last executing test programs: 9.894304525s ago: executing program 3 (id=3972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)='h', &(0x7f0000003a80), 0x9, r0}, 0x38) 9.771010848s ago: executing program 3 (id=3973): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}}, 0x0) 9.103443774s ago: executing program 4 (id=3977): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d81050423141100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8001500030001400200000901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e9703000000", 0xd8}], 0x1}, 0x0) 8.982493056s ago: executing program 0 (id=3979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 7.951734734s ago: executing program 3 (id=3980): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) setsockopt$sock_int(r5, 0x10f, 0x0, 0x0, 0x0) 7.909257802s ago: executing program 4 (id=3981): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a8090902"], 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x410, 0x130, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "739099bb7a71934a50e4c624293f7933d7f910dff92760eba300ad659579b1a29cfdbada64b32cfb15a7d6f1a648903f7df6922e5758889ac20afa74edb874c6"}}}, {{@arp={@empty, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'ip6_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local, @multicast2, @multicast1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) 7.726129631s ago: executing program 0 (id=3982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206050000000000fffff0000000000005000100060000000900020073797a32000000000500040000000000140007800800124000080000080008000000c00014000300686173683a69702c706f72742c69700005000500"], 0x60}}, 0x0) 7.540899368s ago: executing program 0 (id=3984): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x7, 0x1, 0x3}, &(0x7f0000000280)=[{}, {}, {}]) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87033c0000001f00000000000000050014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6.270767579s ago: executing program 3 (id=3987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = dup(r4) bind$bt_l2cap(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000084000000000000001c00000000000000732aafb2267e0315acf96d50ac29d14651f796ede97752ea46fb0d443fd8929d2e2eaba5ed3b5a7461a11490d38afc8cf196de29848ced8878f7c2a1d47dfb16c9ab3ef07a1718f30ed5257dc8bf2b5850834aec24f98bcb4fc611be356022ff10a7698e0b41fe7279b52d6b162755c29e583a5a1fd3af55400c481e41acf87f3043dddc3dfa07f20d8abb08d6f6d885a57d2da9716a91d255fad8522d5f1e641fa47fe81adedd711f6de30ff9a7550cf2b07364b03e"], 0x18}}], 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000200)=""/128, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 5.690599396s ago: executing program 4 (id=3988): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r3, 0x125f, 0x0) 5.191314018s ago: executing program 2 (id=3989): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="31eac9e5f8847a7bd9b403046d2cb0ef", 0x10}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1}, 0x22) 5.067372751s ago: executing program 0 (id=3990): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}}, 0x0) 4.181496268s ago: executing program 2 (id=3992): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x4005, &(0x7f0000000000)=0xa636, 0x5, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 4.04552128s ago: executing program 2 (id=3993): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmat(0xffffffffffffffff, &(0x7f00001c9000/0xd000)=nil, 0x0) 3.441090301s ago: executing program 1 (id=3996): r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.345245822s ago: executing program 0 (id=3997): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$sock_int(r5, 0x10f, 0x0, 0x0, 0x0) 2.472513046s ago: executing program 1 (id=3998): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) 2.13126082s ago: executing program 4 (id=3999): mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 2.107492054s ago: executing program 2 (id=4000): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x0, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, r2}, 0x38) read$dsp(0xffffffffffffffff, &(0x7f00000004c0)=""/216, 0xd8) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x204}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400018076657468305f746f5f687372000000000800074000000001140000001000010000000000000000000000000a"], 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.061345194s ago: executing program 0 (id=4001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r3 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x24}}, 0x0) 1.941729717s ago: executing program 4 (id=4002): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) fsopen(&(0x7f0000000040)='ceph\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="31eac9e5f8847a7bd9b403046d2cb0ef", 0x10}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x50) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) recvmsg(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/192, 0xc0}], 0x1}, 0x22) 1.658594603s ago: executing program 1 (id=4003): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x4005, &(0x7f0000000000)=0xa636, 0x5, 0x0) sendfile(r2, r3, 0x0, 0x7ffff000) 1.446868002s ago: executing program 1 (id=4004): creat(0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) epoll_create(0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x40384708, 0x20000000) 1.40828812s ago: executing program 2 (id=4005): creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1.12472047s ago: executing program 3 (id=4006): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f00000001c0)) close(r0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 190.342736ms ago: executing program 2 (id=4007): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x1000000, 0x0, 0x0, 0x0) 164.502547ms ago: executing program 4 (id=4008): r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 149.802692ms ago: executing program 1 (id=4009): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x7, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140)={r1}, 0xc) 59.59986ms ago: executing program 1 (id=4010): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmat(0xffffffffffffffff, &(0x7f00001c9000/0xd000)=nil, 0x0) 0s ago: executing program 3 (id=4011): add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r3, 0x125f, 0x0) kernel console output (not intermixed with test programs): e [ 857.943259][ T784] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.966806][ T2448] bridge_slave_0: left allmulticast mode [ 857.972487][ T2448] bridge_slave_0: left promiscuous mode [ 857.979291][ T2448] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.990582][ T784] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 858.004177][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.022879][ T784] usb 5-1: config 0 descriptor?? [ 858.042342][ T784] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 858.753356][ T2448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.773703][ T2448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.793136][ T2448] bond0 (unregistering): Released all slaves [ 859.077707][T16555] hsr_slave_0: entered promiscuous mode [ 859.093414][T16555] hsr_slave_1: entered promiscuous mode [ 859.109000][T16555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 859.122760][T16555] Cannot create hsr debugfs directory [ 859.484801][ T785] usb 5-1: USB disconnect, device number 11 [ 859.576163][ T785] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 859.734932][T16689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 859.814410][ T5096] Bluetooth: hci1: command tx timeout [ 860.651824][ T2448] hsr_slave_0: left promiscuous mode [ 860.682143][ T2448] hsr_slave_1: left promiscuous mode [ 860.699099][ T2448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.706694][ T2448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.715935][ T2448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.734891][ T2448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.832184][ T2448] veth1_macvtap: left promiscuous mode [ 860.844593][ T2448] veth0_macvtap: left promiscuous mode [ 860.854960][ T2448] veth1_vlan: left promiscuous mode [ 860.868188][ T2448] veth0_vlan: left promiscuous mode [ 862.043962][ T2448] team0 (unregistering): Port device team_slave_1 removed [ 862.115889][ T2448] team0 (unregistering): Port device team_slave_0 removed [ 863.600365][ T2448] IPVS: stop unused estimator thread 0... [ 863.938416][T16498] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 864.018333][T16498] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 864.052747][T16498] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 864.109477][T16498] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 