f1, cluster identity 4711 [ 1058.691895][T17341] tipc: Enabled bearer , priority 0 [ 1059.027369][T17340] tipc: Disabling bearer [ 1059.212283][T17356] fuse: Unknown parameter 'user00000000000000000000' [ 1059.252812][T16029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.297939][T16029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1059.576182][T16029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.646374][T16029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1059.820757][T11349] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1059.844687][T16029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.855181][T16029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1060.011405][T15519] Bluetooth: hci1: command tx timeout [ 1060.351324][T11349] usb 3-1: Using ep0 maxpacket: 16 [ 1060.360806][T11349] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 1060.371727][T11349] usb 3-1: config 4 has no interface number 0 [ 1060.385736][T11349] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1060.402491][T11349] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1060.413157][T11349] usb 3-1: config 4 interface 9 has no altsetting 0 [ 1060.424542][T11349] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1060.439940][T11349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.457135][T11349] usb 3-1: Product: syz [ 1060.470490][T11349] usb 3-1: Manufacturer: syz [ 1060.480036][T11349] usb 3-1: SerialNumber: syz [ 1060.498872][T17372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1060.529490][T17372] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1060.625629][T11349] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1060.722360][T17392] fuse: Unknown parameter 'user00000000000000000000' [ 1060.813330][ T2859] usb 3-1: Failed to submit usb control message: -71 [ 1060.820991][T11349] usb 3-1: USB disconnect, device number 32 [ 1060.828489][ T2859] usb 3-1: unable to send the bmi data to the device: -71 [ 1061.022061][ T2859] usb 3-1: unable to get target info from device [ 1061.030329][ T2859] usb 3-1: could not get target info (-71) [ 1061.046068][ T2859] usb 3-1: could not probe fw (-71) [ 1061.210450][T17404] delete_channel: no stack [ 1062.020752][T16142] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1062.030366][T15519] Bluetooth: hci1: command tx timeout [ 1062.079951][T16029] bond0 (unregistering): Released all slaves [ 1062.220350][T16142] usb 2-1: Using ep0 maxpacket: 16 [ 1062.273375][T16142] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1062.299575][T16142] usb 2-1: config 0 has no interface number 0 [ 1062.314180][T16142] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1062.326164][T16142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.336920][T16142] usb 2-1: Product: syz [ 1062.344089][T16142] usb 2-1: Manufacturer: syz [ 1062.357043][T16142] usb 2-1: SerialNumber: syz [ 1062.377592][T16142] usb 2-1: config 0 descriptor?? [ 1062.394510][T16142] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1062.418276][T16029] bond1 (unregistering): Released all slaves [ 1062.634153][T16029] bond2 (unregistering): Released all slaves [ 1062.655496][T16029] bond3 (unregistering): Released all slaves [ 1062.671243][T16029] bond4 (unregistering): Released all slaves [ 1062.692582][T16029] bond5 (unregistering): Released all slaves [ 1062.710855][T16029] bond6 (unregistering): Released all slaves [ 1062.738028][T16029] bond7 (unregistering): Released all slaves [ 1062.755960][T16029] bond8 (unregistering): Released all slaves [ 1062.889893][T16029] bond9 (unregistering): Released all slaves [ 1063.264975][T16029] bond10 (unregistering): Released all slaves [ 1063.585073][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1063.585105][ T30] audit: type=1400 audit(1757554148.964:930): avc: denied { ioctl } for pid=17445 comm="syz.2.3116" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1063.828731][T16029] bond11 (unregistering): Released all slaves [ 1063.869334][T17332] chnl_net:caif_netlink_parms(): no params data found [ 1063.946137][T17454] netlink: 'syz.2.3119': attribute type 1 has an invalid length. [ 1064.076464][T16029] tipc: Left network mode [ 1064.112434][T15519] Bluetooth: hci1: command tx timeout [ 1064.113223][T16142] gspca_spca1528: reg_r err -71 [ 1064.147427][T16142] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1064.177035][T16142] usb 2-1: USB disconnect, device number 39 [ 1064.185296][T17454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1064.246860][T17456] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 1064.492079][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.504762][T17332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.514690][T17332] bridge_slave_0: entered allmulticast mode [ 1064.573526][T17332] bridge_slave_0: entered promiscuous mode [ 1064.590959][T11349] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1064.606140][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.618638][T17332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.629624][T17332] bridge_slave_1: entered allmulticast mode [ 1064.656129][T17332] bridge_slave_1: entered promiscuous mode [ 1064.750393][T11349] usb 3-1: Using ep0 maxpacket: 8 [ 1064.761726][T11349] usb 3-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 1064.794401][T11349] usb 3-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.807746][T17332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.000426][T17470] new mount options do not match the existing superblock, will be ignored [ 1065.022726][T17470] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1065.262254][ T30] audit: type=1326 audit(1757554150.294:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17465 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5538eba9 code=0x7ffc0000 [ 1065.286087][T11349] usb 3-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 1065.296228][T11349] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1065.305326][T11349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.316646][ T30] audit: type=1326 audit(1757554150.294:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17465 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5538eba9 code=0x7ffc0000 [ 1065.347989][T16029] hsr_slave_0: left promiscuous mode [ 1065.362567][T16029] hsr_slave_1: left promiscuous mode [ 1065.386832][ T30] audit: type=1326 audit(1757554150.294:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17465 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fae5538eba9 code=0x7ffc0000 [ 1065.395594][T16029] veth1_macvtap: left promiscuous mode [ 1065.424199][T16029] veth0_macvtap: left promiscuous mode [ 1065.429866][T16029] veth1_vlan: left promiscuous mode [ 1065.431239][ T30] audit: type=1326 audit(1757554150.574:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17465 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5538eba9 code=0x7ffc0000 [ 1065.436028][T16029] veth0_vlan: left promiscuous mode [ 1065.517644][T17470] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1065.528053][ T30] audit: type=1326 audit(1757554150.574:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17465 comm="syz.1.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5538eba9 code=0x7ffc0000 [ 1065.695141][T16029] pim6reg (unregistering): left allmulticast mode [ 1065.836110][T11349] usb 3-1: string descriptor 0 read error: -71 [ 1065.855474][T11349] uvcvideo 3-1:73.0: probe with driver uvcvideo failed with error -22 [ 1065.866772][T11349] usb 3-1: USB disconnect, device number 33 [ 1065.970759][T17483] overlayfs: failed to resolve './file1': -2 [ 1066.190353][T15519] Bluetooth: hci1: command tx timeout [ 1068.274688][T17332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.302217][T16142] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1068.334006][T17477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.341667][T17477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.406938][T17477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.418939][T17477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.470364][T16142] usb 1-1: Using ep0 maxpacket: 16 [ 1068.481462][T16142] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1068.492010][T16142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.502863][T16142] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1068.518505][T16142] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1068.527672][T16142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.536581][T16142] usb 1-1: Product: syz [ 1068.541549][T16142] usb 1-1: Manufacturer: syz [ 1068.546149][T16142] usb 1-1: SerialNumber: syz [ 1068.573813][ T8670] lo speed is unknown, defaulting to 1000 [ 1068.579737][ T8670] infiniband syz0: ib_query_port failed (-19) [ 1068.689350][T10016] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.710689][T10016] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.723028][T10016] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.763939][T17332] team0: Port device team_slave_0 added [ 1068.770055][T17507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3131'. [ 1068.788251][T17332] team0: Port device team_slave_1 added [ 1068.803872][T10016] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.963938][T17332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.984035][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.021666][T16142] usb 1-1: 0:2 : does not exist [ 1069.033796][T17332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.055581][T17332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.067278][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.101580][T17332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.126103][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1069.148859][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1069.166563][T17515] netlink: 'syz.1.3132': attribute type 19 has an invalid length. [ 1069.178072][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1069.204486][T17332] hsr_slave_0: entered promiscuous mode [ 1069.212343][T17332] hsr_slave_1: entered promiscuous mode [ 1069.223980][T17332] debugfs: 'hsr0' already exists in 'hsr' [ 1069.234530][T17332] Cannot create hsr debugfs directory [ 1069.445127][T16142] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1070.052526][T16142] usb 1-1: USB disconnect, device number 33 [ 1071.744068][T16029] bond0 (unregistering): Released all slaves [ 1072.165244][T16142] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1072.257177][T16029] bond1 (unregistering): Released all