864.825799][T16785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.850262][T16498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.963429][T16555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 866.011273][T16555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 866.030413][T16555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 866.086139][T16555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 866.122364][T16498] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.249310][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.256589][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.273124][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.280378][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.102234][T16498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.440460][T16555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.542976][T16555] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.545945][T16831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 867.583126][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.590363][ T5092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.694172][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.701433][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.813807][T16498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.907687][T16555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.111691][T16498] veth0_vlan: entered promiscuous mode [ 868.153539][T16498] veth1_vlan: entered promiscuous mode [ 868.160993][T11973] Bluetooth: hci4: sending frame failed (-49) [ 868.170170][ T5096] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 868.344314][T16498] veth0_macvtap: entered promiscuous mode [ 868.429169][T16498] veth1_macvtap: entered promiscuous mode [ 868.487782][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.707707][T16555] veth0_vlan: entered promiscuous mode [ 868.740110][T16498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.794366][T16498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.822772][T16498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.839903][T16498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.852085][T16498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.879809][T16498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.904320][T16498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.931751][T16498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 868.962733][T16498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.004897][T16498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.019720][T16555] veth1_vlan: entered promiscuous mode [ 869.070718][T16498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.103778][T16498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.123296][T16498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.138948][T16498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.201500][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2977'. [ 869.464981][T16889] fuse: Unknown parameter '0x0000000000000003' [ 869.562334][T16555] veth0_macvtap: entered promiscuous mode [ 869.613398][T16555] veth1_macvtap: entered promiscuous mode [ 869.869257][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.901177][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.936115][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.964361][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.965929][T16904] 9pnet: Could not find request transport: fd0x000000000000000b [ 869.989585][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.004517][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.040179][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.079402][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.096270][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.106778][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.119667][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.131277][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.143279][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.190775][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.224773][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.240921][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.307888][T16555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.326989][T16555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.341612][T16555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.352372][T16555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.464999][ T427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.483625][ T427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.605512][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.611959][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.726438][ T427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.769050][ T427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.909408][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.964436][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.082666][T16944] fuse: Unknown parameter 'fd0x0000000000000003' [ 871.372098][T16959] fuse: Unknown parameter '0x0000000000000004' [ 871.411378][ T29] audit: type=1804 audit(1719833679.397:548): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.2994" name="/root/syzkaller.xiLCgE/141/file0" dev="sda1" ino=2028 res=1 errno=0 [ 871.605023][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'. [ 871.677863][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2993'. [ 871.775090][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2993'. [ 872.024798][ T5134] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 872.150336][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.248914][ T5134] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 872.307175][ T5134] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 872.330229][ T5134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.361889][T16990] syz.2.2995: attempt to access beyond end of device [ 872.361889][T16990] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 872.407807][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.419311][T16979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 872.448401][T16979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 872.850999][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.130899][T17005] No such timeout policy "syz0" [ 873.804997][ T784] usb 4-1: USB disconnect, device number 7 [ 873.840012][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.303000][ T51] bridge_slave_1: left allmulticast mode [ 874.336767][ T51] bridge_slave_1: left promiscuous mode [ 874.353293][T11973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 874.369985][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.379249][T11973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 874.391023][T11973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 874.403219][T11973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 874.413189][T11973] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 874.421715][ T51] bridge_slave_0: left allmulticast mode [ 874.432361][T11973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 874.481642][ T51] bridge_slave_0: left promiscuous mode [ 874.493682][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.622931][T17030] fuse: Unknown parameter '0x0000000000000004' [ 874.666726][ T29] audit: type=1804 audit(1719833682.657:549): pid=17030 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.3008" name="/root/syzkaller.xiLCgE/143/file0" dev="sda1" ino=2028 res=1 errno=0 [ 874.902356][T17037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.754429][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.788945][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.821266][ T51] bond0 (unregistering): Released all slaves [ 876.515665][ T5096] Bluetooth: hci1: command tx timeout [ 876.545924][ T51] hsr_slave_0: left promiscuous mode [ 876.613743][ T51] hsr_slave_1: left promiscuous mode [ 876.670379][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.678395][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.704630][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.712070][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.962282][ T51] veth1_macvtap: left promiscuous mode [ 876.994030][ T51] veth0_macvtap: left promiscuous mode [ 877.034297][ T51] veth1_vlan: left promiscuous mode [ 877.057853][ T51] veth0_vlan: left promiscuous mode [ 877.236153][ T29] audit: type=1400 audit(1719833685.227:550): avc: denied { shutdown } for pid=17093 comm="syz.2.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 877.291359][ T29] audit: type=1400 audit(1719833685.247:551): avc: denied { accept } for pid=17093 comm="syz.2.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 877.327392][ T29] audit: type=1400 audit(1719833685.317:552): avc: denied { read } for pid=17093 comm="syz.2.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 877.382502][T17098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.402583][T17098] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3022'. [ 877.423185][ T29] audit: type=1400 audit(1719833685.367:553): avc: denied { ioctl } for pid=17093 comm="syz.2.3022" path="socket:[61480]" dev="sockfs" ino=61480 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 877.499332][ T29] audit: type=1400 audit(1719833685.367:554): avc: denied { accept } for pid=17093 comm="syz.2.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 877.706651][T11973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 877.730367][T11973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 877.739165][T11973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 877.749486][T11973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 877.757652][T11973] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 877.765991][T11973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 878.544311][ T51] team0 (unregistering): Port device team_slave_1 removed [ 878.588715][ T51] team0 (unregistering): Port device team_slave_0 removed [ 878.607152][T11973] Bluetooth: hci1: command tx timeout [ 879.563082][T17023] chnl_net:caif_netlink_parms(): no params data found [ 879.720708][T17139] 9pnet_fd: Insufficient options for proto=fd [ 879.802692][T11973] Bluetooth: hci4: command tx timeout [ 880.078295][T17023] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.100381][T17023] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.148841][T17023] bridge_slave_0: entered allmulticast mode [ 880.185118][T17023] bridge_slave_0: entered promiscuous mode [ 880.293375][T17023] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.353256][T17023] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.416048][T17023] bridge_slave_1: entered allmulticast mode [ 880.444567][T17023] bridge_slave_1: entered promiscuous mode [ 880.533997][T17108] chnl_net:caif_netlink_parms(): no params data found [ 880.628578][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.676422][ T5096] Bluetooth: hci1: command tx timeout [ 880.801906][T17023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.913847][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.007136][T17023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.143197][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.300174][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.347531][T17023] team0: Port device team_slave_0 added [ 881.365049][T17023] team0: Port device team_slave_1 added [ 881.529865][T17108] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.544921][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.564640][T17108] bridge_slave_0: entered allmulticast mode [ 881.576610][T17108] bridge_slave_0: entered promiscuous mode [ 881.597133][T17023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.616999][T17023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.668865][T17023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.689579][T17023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.714393][T17023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.766328][T17023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.796178][ T29] audit: type=1400 audit(1719833689.777:555): avc: denied { bind } for pid=17181 comm="syz.0.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 881.875283][ T5096] Bluetooth: hci4: command tx timeout [ 881.896700][T17108] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.973556][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.008055][T17108] bridge_slave_1: entered allmulticast mode [ 882.021402][T17187] 9pnet_fd: Insufficient options for proto=fd [ 882.074724][T17108] bridge_slave_1: entered promiscuous mode [ 882.081050][ T29] audit: type=1400 audit(1719833690.037:556): avc: denied { read } for pid=17181 comm="syz.0.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 882.382991][T17108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 882.455872][T17108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.755845][ T5096] Bluetooth: hci1: command tx timeout [ 882.831582][T17023] hsr_slave_0: entered promiscuous mode [ 882.851729][T17023] hsr_slave_1: entered promiscuous mode [ 882.867782][T17023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.875951][T17023] Cannot create hsr debugfs directory [ 882.962774][T17108] team0: Port device team_slave_0 added [ 883.177979][T17108] team0: Port device team_slave_1 added [ 883.484537][ T51] bridge_slave_1: left allmulticast mode [ 883.495145][ T51] bridge_slave_1: left promiscuous mode [ 883.511602][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.531046][ T51] bridge_slave_0: left allmulticast mode [ 883.548301][ T51] bridge_slave_0: left promiscuous mode [ 883.559952][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.954611][ T5096] Bluetooth: hci4: command tx timeout [ 884.159522][T17235] 9pnet_fd: Insufficient options for proto=fd [ 884.319611][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.333448][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.344750][ T51] bond0 (unregistering): Released all slaves [ 884.368294][T17108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.377386][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.403460][T17108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.422265][T17108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.429409][T17108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.457916][T17108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.287948][T17108] hsr_slave_0: entered promiscuous mode [ 885.336273][T17108] hsr_slave_1: entered promiscuous mode [ 885.357419][T17108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.411098][T17108] Cannot create hsr debugfs directory [ 885.530441][ T51] hsr_slave_0: left promiscuous mode [ 885.550306][ T51] hsr_slave_1: left promiscuous mode [ 885.602833][ T51] veth1_macvtap: left promiscuous mode [ 885.620265][ T51] veth0_macvtap: left promiscuous mode [ 885.629293][ T51] veth1_vlan: left promiscuous mode [ 885.659675][ T51] veth0_vlan: left promiscuous mode [ 886.035021][ T5096] Bluetooth: hci4: command tx timeout [ 886.583916][T17282] 9pnet_fd: Insufficient options for proto=fd [ 886.808470][ T51] team0 (unregistering): Port device team_slave_1 removed [ 886.882163][ T51] team0 (unregistering): Port device team_slave_0 removed [ 887.123404][ T5092] IPVS: starting estimator thread 0... [ 887.224143][T17294] IPVS: using max 14 ests per chain, 33600 per kthread [ 888.114547][ T5096] Bluetooth: hci4: command tx timeout [ 888.275635][T17301] syz.3.3063: attempt to access beyond end of device [ 888.275635][T17301] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 889.215927][ T51] IPVS: stop unused estimator thread 0... [ 889.606161][T17314] random: crng reseeded on system resumption [ 890.187235][T17023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 890.251053][T17023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 890.361924][T17023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 890.475073][T17023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 891.260490][T17108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 891.360350][T17108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 891.425210][T17108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 891.479910][T17108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 891.495068][T17340] 9pnet_fd: Insufficient options for proto=fd [ 891.872419][T17023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.018888][T17023] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.103845][T12948] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.111088][T12948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.219685][T12948] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.226960][T12948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.528713][T17372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.604025][T17377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.855978][T17108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.228947][T17108] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.324353][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.331606][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.415234][T17381] 9pnet_fd: Insufficient options for proto=fd [ 