slaves [ 1072.331409][T16142] usb 1-1: device descriptor read/64, error -71 [ 1072.394531][T16029] bond2 (unregistering): Released all slaves [ 1072.557786][T16029] bond3 (unregistering): Released all slaves [ 1072.670552][T16142] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1072.851969][T16142] usb 1-1: device descriptor read/64, error -71 [ 1073.000448][T16029] bond4 (unregistering): Released all slaves [ 1073.010747][T16142] usb usb1-port1: attempt power cycle [ 1073.013783][T16029] bond5 (unregistering): Released all slaves [ 1073.060254][T16029] bond6 (unregistering): Released all slaves [ 1073.110794][T16029] bond7 (unregistering): Released all slaves [ 1073.124175][T16029] bond8 (unregistering): Released all slaves [ 1073.136543][T16029] bond9 (unregistering): Released all slaves [ 1073.148857][T16029] bond10 (unregistering): Released all slaves [ 1073.168587][T16029] bond11 (unregistering): Released all slaves [ 1073.348010][T16029] bond12 (unregistering): (slave wlan0): Releasing active interface [ 1073.356125][T16029] vlan2: entered promiscuous mode [ 1073.380994][T16142] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1073.409499][T16029] bond12 (unregistering): (slave vlan2): Releasing active interface [ 1073.419507][T16029] bond12 (unregistering): Released all slaves [ 1073.420615][T16142] usb 1-1: device descriptor read/8, error -71 [ 1073.520458][T16029] bond13 (unregistering): Released all slaves [ 1073.531867][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1073.713765][T16142] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1073.722275][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1073.752400][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1073.761581][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.772240][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.800820][T16142] usb 1-1: device descriptor read/8, error -71 [ 1073.807192][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.818052][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.826669][ T10] usb 4-1: Product: syz [ 1073.831106][ T10] usb 4-1: Manufacturer: syz [ 1073.842945][ T10] usb 4-1: SerialNumber: syz [ 1073.920711][T16142] usb usb1-port1: unable to enumerate USB device [ 1073.948882][T17540] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1073.973566][T17540] geneve2: left promiscuous mode [ 1073.983304][T17540] vlan2: left allmulticast mode [ 1073.988245][T17540] veth1: left allmulticast mode [ 1073.995406][T16029] tipc: Left network mode [ 1073.996598][T10307] syz1: Port: 1 Link DOWN [ 1074.042297][ T78] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.088134][ T78] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.097493][ T78] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.124205][ T78] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.251234][T16029] hsr_slave_0: left promiscuous mode [ 1074.257766][T16029] hsr_slave_1: left promiscuous mode [ 1074.271198][T16029] pim6reg (unregistering): left allmulticast mode [ 1074.291827][ T10] usb 4-1: 0:2 : does not exist [ 1074.293044][T10307] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1074.454845][T10307] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1074.464143][T10307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.472640][T10307] usb 2-1: Product: syz [ 1074.476809][T10307] usb 2-1: Manufacturer: syz [ 1074.482086][T10307] usb 2-1: SerialNumber: syz [ 1074.494274][T10307] usb 2-1: config 0 descriptor?? [ 1074.716684][T10307] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1074.737207][ T10] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1074.756629][ T10] usb 4-1: USB disconnect, device number 47 [ 1074.975434][T17585] siw: device registration error -23 [ 1076.416299][T10307] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1076.445000][T10307] usb 2-1: USB disconnect, device number 40 [ 1077.697413][ T30] audit: type=1400 audit(1757554163.064:936): avc: denied { append } for pid=17611 comm="syz.2.3161" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1077.728771][ T30] audit: type=1400 audit(1757554163.104:937): avc: denied { mounton } for pid=17601 comm="syz.0.3158" path="/proc/70/task" dev="proc" ino=52185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1077.818493][T17332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1077.830999][T17332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1077.847328][T17332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1077.858748][T17332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1078.157476][T17332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.194209][T17332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.235972][ T6195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.243062][ T6195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.351884][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.358968][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.352918][T17632] binder: 17631:17632 ioctl 4018620d 2000000002c0 returned -22 [ 1079.393928][T17632] binder: 17631:17632 ioctl c0306201 2000000003c0 returned -14 [ 1079.431254][T17632] binder: 17631:17632 ioctl c0306201 2000000001c0 returned -14 [ 1079.454573][T17332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.471374][T17632] binder: 17631:17632 ioctl c0306201 200000000240 returned -14 [ 1079.491690][T17632] binder: 17631:17632 ioctl c0306201 200000000300 returned -14 [ 1079.508802][ T30] audit: type=1326 audit(1757554164.884:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17631 comm="syz.2.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c218eba9 code=0x7fc00000 [ 1079.660275][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1079.816618][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1079.869202][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1079.931180][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.962187][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1080.016432][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1080.424045][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.454274][ T10] usb 2-1: config 0 descriptor?? [ 1080.534131][T17332] veth0_vlan: entered promiscuous mode [ 1080.556080][T17332] veth1_vlan: entered promiscuous mode [ 1080.694297][T17656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.701648][T17656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.885806][T17656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.917860][T17656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.171892][T17681] tmpfs: Bad value for 'mpol' [ 1081.181738][T17656] vlan2: left allmulticast mode [ 1081.186616][T17656] veth1: left allmulticast mode [ 1081.226460][T10016] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.252527][T10016] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.272288][T10016] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.299968][T10016] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.328179][T17332] veth0_macvtap: entered promiscuous mode [ 1081.339976][T17332] veth1_macvtap: entered promiscuous mode [ 1081.358977][T17332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.374185][T17332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.390621][T10016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.409330][T10016] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.426721][T10016] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.497177][T10016] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.597076][T10016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.608719][T10016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.620232][T17677] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1081.647687][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.662164][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.781589][T17677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.791923][T17677] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1081.822257][T17677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.846052][T17677] usb 3-1: config 0 descriptor?? [ 1081.858308][T17677] pwc: Askey VC010 type 2 USB webcam detected. [ 1082.260042][T17677] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1082.267264][T17677] pwc: recv_control_msg error -32 req 02 val 2700 [ 1082.276373][T17677] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1082.307466][T17677] pwc: recv_control_msg error -32 req 04 val 1000 [ 1082.334770][T17677] pwc: recv_control_msg error -32 req 04 val 1300 [ 1082.361980][T17660] usb 2-1: USB disconnect, device number 41 [ 1082.374890][T17677] pwc: recv_control_msg error -32 req 04 val 1400 [ 1082.385494][T17677] pwc: recv_control_msg error -32 req 02 val 2000 [ 1082.412347][T17677] pwc: recv_control_msg error -32 req 02 val 2100 [ 1082.420020][T17677] pwc: recv_control_msg error -32 req 04 val 1500 [ 1082.427038][T17677] pwc: recv_control_msg error -32 req 02 val 2500 [ 1082.635197][T17677] pwc: recv_control_msg error -71 req 02 val 2600 [ 1082.641950][T17677] pwc: recv_control_msg error -71 req 02 val 2900 [ 1082.648850][T17677] pwc: recv_control_msg error -71 req 02 val 2800 [ 1082.757208][T17677] pwc: recv_control_msg error -71 req 04 val 1100 [ 1082.808493][T17677] pwc: recv_control_msg error -71 req 04 val 1200 [ 1082.859594][T17708] delete_channel: no stack [ 1082.864388][T17669] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1082.873256][T17677] pwc: Registered as video103. [ 1082.892803][T17677] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 1082.946662][T17677] usb 3-1: USB disconnect, device number 34 [ 1083.300232][T17669] usb 4-1: Using ep0 maxpacket: 8 [ 1083.318357][T17669] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1083.326895][T17669] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1083.335197][T17669] usb 4-1: can't read configurations, error -71 [ 1083.427711][ T5846] syz_tun (unregistering): left allmulticast mode [ 1083.479446][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.490369][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.500034][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.514731][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.526099][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.830318][T17664] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1083.913794][T17710] chnl_net:caif_netlink_parms(): no params data found [ 1083.980382][T17664] usb 3-1: device descriptor read/64, error -71 [ 