893.446237][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.453472][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.749633][T17396] random: crng reseeded on system resumption [ 894.004021][T17023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.262087][T17023] veth0_vlan: entered promiscuous mode [ 894.332519][T17023] veth1_vlan: entered promiscuous mode [ 894.499629][T17023] veth0_macvtap: entered promiscuous mode [ 894.547096][T17108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.568290][T17023] veth1_macvtap: entered promiscuous mode [ 894.661111][T17023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.714309][T17023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.746181][T17023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.784642][T17023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.814815][T17023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.841045][T17023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.877347][T17023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.930478][T17023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.974679][T17023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.003389][T17023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.044464][T17023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.075596][T17023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.115031][T17023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.169273][T17023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.210817][T17400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3086'. [ 895.276794][T17023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.315707][T17023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.344424][T17023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.382343][T17023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.468009][ T427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.506112][ T427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.578171][T17108] veth0_vlan: entered promiscuous mode [ 896.744486][ T427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.757432][T17108] veth1_vlan: entered promiscuous mode [ 896.771137][ T427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.213864][T17108] veth0_macvtap: entered promiscuous mode [ 897.259961][T17108] veth1_macvtap: entered promiscuous mode [ 897.333075][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.371818][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.406536][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.438539][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.479825][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.514365][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.547508][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.569058][T17464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.606402][T17464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.610884][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.661176][T17108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.748332][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.777462][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.809980][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.838352][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.852360][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.865768][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.890339][T17108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.907920][T17108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.949583][T17108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.980643][T17108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.007943][T17108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.030361][T17108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.055583][T17108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.323332][ T29] audit: type=1800 audit(1719833706.307:557): pid=17485 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3102" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 898.355617][T17485] vhci_hcd: vhci_device speed not set [ 898.398701][ T29] audit: type=1800 audit(1719833706.377:558): pid=17489 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3102" name="bus" dev="sda1" ino=2014 res=0 errno=0 [ 898.426606][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.447719][T17491] random: crng reseeded on system resumption [ 898.490187][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.665460][ T2819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.727059][ T2819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.842551][ T5092] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 899.054345][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 899.079643][ T5092] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 899.105195][ T5092] usb 2-1: config 0 has no interface number 0 [ 899.111375][ T5092] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 899.160922][ T5092] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 899.186383][ T5092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.220375][ T5092] usb 2-1: config 0 descriptor?? [ 899.277490][ T5092] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 899.414759][ T784] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 899.560006][T17520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.590555][T17520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.637277][ T784] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 899.658656][ T784] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 899.690236][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.721499][T17507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 899.730599][T17507] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 900.245280][ T784] usb 5-1: USB disconnect, device number 12 [ 900.636000][ T784] usb 2-1: USB disconnect, device number 15 [ 900.636065][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 900.733634][ T784] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 901.715307][T17554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.749898][T17554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 901.947588][T17553] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 902.006023][ T785] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 902.217428][ T785] usb 1-1: Using ep0 maxpacket: 8 [ 902.231981][ T785] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 902.247584][ T785] usb 1-1: config 0 has no interface number 0 [ 902.259004][ T784] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 902.263990][ T785] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.294011][ T785] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 902.311870][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.344095][ T785] usb 1-1: config 0 descriptor?? [ 902.370078][ T785] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 902.468450][ T784] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 902.504126][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.555537][ T784] usb 3-1: config 0 descriptor?? [ 902.860530][ T784] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 902.894361][ T784] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 902.922737][ T784] [drm:udl_init] *ERROR* Selecting channel failed [ 903.010427][ T784] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 903.033861][ T784] [drm] Initialized udl on minor 2 [ 903.058827][ T784] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 903.092755][ T784] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 903.128626][ T5092] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 903.152177][ T784] usb 3-1: USB disconnect, device number 16 [ 903.169483][ T5092] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 903.533893][T17580] random: crng reseeded on system resumption [ 904.052510][T17583] No such timeout policy "syz0" [ 904.386642][ T5135] usb 1-1: USB disconnect, device number 24 [ 904.386720][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 904.455970][ T5135] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 905.152738][T17596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.293310][T17596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.841224][T17601] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 906.688908][T17442] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 906.746105][T17620] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3149'. [ 906.917857][T17442] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 906.947545][T17442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.991840][T17442] usb 2-1: config 0 descriptor?? [ 907.048143][T17631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.062961][T17631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.353422][T17442] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 907.378345][T17442] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 907.405194][T17442] [drm:udl_init] *ERROR* Selecting channel failed [ 907.448224][T17638] random: crng reseeded on system resumption [ 907.534636][ T9975] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 907.552917][T17442] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 907.590194][T17442] [drm] Initialized udl on minor 2 [ 907.628066][T17442] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 907.671242][ T785] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 907.690836][T17442] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 907.739950][T17442] usb 2-1: USB disconnect, device number 16 [ 907.746130][ T785] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 907.778276][ T9975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 907.800304][ T785] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 907.815946][ T9975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 907.877579][ T9975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.937207][T17634] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 907.963131][T17634] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 908.432590][T17442] usb 1-1: USB disconnect, device number 25 [ 909.121970][ T5096] Bluetooth: Unexpected start frame (len 0) [ 909.371494][T17657] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 909.405363][ T9975] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 909.617296][ T9975] usb 1-1: Using ep0 maxpacket: 8 [ 909.630722][ T9975] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 909.648989][ T9975] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 909.663442][ T9975] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 909.673593][ T9975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.709954][T17676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.735029][T17676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.954017][ T9975] usb 1-1: USB disconnect, device number 26 [ 911.640271][ T5092] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 911.848218][ T5092] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 911.862963][ T5092] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 911.872722][ T5092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.917835][T17692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 911.933916][T17692] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 911.958925][ T5096] Bluetooth: hci4: Malformed Event: 0x2f [ 912.105006][T17714] random: crng reseeded on system resumption [ 912.436334][T17719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.490374][T17721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 912.559554][ T9] usb 1-1: USB disconnect, device number 27 [ 913.054458][ T5092] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 913.265103][ T5092] usb 5-1: Using ep0 maxpacket: 8 [ 913.285037][ T5092] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.325131][ T29] audit: type=1326 audit(1719833721.317:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 913.334390][ T5092] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 913.405148][ T5092] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 913.414810][ T29] audit: type=1326 audit(1719833721.357:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 913.448961][ T5092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.492595][ T29] audit: type=1326 audit(1719833721.357:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 913.654741][ T29] audit: type=1326 audit(1719833721.357:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 913.822308][ T29] audit: type=1326 audit(1719833721.357:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 913.849470][T17442] usb 5-1: USB disconnect, device number 13 [ 914.060370][ T29] audit: type=1326 audit(1719833721.357:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 914.414503][ T29] audit: type=1326 audit(1719833721.357:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 914.569122][ T29] audit: type=1326 audit(1719833721.357:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 914.624367][ T29] audit: type=1326 audit(1719833721.367:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 914.664431][ T29] audit: type=1326 audit(1719833721.367:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17729 comm="syz.3.3184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x7ffc0000 [ 914.829796][T17744] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3189'. [ 915.475277][T17757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.503494][T17757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.704942][ T5092] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 915.714785][ T5096] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 915.725224][ T5096] Bluetooth: hci4: Injecting HCI hardware error event [ 915.734839][T11973] Bluetooth: hci4: hardware error 0x00 [ 915.886897][ T5092] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 915.910971][ T5092] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 915.930526][ T5092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.953136][T17756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 915.981211][T17756] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 916.484329][ T5092] usb 3-1: USB disconnect, device number 17 [ 916.874385][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 917.094623][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 917.123409][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.150345][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 917.176471][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 917.202893][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.263347][T17780] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3202'. [ 917.473956][ T5092] usb 1-1: USB disconnect, device number 28 [ 917.794643][T11973] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 917.944985][T17794] random: crng reseeded on system resumption [ 918.007703][T17796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.061602][T17796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.887104][T17811] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 919.751613][T17812] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3213'. [ 920.084520][ T9975] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 920.286902][ T9975] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 920.317706][ T9975] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 920.342821][ T9975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.388103][T17814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 920.405255][T17814] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 920.914768][ T5092] usb 3-1: USB disconnect, device number 18 [ 921.783641][T17854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 922.114089][T17861] netlink: 'syz.2.3225': attribute type 72 has an invalid length. [ 922.138073][T17861] netlink: 'syz.2.3225': attribute type 8 has an invalid length. [ 922.518978][T17878] random: crng reseeded on system resumption [ 923.234529][T11973] Bluetooth: hci0: command 0x0406 tx timeout [ 924.165984][T17901] netlink: 'syz.4.3238': attribute type 72 has an invalid length. [ 924.182361][T17901] netlink: 'syz.4.3238': attribute type 8 has an invalid length. [ 924.840967][T17909] No such timeout policy "syz0" [ 925.497739][T17912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.567365][T17912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.794071][T17916] kvm: kvm [17915]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x40a9 [ 925.817498][T17916] kvm: kvm [17915]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x40a9 [ 925.831361][T17916] kvm: kvm [17915]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x40a9 [ 925.851352][T17916] kvm: kvm [17915]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x40a9 [ 926.657686][T17936] netlink: 'syz.2.3249': attribute type 72 has an invalid length. [ 926.694355][T17936] netlink: 'syz.2.3249': attribute type 8 has an invalid length. [ 929.228549][T17970] input: syz1 as /devices/virtual/input/input11 [ 930.012238][T17969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.051639][T17969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 930.500779][T17986] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3263'. [ 930.622894][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 930.622914][ T29] audit: type=1326 audit(1719833738.607:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17988 