1084.020355][T17677] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1084.206373][T17677] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1084.215592][T17677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.223773][T17677] usb 1-1: Product: syz [ 1084.227943][T17677] usb 1-1: Manufacturer: syz [ 1084.233142][T17664] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1084.242702][T17677] usb 1-1: SerialNumber: syz [ 1084.252803][T17677] usb 1-1: config 0 descriptor?? [ 1084.370394][T17664] usb 3-1: device descriptor read/64, error -71 [ 1084.376782][T17660] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1084.468277][T17677] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1084.490608][T17664] usb usb3-port1: attempt power cycle [ 1084.542886][T17660] usb 5-1: Using ep0 maxpacket: 8 [ 1084.550535][T17660] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 1084.558656][T17660] usb 5-1: config 0 has no interface number 0 [ 1084.565110][T17660] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 1084.575463][T17660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.591757][T17660] usb 5-1: config 0 descriptor?? [ 1084.605137][T17660] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 1084.807168][T17660] usb 5-1: USB disconnect, device number 39 [ 1084.841457][T17664] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1084.873345][T17664] usb 3-1: device descriptor read/8, error -71 [ 1085.123195][T17664] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1085.160908][T17664] usb 3-1: device descriptor read/8, error -71 [ 1085.274691][T17664] usb usb3-port1: unable to enumerate USB device [ 1085.459335][T16029] dvmrp1 (unregistering): left allmulticast mode [ 1085.552382][T15519] Bluetooth: hci0: command tx timeout [ 1085.650256][T17669] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1085.659888][T16029] bond0 (unregistering): Released all slaves [ 1085.714987][T17677] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1085.734742][T17677] usb 1-1: USB disconnect, device number 38 [ 1085.796642][T16029] bond1 (unregistering): Released all slaves [ 1085.800400][T17669] usb 5-1: Using ep0 maxpacket: 16 [ 1085.809800][T17669] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1085.833096][T17669] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1085.845874][T17669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.856237][T17669] usb 5-1: config 0 descriptor?? [ 1085.923260][T16029] bond2 (unregistering): Released all slaves [ 1086.046848][T16029] bond3 (unregistering): Released all slaves [ 1086.141532][T16029] bond4 (unregistering): Released all slaves [ 1086.221948][T16029] bond5 (unregistering): Released all slaves [ 1086.334109][T16029] bond6 (unregistering): Released all slaves [ 1086.381088][T17710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.388641][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.407421][T17710] bridge_slave_0: entered allmulticast mode [ 1086.430254][T17710] bridge_slave_0: entered promiscuous mode [ 1086.438620][T17710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.459112][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.469451][T17710] bridge_slave_1: entered allmulticast mode [ 1086.477016][T17710] bridge_slave_1: entered promiscuous mode [ 1086.586586][T17753] 9pnet_fd: Insufficient options for proto=fd [ 1086.626553][T16029] tipc: Left network mode [ 1086.633954][T17710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1086.672728][T17710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.673331][T17755] delete_channel: no stack [ 1086.832011][T17710] team0: Port device team_slave_0 added [ 1086.858608][ T30] audit: type=1400 audit(1757554172.234:939): avc: denied { create } for pid=17761 comm="syz.3.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1086.891458][T17710] team0: Port device team_slave_1 added [ 1086.940720][ T30] audit: type=1400 audit(1757554172.284:940): avc: denied { read } for pid=17761 comm="syz.3.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1087.022761][T17710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.031007][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.062450][T17710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.149792][T17710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.157923][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.187215][T17710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.220215][T17669] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1087.267181][T16029] hsr_slave_0: left promiscuous mode [ 1087.281399][T16029] hsr_slave_1: left promiscuous mode [ 1087.318345][T16029] pim6reg (unregistering): left allmulticast mode [ 1087.390340][T17669] usb 3-1: Using ep0 maxpacket: 8 [ 1087.417720][T17669] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 1087.436866][T17669] usb 3-1: config 0 has no interface number 0 [ 1087.459651][T17669] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 1087.483729][T17669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.496165][T17669] usb 3-1: config 0 descriptor?? [ 1087.506327][T17669] bfusb 3-1:0.94: probe with driver bfusb failed with error -5 [ 1087.633836][T15519] Bluetooth: hci0: command tx timeout [ 1087.737503][T17669] usb 3-1: USB disconnect, device number 39 [ 1088.411084][ T30] audit: type=1400 audit(1757554173.784:941): avc: denied { write } for pid=17788 comm="syz.2.3203" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1088.435327][ T30] audit: type=1400 audit(1757554173.794:942): avc: denied { open } for pid=17788 comm="syz.2.3203" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1088.480297][ T30] audit: type=1400 audit(1757554173.794:943): avc: denied { read } for pid=17788 comm="syz.2.3203" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1088.500489][T17677] usb 5-1: USB disconnect, device number 40 [ 1088.604745][T17710] hsr_slave_0: entered promiscuous mode [ 1088.613708][T17710] hsr_slave_1: entered promiscuous mode [ 1088.750222][T17669] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1089.124890][T17669] usb 1-1: device descriptor read/64, error -71 [ 1089.233762][T17814] netlink: 'syz.2.3211': attribute type 1 has an invalid length. [ 1089.282426][ T30] audit: type=1400 audit(1757554174.664:944): avc: denied { create } for pid=17815 comm="syz.3.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1089.357323][T17814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1089.372226][ T30] audit: type=1400 audit(1757554174.704:945): avc: denied { bind } for pid=17815 comm="syz.3.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1089.392064][T17669] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1089.414092][T17817] bond1: (slave wlan0): Releasing active interface [ 1089.418431][ T30] audit: type=1400 audit(1757554174.714:946): avc: denied { ioctl } for pid=17815 comm="syz.3.3212" path="socket:[53791]" dev="sockfs" ino=53791 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1089.453212][T17817] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 1089.471630][ T30] audit: type=1400 audit(1757554174.844:947): avc: denied { create } for pid=17808 comm="syz.4.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1089.554281][T17669] usb 1-1: device descriptor read/64, error -71 [ 1089.690014][T17669] usb usb1-port1: attempt power cycle [ 1089.710224][T15519] Bluetooth: hci0: command tx timeout [ 1089.813077][T17710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1089.829880][T17710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1089.838874][T17710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1089.849710][T17837] syzkaller0: entered promiscuous mode [ 1089.856164][T17837] syzkaller0: entered allmulticast mode [ 1089.865934][T17710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1089.877956][T17837] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1089.977449][T17710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.000381][T17710] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.022925][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.030037][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.039067][T17853] batadv_slave_1: entered allmulticast mode [ 1090.050747][T17669] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1090.068389][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.075533][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.083744][T17669] usb 1-1: device descriptor read/8, error -71 [ 1090.320354][T17669] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1090.340834][T17669] usb 1-1: device descriptor read/8, error -71 [ 1090.418632][T17710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.453590][T17669] usb usb1-port1: unable to enumerate USB device [ 1090.505653][T17710] veth0_vlan: entered promiscuous mode [ 1090.531059][T17710] veth1_vlan: entered promiscuous mode [ 1090.598237][T17710] veth0_macvtap: entered promiscuous mode [ 1090.615997][T17710] veth1_macvtap: entered promiscuous mode [ 1090.663424][T17710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.678799][T17710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.711206][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.724082][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.737654][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.749564][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.847602][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3224'. [ 1090.928981][T16029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.964706][T16029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.051852][T16029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.061410][T16029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.186254][ T30] audit: type=1400 audit(1757554176.564:948): avc: denied { mounton } for pid=17710 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1091.247680][T17882] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3229'. [ 1091.790711][T15519] Bluetooth: hci0: command tx timeout [ 1091.877956][T17893] 9pnet_fd: Insufficient options for proto=fd [ 1091.897276][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1091.897294][ T30] audit: type=1400 audit(1757554177.264:953): avc: denied { create } for pid=17894 comm="syz.0.3233" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1092.032560][ T30] audit: type=1400 audit(1757554177.414:954): avc: denied { unlink } for pid=16937 comm="syz-executor" name="file2" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1093.150752][T17908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.158364][T17908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.519582][T17908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.553467][T17908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.675200][T17930] kernel