comm="syz.2.3264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x0 [ 930.910164][T17983] No control pipe specified [ 932.051153][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.058771][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.194508][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 932.264449][T11973] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 934.931915][T18026] netlink: 892 bytes leftover after parsing attributes in process `syz.1.3274'. [ 935.139527][ T29] audit: type=1326 audit(1719833743.127:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18038 comm="syz.3.3278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x0 [ 936.313780][T18052] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 937.495996][T11973] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 937.517002][T18052] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.3282'. [ 937.930729][T18065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.942047][T18065] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 938.292846][T18068] netlink: 892 bytes leftover after parsing attributes in process `syz.0.3287'. [ 938.914801][ T5096] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 938.925267][ T5096] Bluetooth: hci0: Injecting HCI hardware error event [ 938.937679][ T5096] Bluetooth: hci0: hardware error 0x00 [ 939.298977][ T29] audit: type=1400 audit(1719833747.287:588): avc: denied { setopt } for pid=18078 comm="syz.1.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 939.320913][T18080] netlink: 'syz.1.3291': attribute type 10 has an invalid length. [ 939.453520][ T29] audit: type=1400 audit(1719833747.437:589): avc: denied { mount } for pid=18073 comm="syz.2.3288" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 939.526743][T18080] team0: Port device netdevsim0 added [ 939.547662][ T29] audit: type=1400 audit(1719833747.437:590): avc: denied { unmount } for pid=18073 comm="syz.2.3288" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 939.786048][T18090] netlink: 'syz.2.3294': attribute type 1 has an invalid length. [ 939.807645][T18090] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.3294'. [ 939.924403][ T29] audit: type=1326 audit(1719833747.907:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18094 comm="syz.1.3296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11e8d75b99 code=0x0 [ 940.181112][T18101] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3298'. [ 941.076837][ T5096] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 941.181302][T18109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.192289][T18109] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 942.033344][T18128] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3307'. [ 942.779683][ T29] audit: type=1326 audit(1719833750.757:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.1.3309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11e8d75b99 code=0x0 [ 942.821217][T18132] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3308'. [ 942.904716][ T29] audit: type=1326 audit(1719833750.807:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18131 comm="syz.2.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 942.978958][ T29] audit: type=1326 audit(1719833750.807:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18131 comm="syz.2.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 943.043191][ T29] audit: type=1326 audit(1719833750.807:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18131 comm="syz.2.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 943.187941][ T29] audit: type=1326 audit(1719833750.807:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18131 comm="syz.2.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 943.304477][ T29] audit: type=1326 audit(1719833750.807:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18131 comm="syz.2.3308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 944.142228][T18149] fuse: Bad value for 'rootmode' [ 944.767087][T18162] No such timeout policy "syz0" [ 945.546592][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 945.571491][T18167] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3322'. [ 945.577600][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 945.577619][ T29] audit: type=1326 audit(1719833753.557:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 945.650482][ T29] audit: type=1326 audit(1719833753.557:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 945.722486][ T5096] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 945.729742][ T29] audit: type=1326 audit(1719833753.557:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 945.805146][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 945.815004][ T5096] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 945.827515][ T9] usb 5-1: config 0 has no interfaces? [ 945.841233][ T9] usb 5-1: config 0 has no interfaces? [ 945.841416][ T29] audit: type=1326 audit(1719833753.557:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 945.875325][ T9] usb 5-1: config 0 has no interfaces? [ 945.882592][ T9] usb 5-1: config 0 has no interfaces? [ 945.889852][ T9] usb 5-1: config 0 has no interfaces? [ 945.901340][ T9] usb 5-1: config 0 has no interfaces? [ 945.909865][ T9] usb 5-1: config 0 has no interfaces? [ 945.918246][ T9] usb 5-1: config 0 has no interfaces? [ 945.933263][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 945.952613][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 945.979737][ T9] usb 5-1: Product: syz [ 945.993414][ T9] usb 5-1: Manufacturer: syz [ 946.000433][ T29] audit: type=1326 audit(1719833753.557:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 946.024626][ T9] usb 5-1: SerialNumber: syz [ 946.055673][ T9] usb 5-1: config 0 descriptor?? [ 946.086561][ T29] audit: type=1326 audit(1719833753.557:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 946.352865][ T29] audit: type=1326 audit(1719833753.557:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 946.365401][T18170] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 946.697036][ T29] audit: type=1326 audit(1719833753.557:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 946.981000][ T5134] usb 5-1: USB disconnect, device number 14 [ 947.036480][ T29] audit: type=1326 audit(1719833753.557:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 947.125545][T18186] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3327'. [ 947.150721][ T29] audit: type=1326 audit(1719833753.557:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18165 comm="syz.2.3322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc079975b99 code=0x7ffc0000 [ 947.861427][T18198] hfs: can't find a HFS filesystem on dev nullb0 [ 948.604421][ T5134] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 949.671600][ T5134] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 949.703915][ T5134] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 949.721619][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.792534][T18191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 949.824502][T18191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 950.801717][T18221] random: crng reseeded on system resumption [ 951.180391][ T5096] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 951.184629][T18229] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3339'. [ 951.257641][ T5096] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 951.269648][ T5092] usb 2-1: USB disconnect, device number 17 [ 951.384396][T17442] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 951.537820][T18227] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 951.585684][T17442] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 951.617579][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 951.617596][ T29] audit: type=1804 audit(1719833759.607:624): pid=18239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3344" name="/root/syzkaller.oSBsS1/77/file0" dev="sda1" ino=2029 res=1 errno=0 [ 951.647178][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.655793][T17442] usb 5-1: config 0 has no interfaces? [ 951.677311][T17442] usb 5-1: config 0 has no interfaces? [ 951.686658][T17442] usb 5-1: config 0 has no interfaces? [ 951.702598][T17442] usb 5-1: config 0 has no interfaces? [ 951.709904][T17442] usb 5-1: config 0 has no interfaces? [ 951.731477][T17442] usb 5-1: config 0 has no interfaces? [ 951.742509][T17442] usb 5-1: config 0 has no interfaces? [ 951.752390][T17442] usb 5-1: config 0 has no interfaces? [ 951.766177][T17442] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 951.964473][T17442] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 951.990411][T17442] usb 5-1: Product: syz [ 