read not supported for file /bus (pid: 17930 comm: syz.1.3248) [ 1093.689814][ T30] audit: type=1800 audit(1757554179.064:955): pid=17930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3248" name="bus" dev="mqueue" ino=54227 res=0 errno=0 [ 1093.918778][ T1320] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.938329][ T1320] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.962085][ T1320] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.974600][ T1320] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.645757][ T30] audit: type=1400 audit(1757554180.024:956): avc: denied { mount } for pid=17953 comm="syz.2.3256" name="/" dev="configfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1094.703858][ T30] audit: type=1400 audit(1757554180.054:957): avc: denied { search } for pid=17953 comm="syz.2.3256" name="/" dev="configfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1094.798175][ T30] audit: type=1400 audit(1757554180.054:958): avc: denied { search } for pid=17953 comm="syz.2.3256" name="/" dev="configfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1094.833459][ T30] audit: type=1400 audit(1757554180.054:959): avc: denied { read open } for pid=17953 comm="syz.2.3256" path="/" dev="configfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1095.498783][T17980] syzkaller0: entered promiscuous mode [ 1095.513097][T17980] syzkaller0: entered allmulticast mode [ 1095.533071][T17980] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1095.985274][T17993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.231056][T17988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.273992][T17993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.335920][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3272'. [ 1096.940460][T18020] fuse: Unknown parameter 'fd0x0000000000000004' [ 1097.053975][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1097.230313][T18031] nbd4: detected capacity change from 0 to 67108884 [ 1097.905144][T18027] block nbd4: shutting down sockets [ 1098.048455][T18052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.123027][T18052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.171315][T18052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.861936][ T30] audit: type=1400 audit(1757554184.244:960): avc: denied { read } for pid=18067 comm="syz.3.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1098.880059][T18071] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.900202][T18071] binder: 18070:18071 ioctl 4018620d 200000000040 returned -16 [ 1099.767548][T18101] netlink: 'syz.1.3313': attribute type 1 has an invalid length. [ 1099.930335][T11349] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1100.090165][T11349] usb 5-1: Using ep0 maxpacket: 16 [ 1100.110595][T11349] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1100.119714][T11349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.132735][T11349] usb 5-1: config 0 descriptor?? [ 1100.147552][T11349] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1100.689094][T11349] gspca_sonixj: reg_r err -32 [ 1100.721233][T11349] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 1101.219009][ T30] audit: type=1400 audit(1757554186.594:961): avc: denied { watch watch_reads } for pid=18124 comm="syz.2.3321" path="/277" dev="tmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1101.489386][T18104] vlan2: entered allmulticast mode [ 1101.495615][T18104] veth1: entered allmulticast mode [ 1101.579573][T18132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3324'. [ 1101.768114][T11349] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1101.899902][T17677] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1102.067883][ T30] audit: type=1400 audit(1757554187.444:962): avc: denied { watch_sb } for pid=18148 comm="syz.1.3332" path="/18" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1102.113693][T11349] usb 3-1: Using ep0 maxpacket: 8 [ 1102.120095][T11349] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 1102.132859][T11349] usb 3-1: config 0 has no interface number 0 [ 1102.149251][T11349] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 1102.163909][T11349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.167809][T18155] netlink: 'syz.3.3335': attribute type 1 has an invalid length. [ 1102.176602][T11349] usb 3-1: config 0 descriptor?? [ 1102.193467][T11349] bfusb 3-1:0.94: probe with driver bfusb failed with error -5 [ 1102.197818][T18155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1102.201256][T17677] usb 1-1: Using ep0 maxpacket: 8 [ 1102.217403][T18155] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 1102.232666][T17677] usb 1-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 1102.235909][T18155] vlan2: entered allmulticast mode [ 1102.241778][T17677] usb 1-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.248731][T18155] veth1: entered allmulticast mode [ 1102.259310][T17677] usb 1-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 1102.263169][T18155] bond1: (slave vlan2): Opening slave failed [ 1102.279705][T17677] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1102.289611][T17677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.399205][T11349] usb 3-1: USB disconnect, device number 40 [ 1102.512039][T17677] usb 1-1: string descriptor 0 read error: -71 [ 1102.529026][T17677] uvcvideo 1-1:73.0: probe with driver uvcvideo failed with error -22 [ 1102.530807][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1102.539860][T17677] usb 1-1: USB disconnect, device number 43 [ 1102.715461][T17658] usb 5-1: USB disconnect, device number 41 [ 1104.846075][T18197] delete_channel: no stack [ 1104.941319][ T30] audit: type=1326 audit(1757554190.294:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1104.990468][ T30] audit: type=1326 audit(1757554190.294:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1105.035559][ T30] audit: type=1400 audit(1757554190.334:965): avc: denied { connect } for pid=18204 comm="syz.4.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1105.068112][ T30] audit: type=1326 audit(1757554190.394:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1105.228676][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1105.711104][T18203] pim6reg: entered allmulticast mode [ 1105.723931][ T30] audit: type=1326 audit(1757554191.094:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1105.782842][ T30] audit: type=1326 audit(1757554191.104:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18199 comm="syz.0.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1106.160253][T17677] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1106.610192][T17677] usb 4-1: Using ep0 maxpacket: 16 [ 1106.616552][T17677] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1106.625963][T17677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.636734][T17677] usb 4-1: config 0 descriptor?? [ 1106.643534][T17677] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1106.804154][T18233] fuse: Bad value for 'rootmode' [ 1106.818014][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 1106.947398][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1107.048695][T17677] gspca_sonixj: reg_r err -32 [ 1107.053766][T17677] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 1108.520645][T17664] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1108.662191][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1108.790182][T17664] usb 2-1: Using ep0 maxpacket: 8 [ 1108.797165][T17664] usb 2-1: config 0 has an invalid interface number: 94 but max is 0 [ 1108.805894][T17664] usb 2-1: config 0 has no interface number 0 [ 1108.812449][T17664] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 1108.889045][T17658] usb 4-1: USB disconnect, device number 50 [ 1108.904608][T17664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.917543][T17664] usb 2-1: config 0 descriptor?? [ 1108.926269][T17664] bfusb 2-1:0.94: probe with driver bfusb failed with error -5 [ 1109.027044][ T30] audit: type=1326 audit(1757554194.404:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.0.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1109.060593][ T30] audit: type=1326 audit(1757554194.404:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.0.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1109.088094][ T30] audit: type=1326 audit(1757554194.404:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.0.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1109.115041][ T30] audit: type=1326 audit(1757554194.404:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18276 comm="syz.0.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1109.237874][T17658] usb 2-1: USB disconnect, device number 42 [ 1109.830395][T18286] binder: 18285:18286 ioctl 4018620d 0 returned -22 [ 1109.887050][T18288] netlink: 'syz.3.3375': attribute type 1 has an invalid length. [ 1109.923860][T18288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.946312][T18288] bond1: (slave wlan0): Releasing active interface [ 1109.959166][T18288] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 1109.978872][T18288] vlan2: entered allmulticast mode [ 1109.984610][T18288] bond2: (slave vlan2): Opening slave failed [ 1111.555779][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 1112.411990][T18331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.689561][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1114.689577][ T30] audit: type=1326 audit(1757554200.064:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1114.734988][T18364] pim6reg: entered allmulticast mode [ 1114.830245][ T30] audit: type=1326 audit(1757554200.064:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1114.865555][ T30] audit: type=1326 audit(1757554200.064:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1114.891404][ T30] audit: type=1326 audit(1757554200.064:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1114.945967][T18370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.953699][ T30] audit: type=1326 audit(1757554200.064:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1115.009333][ T30] audit: type=1326 audit(1757554200.064:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1115.059779][ T30] audit: type=1326 audit(1757554200.064:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1115.106380][ T30] audit: type=1326 audit(1757554200.064:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1115.135320][ T30] audit: type=1326 audit(1757554200.064:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1115.214003][ T30] audit: type=1326 audit(1757554200.104:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.1.3397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5bb8eba9 code=0x7ffc0000 [ 1115.395722][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.520208][T17677] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1115.530345][T17668] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1115.680203][T17668] usb 4-1: Using ep0 maxpacket: 8 [ 1115.687252][T17668] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1115.687841][T17677] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1115.704884][T17677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.719709][T17668] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.748510][T17668] usb 4-1: config 0 has no interface number 0 [ 1115.754973][T17677] usb 5-1: Product: syz [ 1115.759776][T17677] usb 5-1: Manufacturer: syz [ 1115.764511][T17677] usb 5-1: SerialNumber: syz [ 1115.779048][T17668] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1115.793597][T17677] usb 5-1: config 0 descriptor?? [ 1115.819380][T17668] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1115.862726][T17668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.873401][T17668] usb 4-1: config 0 descriptor?? [ 1115.891971][T17668] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1116.011360][T17677] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1116.086721][T17668] usb 4-1: USB disconnect, device number 51 [ 1116.642457][T17668] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1116.870346][T17668] usb 1-1: Using ep0 maxpacket: 16 [ 1116.883805][T17668] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1116.901932][T17668] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.916654][T17668] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.928466][T17668] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1116.940957][T17668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.949167][T17668] usb 1-1: Product: syz [ 1116.955275][T17668] usb 1-1: Manufacturer: syz [ 1116.960093][T17668] usb 1-1: SerialNumber: syz [ 1117.383119][T17668] usb 1-1: 0:2 : does not exist [ 1117.474104][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1117.481434][T17677] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1117.495074][T17677] usb 5-1: USB disconnect, device number 42 [ 1117.705827][T18414] 9pnet_fd: Insufficient options for proto=fd [ 1117.788915][T18417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3419'. [ 1118.176171][T17668] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1118.605118][T17668] usb 1-1: USB disconnect, device number 44 [ 1120.925263][T18454] 9pnet_fd: Insufficient options for proto=fd [ 1121.400241][T17677] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1121.560549][T17677] usb 4-1: Using ep0 maxpacket: 16 [ 1121.572381][T17677] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1121.583257][T17677] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.595300][T17677] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.610005][T17677] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.623592][T17677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.632055][T17677] usb 4-1: Product: syz [ 1121.636445][T17677] usb 4-1: Manufacturer: syz [ 1121.641612][T17677] usb 4-1: SerialNumber: syz [ 1121.854133][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1122.062710][T17677] usb 4-1: 0:2 : does not exist [ 1122.699493][T17677] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1123.785292][T17677] usb 4-1: USB disconnect, device number 52 [ 1123.954568][T18518] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3454'. [ 1123.964570][T18518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3454'. [ 1124.406458][T18526] tipc: Enabling of bearer rejected, failed to enable media [ 1124.416733][T18526] syzkaller0: entered promiscuous mode [ 1124.422855][T18526] syzkaller0: entered allmulticast mode [ 1124.431865][T18526] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1124.640383][T17669] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1124.721988][T17658] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1124.810331][T17669] usb 2-1: Using ep0 maxpacket: 8 [ 1124.853979][T17669] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1124.921134][T17669] usb 2-1: config 0 has no interface number 0 [ 1124.927521][T17669] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1124.938801][T17658] usb 4-1: Using ep0 maxpacket: 16 [ 1124.944612][T17669] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1124.964390][T17658] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.994623][T17669] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1125.031902][T17658] usb 4-1: config 0 has no interfaces? [ 1125.078370][T17658] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1125.092463][T17669] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1125.111716][T17658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.120049][T17658] usb 4-1: Product: syz [ 1125.130251][T17669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.148463][T17658] usb 4-1: Manufacturer: syz [ 1125.158971][T17669] usb 2-1: config 0 descriptor?? [ 1125.164125][T17658] usb 4-1: SerialNumber: syz [ 1125.171424][T17658] usb 4-1: config 0 descriptor?? [ 1125.177862][T17669] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1125.385853][T17664] usb 2-1: USB disconnect, device number 43 [ 1125.422760][T17677] usb 4-1: USB disconnect, device number 53 [ 1125.848900][T17669] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1126.000179][T17669] usb 1-1: Using ep0 maxpacket: 16 [ 1126.007376][T17669] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1126.016281][T17669] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.026699][T17669] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1126.038035][T17669] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1126.047325][T17669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.055891][T17669] usb 1-1: Product: syz [ 1126.060231][T17669] usb 1-1: Manufacturer: syz [ 1126.064873][T17669] usb 1-1: SerialNumber: syz [ 1126.296633][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3474'. [ 1126.394672][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1126.465438][T18577] fuse: Unknown parameter '0x0000000000000003' [ 1126.490389][T17669] usb 1-1: 0:2 : does not exist [ 1126.942266][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.052976][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.114398][T18594] fuse: Bad value for 'fd' [ 1127.190910][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.310442][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.417209][T17669] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1127.430299][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.528354][T17669] usb 1-1: USB disconnect, device number 45 [ 1127.540229][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.782867][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1127.934219][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1128.093519][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1128.196308][T18614] delete_channel: no stack [ 1128.611629][T18624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1128.880554][T17664] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1129.124945][T17664] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.137340][T17664] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1129.148564][T17664] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1129.161801][T17664] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1129.171110][T17664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.204970][T17664] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1129.241675][T17664] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1129.382234][T17668] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1129.675419][T17664] usb 1-1: USB disconnect, device number 46 [ 1129.892786][T17668] usb 5-1: Using ep0 maxpacket: 8 [ 1129.911446][T17668] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1129.928270][T17668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.946735][T17668] usb 5-1: Product: syz [ 1129.955628][T17668] usb 5-1: Manufacturer: syz [ 1129.960329][T17668] usb 5-1: SerialNumber: syz [ 1129.973538][T17668] usb 5-1: config 0 descriptor?? [ 1130.181869][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1130.200751][T17668] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1131.212409][T17668] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1131.422200][ T49] net_ratelimit: 9 callbacks suppressed [ 1131.422215][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1131.541877][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1131.660904][ T6906] bond2: (slave wlan0): failed to get link speed/duplex [ 1131.779689][T18712] fuse: Invalid rootmode [ 1131.784193][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1131.899626][T18716] syzkaller0: entered promiscuous mode [ 1131.906692][T18716] syzkaller0: entered allmulticast mode [ 1131.926850][T18716] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1131.950881][T18719] 9pnet_fd: Insufficient options for proto=fd [ 1131.972193][T17668] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1132.000230][ T6906] bond2: (slave wlan0): failed to get link speed/duplex [ 1132.111449][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1132.130906][T17668] usb 1-1: Using ep0 maxpacket: 8 [ 1132.230218][ T6906] bond2: (slave wlan0): failed to get link speed/duplex [ 1132.253470][T17668] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1132.261964][T17668] usb 1-1: config 0 has no interface number 0 [ 1132.271671][T17668] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1132.285767][T17668] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1132.298512][T17668] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1132.309924][T17668] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1132.319474][T17664] usb 5-1: USB disconnect, device number 43 [ 1132.382987][T18735] overlayfs: missing 'lowerdir' [ 1132.754063][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1132.780287][T17668] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1132.793776][T17668] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1132.802970][T17668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.820586][T17668] usb 1-1: config 0 descriptor?? [ 1132.837477][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 1132.849270][T17668] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1132.870677][ T6906] bond2: (slave wlan0): failed to get link speed/duplex [ 1133.048391][T17668] usb 1-1: USB disconnect, device number 47 [ 1133.061322][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1133.070729][T17668] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1134.843104][T18783] overlayfs: missing 'lowerdir' [ 1135.894058][T17664] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1136.064272][T17664] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1136.076460][T17664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.096623][T17664] usb 5-1: Product: syz [ 1136.110304][T17664] usb 5-1: Manufacturer: syz [ 1136.114929][T17664] usb 5-1: SerialNumber: syz [ 1136.153442][T17664] usb 5-1: config 0 descriptor?? [ 1136.200513][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1136.200528][ T30] audit: type=1400 audit(1757554221.574:1015): avc: denied { name_bind } for pid=18804 comm="syz.0.3559" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1136.202626][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3558'. [ 1136.366337][T17664] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1136.524115][ T6195] net_ratelimit: 13 callbacks suppressed [ 1136.524134][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1136.525752][ T30] audit: type=1400 audit(1757554221.904:1016): avc: denied { setopt } for pid=18819 comm="syz.3.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1137.100147][ T30] audit: type=1400 audit(1757554222.444:1017): avc: denied { append } for pid=18816 comm="syz.1.3564" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1137.189435][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1137.651656][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1137.780252][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1137.930306][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1138.047673][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'. [ 1138.050695][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1138.142848][ T30] audit: type=1400 audit(1757554223.524:1018): avc: denied { unmount } for pid=18846 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1138.194267][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1138.271661][T17664] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1138.285054][T17664] usb 5-1: USB disconnect, device number 44 [ 1138.310191][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1138.430647][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1138.540209][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1140.469419][ T30] audit: type=1400 audit(1757554225.844:1019): avc: denied { bind } for pid=18886 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1140.538152][ T30] audit: type=1400 audit(1757554225.884:1020): avc: denied { listen } for pid=18886 comm="syz.0.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1140.606838][ T30] audit: type=1400 audit(1757554225.984:1021): avc: denied { getopt } for pid=18898 comm="syz.1.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1140.970401][ T30] audit: type=1400 audit(1757554226.334:1022): avc: denied { nlmsg_read } for pid=18896 comm="syz.4.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1141.323974][ T30] audit: type=1400 audit(1757554226.704:1023): avc: denied { getopt } for pid=18917 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1141.514807][T18928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3598'. [ 1141.622341][ T78] net_ratelimit: 24 callbacks suppressed [ 1141.622359][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1141.732787][T18925] kvm: pic: non byte write [ 1141.898425][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1142.106104][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1142.761397][T18940] capability: warning: `syz.4.3602' uses deprecated v2 capabilities in a way that may be insecure [ 1143.451445][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1143.576497][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1143.613720][ T30] audit: type=1400 audit(1757554228.994:1024): avc: denied { mounton } for pid=18952 comm="syz.0.3606" path="/proc/302/net/dev_snmp6" dev="proc" ino=4026534277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 1143.691922][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1143.740154][ T30] audit: type=1400 audit(1757554229.014:1025): avc: denied { unmount } for pid=18952 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1143.830850][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1143.905487][ T30] audit: type=1400 audit(1757554229.284:1026): avc: denied { execmem } for pid=18961 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1144.008435][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1144.312324][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1144.468778][ T1320] bond2: (slave wlan0): failed to get link speed/duplex [ 1145.016223][T18988] kvm: kvm [18986]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe609 [ 1145.030223][T17669] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1145.195637][T17669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.228812][T17669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.286957][T17669] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1145.444669][T17669] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1145.629656][T17669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.865189][T17669] usb 1-1: config 0 descriptor?? [ 1146.004231][T19013] 9pnet_fd: Insufficient options for proto=fd [ 1146.290350][T17664] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1146.306005][T17669] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1146.462618][T17664] usb 5-1: device descriptor read/64, error -71 [ 1146.511855][T17669] usb 1-1: USB disconnect, device number 48 [ 1146.698518][T16029] net_ratelimit: 16 callbacks suppressed [ 1146.698540][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1146.929424][ T1320] bond2: (slave wlan0): failed to get link speed/duplex [ 1146.940609][ T30] audit: type=1400 audit(1757554232.294:1027): avc: denied { mount } for pid=19033 comm="syz.2.3635" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1146.963680][T17664] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1147.080480][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1147.190749][T17664] usb 5-1: device descriptor read/64, error -71 [ 1147.208674][ T30] audit: type=1400 audit(1757554232.584:1028): avc: denied { create } for pid=19042 comm="syz.0.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1147.210947][T19044] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3637'. [ 1147.248616][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1147.278885][ T30] audit: type=1400 audit(1757554232.584:1029): avc: denied { write } for pid=19042 comm="syz.0.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1147.318023][T17664] usb usb5-port1: attempt power cycle [ 1147.323651][ T30] audit: type=1400 audit(1757554232.584:1030): avc: denied { nlmsg_write } for pid=19042 comm="syz.0.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1147.387213][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1147.578414][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1147.692342][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1147.731536][T17664] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1147.870035][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1147.901028][T17664] usb 5-1: device descriptor read/8, error -71 [ 1147.945227][ T30] audit: type=1400 audit(1757554233.324:1031): avc: denied { getopt } for pid=19066 comm="syz.0.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1148.000205][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1148.120243][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1148.150241][T17664] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1148.170603][T17664] usb 5-1: device descriptor read/8, error -71 [ 1148.198767][ T30] audit: type=1326 audit(1757554233.574:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19072 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1148.227225][ T30] audit: type=1326 audit(1757554233.574:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19072 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1148.276282][ T30] audit: type=1326 audit(1757554233.574:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19072 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1148.312366][T17664] usb usb5-port1: unable to enumerate USB device [ 1148.825177][ T30] audit: type=1326 audit(1757554233.574:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19072 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1148.867133][ T30] audit: type=1326 audit(1757554233.574:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19072 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9c4f18eba9 code=0x7ffc0000 [ 1149.466968][T19103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.797393][T19103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.780911][T19125] pim6reg: entered allmulticast mode [ 1150.890539][T17677] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1151.020459][T17677] usb 2-1: device descriptor read/64, error -71 [ 1151.286317][T17677] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1151.487141][T19151] fuse: Bad value for 'user_id' [ 1151.494249][T19151] fuse: Bad value for 'user_id' [ 1151.512235][T17677] usb 2-1: device descriptor read/64, error -71 [ 1151.701340][ T78] net_ratelimit: 20 callbacks suppressed [ 1151.701380][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1151.806888][T17677] usb usb2-port1: attempt power cycle [ 1151.990882][T10016] bond2: (slave wlan0): failed to get link speed/duplex [ 1152.110455][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1152.514036][T17677] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1152.550816][T17677] usb 2-1: device descriptor read/8, error -71 [ 1152.604080][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1152.760664][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1152.819234][T15519] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1152.860213][T17677] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1152.870398][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1152.900769][T17677] usb 2-1: device descriptor read/8, error -71 [ 1153.000739][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1153.032111][T17677] usb usb2-port1: unable to enumerate USB device [ 1153.151977][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1153.320363][T15519] Bluetooth: hci4: command 0x0406 tx timeout [ 1153.906569][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1154.031518][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1154.142895][T19188] block nbd1: shutting down sockets [ 1154.249486][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1154.249504][ T30] audit: type=1400 audit(1757554239.614:1077): avc: denied { relabelfrom } for pid=19199 comm="syz.1.3690" name="" dev="pipefs" ino=59832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1154.288858][T17668] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1154.440185][T17668] usb 1-1: Using ep0 maxpacket: 8 [ 1154.455355][T17668] usb 1-1: config 0 has no interfaces? [ 1154.461643][T17668] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1154.489092][T17668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.588867][T17668] usb 1-1: config 0 descriptor?? [ 1154.836003][T17668] usb 1-1: USB disconnect, device number 49 [ 1155.165345][T19221] overlayfs: failed to clone upperpath [ 1156.757866][ T30] audit: type=1400 audit(1757554242.144:1078): avc: denied { map } for pid=19240 comm="syz.1.3704" path="socket:[60774]" dev="sockfs" ino=60774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1157.161482][T17669] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1157.320274][T17669] usb 1-1: Using ep0 maxpacket: 8 [ 1157.327174][T17669] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1157.335388][T17669] usb 1-1: config 0 has no interface number 0 [ 1157.341721][T17669] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1157.352593][T17669] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1157.364232][T17669] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1157.375365][T17669] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1157.388391][T17669] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1157.398715][T17669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.409667][T17669] usb 1-1: config 0 descriptor?? [ 1157.419934][T17669] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1157.560682][ T1320] bond2: (slave wlan0): failed to get link speed/duplex [ 1157.682799][ T1320] bond2: (slave wlan0): failed to get link speed/duplex [ 1157.713396][T17677] usb 1-1: USB disconnect, device number 50 [ 1157.768123][T17677] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1157.956485][ T30] audit: type=1400 audit(1757554243.324:1079): avc: denied { write } for pid=19264 comm="syz.2.3714" path="socket:[59910]" dev="sockfs" ino=59910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1158.062917][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1158.280524][T10016] bond2: (slave wlan0): failed to get link speed/duplex [ 1158.337964][ T30] audit: type=1400 audit(1757554243.334:1080): avc: denied { accept } for pid=19264 comm="syz.2.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1158.540838][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1158.897757][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.950617][ T1320] bond2: (slave wlan0): failed to get link speed/duplex [ 1159.017052][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.041479][T17677] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1159.049164][T17664] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1159.080515][T15880] bond2: (slave wlan0): failed to get link speed/duplex [ 1159.282928][T19308] syz.2.3730 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1159.380456][T17677] usb 1-1: Using ep0 maxpacket: 16 [ 1159.395930][T17677] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1159.405736][T17677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.584645][T17664] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.612261][T17664] usb 5-1: config 0 has no interfaces? [ 1159.632215][T17677] usb 1-1: config 0 descriptor?? [ 1159.646616][T17664] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1159.673935][T17677] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1159.693743][T17664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.725536][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.750277][T17664] usb 5-1: config 0 descriptor?? [ 1160.140409][T10016] bond2: (slave wlan0): failed to get link speed/duplex [ 1160.259643][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.271357][ T5848] Bluetooth: hci3: unexpected event for opcode 0x200a [ 1160.305855][T15880] bond2: (slave wlan0): failed to get link speed/duplex [ 1160.443009][T15519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1160.452185][T15519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1160.462556][T15519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1160.470348][T15519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1160.477844][T15519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1160.485345][T17677] gspca_sonixj: reg_r err -32 [ 1160.497317][T17677] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 1160.522582][ T78] bridge_slave_1: left allmulticast mode [ 1160.530653][ T78] bridge_slave_1: left promiscuous mode [ 1160.537891][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.547720][ T78] bridge_slave_0: left allmulticast mode [ 1160.556847][ T78] bridge_slave_0: left promiscuous mode [ 1160.563363][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.919950][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.930306][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.939678][ T78] bond0 (unregistering): Released all slaves [ 1160.991557][T16029] bond2: (slave wlan0): failed to get link speed/duplex [ 1161.334636][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1161.345485][T19322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1161.529177][ T78] hsr_slave_0: left promiscuous mode [ 1161.538366][ T78] hsr_slave_1: left promiscuous mode [ 1161.545879][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.554604][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.563056][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.570740][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.593389][ T78] veth1_macvtap: left promiscuous mode [ 1161.598978][ T78] veth0_macvtap: left promiscuous mode [ 1161.604978][ T78] veth1_vlan: left promiscuous mode [ 1161.615016][ T78] veth0_vlan: left promiscuous mode [ 1161.828443][T17658] usb 1-1: USB disconnect, device number 51 [ 1161.869240][T17677] usb 5-1: USB disconnect, device number 49 [ 1161.976400][ T78] pim6reg (unregistering): left allmulticast mode [ 1162.511606][ T5848] Bluetooth: hci0: command tx timeout [ 1163.297961][ T78] team0 (unregistering): Port device team_slave_1 removed [ 1163.356132][ T78] team0 (unregistering): Port device team_slave_0 removed [ 1163.927249][T19313] chnl_net:caif_netlink_parms(): no params data found [ 1164.157890][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.179779][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.190074][T19313] bridge_slave_0: entered allmulticast mode [ 1164.198062][T19313] bridge_slave_0: entered promiscuous mode [ 1164.208329][T19313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.215780][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.223351][T19313] bridge_slave_1: entered allmulticast mode [ 1164.230816][T19313] bridge_slave_1: entered promiscuous mode [ 1164.331555][T19313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1164.352694][T19313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.385367][T19313] team0: Port device team_slave_0 added [ 1164.417838][T19313] team0: Port device team_slave_1 added [ 1164.476732][T10016] net_ratelimit: 1 callbacks suppressed [ 1164.476747][T10016] bond2: (slave wlan0): failed to get link speed/duplex [ 1164.512066][T19313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.519024][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.545917][T19313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.565024][T19313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.578232][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1164.610572][ T5848] Bluetooth: hci0: command tx timeout [ 1164.615199][T19313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.756919][T19313] hsr_slave_0: entered promiscuous mode [ 1164.787385][T19313] hsr_slave_1: entered promiscuous mode [ 1164.920274][T15880] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.050945][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.210211][T15880] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.323726][T19313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1165.333719][T19313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1165.344313][T19313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1165.355150][T19313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1165.440746][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.473686][T19313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.498271][T19313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.513371][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.520544][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.536162][T15880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.543387][T15880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.561482][T15880] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.615233][T19313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1165.670527][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.780724][T15880] bond2: (slave wlan0): failed to get link speed/duplex [ 1165.847877][T19313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.894438][T19313] veth0_vlan: entered promiscuous mode [ 1165.907736][T19313] veth1_vlan: entered promiscuous mode [ 1165.938196][T19313] veth0_macvtap: entered promiscuous mode [ 1165.947695][T19313] veth1_macvtap: entered promiscuous mode [ 1165.961230][T17664] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1165.965113][T19313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.987691][T19313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1166.000216][ T78] bond2: (slave wlan0): failed to get link speed/duplex [ 1166.012449][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.022690][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.040693][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.049977][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.119868][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.130041][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.137875][T17664] usb 1-1: Using ep0 maxpacket: 8 [ 1166.149587][T17664] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1166.161827][T17664] usb 1-1: config 0 has no interface number 0 [ 1166.167935][T17664] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1166.168887][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.181415][ T6195] bond2: (slave wlan0): failed to get link speed/duplex [ 1166.194685][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.198521][T17664] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1166.214706][T17664] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.225854][T17664] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1166.239244][T17664] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1166.248411][T17664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.258707][T17664] usb 1-1: config 0 descriptor?? [ 1166.267166][T17664] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1166.285906][T19452] ------------[ cut here ]------------ [ 1166.291665][T19452] WARNING: CPU: 0 PID: 19452 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 1166.301825][T19452] Modules linked in: [ 1166.305983][T19452] CPU: 0 UID: 0 PID: 19452 Comm: syz.1.3726 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1166.315416][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1166.325514][T19452] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 1166.331735][T19452] Code: 48 8d 35 00 00 00 00 e8 7e 88 8d f6 e8 79 af 97 f6 e9 25 fe ff ff e8 cf 54 b1 f6 90 0f 0b 90 e9 17 fe ff ff e8 c1 54 b1 f6 90 <0f> 0b 90 eb b1 e8 b6 54 b1 f6 e8 51 79 96 f6 31 ff 89 c3 89 c6 e8 [ 1166.351538][T19452] RSP: 0018:ffffc9000c897218 EFLAGS: 00010287 [ 1166.357616][T19452] RAX: 00000000000006f6 RBX: ffff888033984000 RCX: ffffc9000c3a9000 [ 1166.365659][T19452] RDX: 0000000000080000 RSI: ffffffff8b0a3a0f RDI: 0000000000000005 [ 1166.373720][T19452] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1166.381796][T19452] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030935140 [ 1166.389901][T19452] R13: ffff888064590e40 R14: ffff88802f9f8000 R15: 0000000000000000 [ 1166.397982][T19452] FS: 00007fd45713a6c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 1166.407022][T19452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.413648][T19452] CR2: 0000200000002900 CR3: 000000004e0f9000 CR4: 00000000003526f0 [ 1166.421681][T19452] Call Trace: [ 1166.424972][T19452] [ 1166.427905][T19452] rate_control_rate_init_all_links+0x76/0x1e0 [ 1166.434283][T19452] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 1166.440622][T19452] sta_apply_parameters+0xc37/0x18b0 [ 1166.445929][T19452] ieee80211_add_station+0x3fa/0x6c0 [ 1166.451354][T19452] nl80211_new_station+0x1502/0x1c90 [ 1166.456658][T19452] ? __pfx_nl80211_new_station+0x10/0x10 [ 1166.462485][T19452] ? nl80211_pre_doit+0x1b0/0xb10 [ 1166.467535][T19452] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1166.473133][T19452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1166.479218][T19452] ? bpf_lsm_capable+0x9/0x10 [ 1166.484186][T19452] ? security_capable+0x7e/0x260 [ 1166.489124][T19452] ? ns_capable+0xd7/0x110 [ 1166.493767][T19452] genl_rcv_msg+0x55c/0x800 [ 1166.498284][T19452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1166.503343][T19452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1166.508713][T19452] ? __pfx_nl80211_new_station+0x10/0x10 [ 1166.514475][T19452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1166.519953][T19452] netlink_rcv_skb+0x155/0x420 [ 1166.524834][T19452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1166.529866][T19452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1166.535200][T19452] ? netlink_deliver_tap+0x1ae/0xd30 [ 1166.540576][T19452] genl_rcv+0x28/0x40 [ 1166.544576][T19452] netlink_unicast+0x5aa/0x870 [ 1166.549356][T19452] ? __pfx_netlink_unicast+0x10/0x10 [ 1166.554773][T19452] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1166.560820][T19452] netlink_sendmsg+0x8d1/0xdd0 [ 1166.565599][T19452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1166.570934][T19452] ____sys_sendmsg+0xa98/0xc70 [ 1166.575718][T19452] ? copy_msghdr_from_user+0x10a/0x160 [ 1166.581258][T19452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1166.584718][T17668] usb 1-1: USB disconnect, device number 52 [ 1166.586560][T19452] ? __pfx_futex_wake_mark+0x10/0x10 [ 1166.597931][T19452] ___sys_sendmsg+0x134/0x1d0 [ 1166.602675][T19452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1166.607917][T19452] __sys_sendmsg+0x16d/0x220 [ 1166.612555][T19452] ? __pfx___sys_sendmsg+0x10/0x10 [ 1166.617669][T19452] ? __x64_sys_futex+0x1e0/0x4c0 [ 1166.621676][T17668] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1166.622955][T19452] ? fput+0x9b/0xd0 [ 1166.633034][T19452] do_syscall_64+0xcd/0x4c0 [ 1166.637547][T19452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.643481][T19452] RIP: 0033:0x7fd45638eba9 [ 1166.647895][T19452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.667581][T19452] RSP: 002b:00007fd45713a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.676257][T19452] RAX: ffffffffffffffda RBX: 00007fd4565d5fa0 RCX: 00007fd45638eba9 [ 1166.684257][T19452] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 1166.684452][ T5848] Bluetooth: hci0: command tx timeout [ 1166.692244][T19452] RBP: 00007fd456411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1166.692258][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.692269][T19452] R13: 00007fd4565d6038 R14: 00007fd4565d5fa0 R15: 00007ffc6ef38008 [ 1166.692296][T19452] [ 1166.692307][T19452] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1166.692319][T19452] CPU: 0 UID: 0 PID: 19452 Comm: syz.1.3726 Not tainted syzkaller #0 PREEMPT(full) [ 1166.692338][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1166.692348][T19452] Call Trace: [ 1166.692354][T19452] [ 1166.692360][T19452] dump_stack_lvl+0x3d/0x1f0 [ 1166.692386][T19452] vpanic+0x6e8/0x7a0 [ 1166.692410][T19452] ? __pfx_vpanic+0x10/0x10 [ 1166.692438][T19452] ? rate_control_rate_init+0x5c0/0x720 [ 1166.692457][T19452] panic+0xca/0xd0 [ 1166.692479][T19452] ? __pfx_panic+0x10/0x10 [ 1166.692512][T19452] check_panic_on_warn+0xab/0xb0 [ 1166.692527][T19452] __warn+0xf6/0x3c0 [ 1166.692541][T19452] ? rate_control_rate_init+0x5c0/0x720 [ 1166.692561][T19452] report_bug+0x3c3/0x580 [ 1166.692579][T19452] ? rate_control_rate_init+0x5c0/0x720 [ 1166.692598][T19452] handle_bug+0x184/0x210 [ 1166.692620][T19452] exc_invalid_op+0x17/0x50 [ 1166.692641][T19452] asm_exc_invalid_op+0x1a/0x20 [ 1166.692656][T19452] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 1166.692676][T19452] Code: 48 8d 35 00 00 00 00 e8 7e 88 8d f6 e8 79 af 97 f6 e9 25 fe ff ff e8 cf 54 b1 f6 90 0f 0b 90 e9 17 fe ff ff e8 c1 54 b1 f6 90 <0f> 0b 90 eb b1 e8 b6 54 b1 f6 e8 51 79 96 f6 31 ff 89 c3 89 c6 e8 [ 1166.692692][T19452] RSP: 0018:ffffc9000c897218 EFLAGS: 00010287 [ 1166.692706][T19452] RAX: 00000000000006f6 RBX: ffff888033984000 RCX: ffffc9000c3a9000 [ 1166.692716][T19452] RDX: 0000000000080000 RSI: ffffffff8b0a3a0f RDI: 0000000000000005 [ 1166.692726][T19452] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1166.692735][T19452] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030935140 [ 1166.692745][T19452] R13: ffff888064590e40 R14: ffff88802f9f8000 R15: 0000000000000000 [ 1166.692762][T19452] ? rate_control_rate_init+0x5bf/0x720 [ 1166.692784][T19452] ? rate_control_rate_init+0x5bf/0x720 [ 1166.692806][T19452] rate_control_rate_init_all_links+0x76/0x1e0 [ 1166.692829][T19452] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 1166.692851][T19452] sta_apply_parameters+0xc37/0x18b0 [ 1166.692878][T19452] ieee80211_add_station+0x3fa/0x6c0 [ 1166.692903][T19452] nl80211_new_station+0x1502/0x1c90 [ 1166.692930][T19452] ? __pfx_nl80211_new_station+0x10/0x10 [ 1166.692975][T19452] ? nl80211_pre_doit+0x1b0/0xb10 [ 1166.692995][T19452] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1166.693020][T19452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1166.693051][T19452] ? bpf_lsm_capable+0x9/0x10 [ 1166.693073][T19452] ? security_capable+0x7e/0x260 [ 1166.693093][T19452] ? ns_capable+0xd7/0x110 [ 1166.693113][T19452] genl_rcv_msg+0x55c/0x800 [ 1166.693138][T19452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1166.693161][T19452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1166.693176][T19452] ? __pfx_nl80211_new_station+0x10/0x10 [ 1166.693194][T19452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1166.693223][T19452] netlink_rcv_skb+0x155/0x420 [ 1166.693244][T19452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1166.693267][T19452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1166.693297][T19452] ? netlink_deliver_tap+0x1ae/0xd30 [ 1166.693320][T19452] genl_rcv+0x28/0x40 [ 1166.693341][T19452] netlink_unicast+0x5aa/0x870 [ 1166.693364][T19452] ? __pfx_netlink_unicast+0x10/0x10 [ 1166.693385][T19452] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1166.693412][T19452] netlink_sendmsg+0x8d1/0xdd0 [ 1166.693436][T19452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1166.693465][T19452] ____sys_sendmsg+0xa98/0xc70 [ 1166.693489][T19452] ? copy_msghdr_from_user+0x10a/0x160 [ 1166.693508][T19452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1166.693536][T19452] ? __pfx_futex_wake_mark+0x10/0x10 [ 1166.693559][T19452] ___sys_sendmsg+0x134/0x1d0 [ 1166.693580][T19452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1166.693627][T19452] __sys_sendmsg+0x16d/0x220 [ 1166.693647][T19452] ? __pfx___sys_sendmsg+0x10/0x10 [ 1166.693666][T19452] ? __x64_sys_futex+0x1e0/0x4c0 [ 1166.693696][T19452] ? fput+0x9b/0xd0 [ 1166.693721][T19452] do_syscall_64+0xcd/0x4c0 [ 1166.693742][T19452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.693758][T19452] RIP: 0033:0x7fd45638eba9 [ 1166.693772][T19452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.693786][T19452] RSP: 002b:00007fd45713a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1166.693801][T19452] RAX: ffffffffffffffda RBX: 00007fd4565d5fa0 RCX: 00007fd45638eba9 [ 1166.693811][T19452] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008 [ 1166.693821][T19452] RBP: 00007fd456411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1166.693830][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.693840][T19452] R13: 00007fd4565d6038 R14: 00007fd4565d5fa0 R15: 00007ffc6ef38008 [ 1166.693861][T19452] [ 1166.697826][T19452] Kernel Offset: disabled