952.006830][T17442] usb 5-1: Manufacturer: syz [ 952.024583][T17442] usb 5-1: SerialNumber: syz [ 952.046684][T17442] usb 5-1: config 0 descriptor?? [ 952.345292][T18254] random: crng reseeded on system resumption [ 952.707866][T18256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3350'. [ 953.154041][T17442] usb 5-1: USB disconnect, device number 15 [ 953.317662][T18259] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3354'. [ 953.521889][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 953.546190][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'. [ 953.571281][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 954.078450][T18285] tc_dump_action: action bad kind [ 954.324029][T18291] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 954.345257][T18294] random: crng reseeded on system resumption [ 955.224526][T17442] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 955.393920][T18324] random: crng reseeded on system resumption [ 955.645302][T17442] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 955.655171][T17442] usb 4-1: config 0 has no interfaces? [ 955.662332][T17442] usb 4-1: config 0 has no interfaces? [ 955.669767][T17442] usb 4-1: config 0 has no interfaces? [ 955.677016][T17442] usb 4-1: config 0 has no interfaces? [ 955.684624][T17442] usb 4-1: config 0 has no interfaces? [ 955.691973][T17442] usb 4-1: config 0 has no interfaces? [ 955.699597][T17442] usb 4-1: config 0 has no interfaces? [ 955.707118][T17442] usb 4-1: config 0 has no interfaces? [ 955.720282][T17442] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 955.736264][T17442] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 955.754088][T17442] usb 4-1: Product: syz [ 955.758936][T17442] usb 4-1: Manufacturer: syz [ 955.763762][T17442] usb 4-1: SerialNumber: syz [ 955.774187][T17442] usb 4-1: config 0 descriptor?? [ 956.024088][T17442] usb 4-1: USB disconnect, device number 8 [ 956.225485][T18338] kvm: user requested TSC rate below hardware speed [ 956.240777][T18338] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 956.294404][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 956.493233][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 956.505115][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.521677][ T9] usb 1-1: config 0 descriptor?? [ 956.544652][ T5096] Bluetooth: hci1: Malformed Event: 0x2f [ 956.747849][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 956.763219][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 956.782179][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 956.848127][ T9] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 956.870994][ T9] [drm] Initialized udl on minor 2 [ 956.882298][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 956.891176][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 956.899106][ T784] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 956.927372][ T9] usb 1-1: USB disconnect, device number 29 [ 956.945998][ T784] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 957.130505][T18362] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.3392'. [ 957.205348][T18364] fuse: Unknown parameter 'user_i00000000000000000000' [ 957.280122][T18366] random: crng reseeded on system resumption [ 957.392875][T17442] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 957.617973][T17442] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 957.660176][T17442] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 957.672664][T17442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.697240][T18360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 957.705007][T18360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 957.924478][ T9975] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 958.124650][T17442] usb 4-1: USB disconnect, device number 9 [ 958.146181][ T9975] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 958.170822][ T9975] usb 1-1: config 0 has no interfaces? [ 958.181821][ T29] audit: type=1400 audit(1719833766.167:625): avc: denied { map } for pid=18367 comm="syz.1.3395" path="socket:[68204]" dev="sockfs" ino=68204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 958.190943][ T9975] usb 1-1: config 0 has no interfaces? [ 958.243581][ T9975] usb 1-1: config 0 has no interfaces? [ 958.252445][ T29] audit: type=1400 audit(1719833766.167:626): avc: denied { read } for pid=18367 comm="syz.1.3395" path="socket:[68204]" dev="sockfs" ino=68204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 958.266370][ T9975] usb 1-1: config 0 has no interfaces? [ 958.300567][ T9975] usb 1-1: config 0 has no interfaces? [ 958.311001][ T9975] usb 1-1: config 0 has no interfaces? [ 958.323405][ T9975] usb 1-1: config 0 has no interfaces? [ 958.333102][ T9975] usb 1-1: config 0 has no interfaces? [ 958.349311][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 958.351650][ T9975] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 958.378052][ T9975] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 958.401708][ T9975] usb 1-1: Product: syz [ 958.413757][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3400'. [ 958.424022][ T9975] usb 1-1: Manufacturer: syz [ 958.429196][ T9975] usb 1-1: SerialNumber: syz [ 958.434662][ T5096] Bluetooth: hci1: command tx timeout [ 958.448859][ T9975] usb 1-1: config 0 descriptor?? [ 958.466317][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 958.674762][T17442] usb 1-1: USB disconnect, device number 30 [ 958.984468][ T29] audit: type=1400 audit(1719833766.957:627): avc: denied { read } for pid=18403 comm="syz.3.3406" path="socket:[68251]" dev="sockfs" ino=68251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 959.174651][ T9975] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 959.445849][ T9975] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 959.512340][ T9975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.657324][ T9975] usb 3-1: config 0 descriptor?? [ 959.816603][ T29] audit: type=1400 audit(1719833767.807:628): avc: denied { ioctl } for pid=18413 comm="syz.0.3408" path="socket:[68266]" dev="sockfs" ino=68266 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 959.921563][ T9975] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 959.964015][ T9975] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 959.978037][ T9975] [drm:udl_init] *ERROR* Selecting channel failed [ 960.019233][ T9975] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 960.027316][ T9975] [drm] Initialized udl on minor 2 [ 960.033606][ T9975] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 960.053403][ T9975] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 960.081880][ T5134] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 960.101550][ T9975] usb 3-1: USB disconnect, device number 19 [ 960.124657][ T5134] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 960.434568][ T5092] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 960.434606][ T5096] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 960.454765][ T5096] Bluetooth: hci1: Injecting HCI hardware error event [ 960.463656][ T5096] Bluetooth: hci1: hardware error 0x00 [ 960.914569][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 960.927070][ T5092] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 960.939737][ T5092] usb 2-1: config 0 has no interface number 0 [ 960.946130][ T5092] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.960381][ T5092] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 960.970786][ T5092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.005685][ T5092] usb 2-1: config 0 descriptor?? [ 961.039982][ T5092] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 961.944379][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 962.156653][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 962.191212][ T9] usb 1-1: config 0 has no interfaces? [ 962.224142][ T9] usb 1-1: config 0 has no interfaces? [ 962.259518][ T9] usb 1-1: config 0 has no interfaces? [ 962.274361][ T9] usb 1-1: config 0 has no interfaces? [ 962.303901][ T9] usb 1-1: config 0 has no interfaces? [ 962.345094][ T9] usb 1-1: config 0 has no interfaces? [ 962.365582][ T9] usb 1-1: config 0 has no interfaces? [ 962.373507][ T9] usb 1-1: config 0 has no interfaces? [ 962.449363][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 962.521308][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 962.555962][ T5096] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 962.644091][ T9] usb 1-1: Product: syz [ 962.733788][ T9] usb 1-1: Manufacturer: syz [ 962.824352][ T9] usb 1-1: SerialNumber: syz [ 962.861589][ T5092] usb 2-1: USB disconnect, device number 18 [ 962.894164][ T9] usb 1-1: config 0 descriptor?? [ 962.935426][ T5092] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 963.223495][ T9] usb 1-1: USB disconnect, device number 31 [ 963.544726][ T5092] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 963.883795][ T5092] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 963.893791][ T5092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.907845][ T5092] usb 5-1: config 0 descriptor?? [ 964.311823][ T5092] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 964.331527][ T5092] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 964.340811][ T5092] [drm:udl_init] *ERROR* Selecting channel failed [ 964.360540][ T5092] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 964.368322][ T5092] [drm] Initialized udl on minor 2 [ 964.378666][ T5092] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 964.400246][ T5092] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 964.440751][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 964.476384][ T5092] usb 5-1: USB disconnect, device number 16 [ 964.551735][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 965.193400][T18496] netlink: 'syz.1.3437': attribute type 10 has an invalid length. [ 965.350617][T18496] team0: Port device netdevsim0 removed [ 965.833196][T18496] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 967.134427][ T5134] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 967.446652][ T5134] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 967.459742][ T5134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.487745][ T5134] usb 3-1: config 0 descriptor?? [ 967.713659][ T5134] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 967.742469][ T5134] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 967.782434][ T5134] [drm:udl_init] *ERROR* Selecting channel failed [ 967.831870][ T5134] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 967.869798][ T5134] [drm] Initialized udl on minor 2 [ 967.896160][ T5134] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 967.921979][ T5134] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 967.940035][T17442] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 967.960025][ T5134] usb 3-1: USB disconnect, device number 20 [ 968.227985][T17442] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 968.424421][ T5092] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 968.881487][ T5092] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 968.970992][ T5092] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 969.021845][ T5092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.121800][T18546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 969.230747][T18546] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 970.015099][T18574] tc_dump_action: action bad kind [ 970.101112][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 970.753354][T18584] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3466'. [ 971.048771][ T5092] usb 2-1: USB disconnect, device number 19 [ 971.206274][ T5134] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 971.412615][ T5134] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 971.432126][ T5134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.457812][ T5134] usb 4-1: config 0 descriptor?? [ 971.695592][ T5134] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 971.727493][ T5134] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 971.766910][ T5134] [drm:udl_init] *ERROR* Selecting channel failed [ 971.889814][ T5134] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 971.938586][ T5134] [drm] Initialized udl on minor 2 [ 972.077947][ T5134] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 972.305355][ T5134] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 972.504553][ T5084] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 972.514849][ T5134] usb 4-1: USB disconnect, device number 10 [ 972.575479][ T5084] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 972.640428][ T5084] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 973.102255][T18609] tc_dump_action: action bad kind [ 973.289034][T18613] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3478'. [ 973.318840][ T29] audit: type=1400 audit(1719833781.307:629): avc: denied { module_request } for pid=18614 comm="syz.1.3481" kmod="net-pf-2-proto-2-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 973.539103][T18623] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 974.175587][ T784] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 975.041239][ T784] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 975.074096][ T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.082647][T12028] Bluetooth: hci3: command 0x0406 tx timeout [ 975.117652][ T784] usb 3-1: config 0 descriptor?? [ 975.248909][ T29] audit: type=1400 audit(1719833783.227:630): avc: denied { create } for pid=18648 comm="syz.1.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 975.274751][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 975.333281][ T784] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 975.342388][ T784] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 975.351216][ T784] [drm:udl_init] *ERROR* Selecting channel failed [ 975.381913][ T784] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 975.394973][ T784] [drm] Initialized udl on minor 2 [ 975.405928][ T784] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 975.421736][ T784] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 975.432249][T18655] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3493'. [ 975.445920][ T5136] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 975.454979][ T784] usb 3-1: USB disconnect, device number 21 [ 975.462169][ T5136] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 975.496448][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 975.517538][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 975.530513][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.565842][T18644] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 975.575317][T18644] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 975.941453][ T9975] usb 4-1: USB disconnect, device number 11 [ 977.145506][ T29] audit: type=1400 audit(1719833785.127:631): avc: denied { create } for pid=18680 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 977.704381][ T29] audit: type=1400 audit(1719833785.457:632): avc: denied { write } for pid=18680 comm="syz.1.3500" path="socket:[70738]" dev="sockfs" ino=70738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 978.280564][T18694] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3505'. [ 978.540384][T18702] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 978.576506][T18702] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.3507'. [ 978.614874][T18702] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 978.641081][T18702] netlink: 'syz.4.3507': attribute type 2 has an invalid length. [ 978.709094][T18703] kvm: kvm [18699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xa2 [ 978.754780][T18703] kvm: kvm [18699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4081 [ 978.772097][T18703] kvm: kvm [18699]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4001 [ 980.202744][T18737] fuse: Bad value for 'fd' [ 980.342598][T18741] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3519'. [ 980.747665][T18747] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20001 [ 982.875063][T18770] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3530'. [ 982.964066][ T9975] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 983.143079][T18780] netlink: 'syz.4.3529': attribute type 3 has an invalid length. [ 983.170588][T18780] netlink: 46 bytes leftover after parsing attributes in process `syz.4.3529'. [ 984.304217][ T9975] usb 1-1: Using ep0 maxpacket: 8 [ 984.318983][ T9975] usb 1-1: no configurations [ 984.323759][ T9975] usb 1-1: can't read configurations, error -22 [ 984.474461][ T9975] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 984.694817][ T9975] usb 1-1: Using ep0 maxpacket: 8 [ 984.707999][ T9975] usb 1-1: no configurations [ 984.712602][ T9975] usb 1-1: can't read configurations, error -22 [ 984.747578][ T9975] usb usb1-port1: attempt power cycle [ 985.174606][ T9975] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 985.260548][ T9975] usb 1-1: Using ep0 maxpacket: 8 [ 985.293641][ T9975] usb 1-1: no configurations [ 985.352711][ T9975] usb 1-1: can't read configurations, error -22 [ 985.626096][ T9975] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 985.728424][ T9975] usb 1-1: device descriptor read/8, error -71 [ 985.884709][T18813] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.3541'. [ 985.885402][ T9975] usb usb1-port1: unable to enumerate USB device [ 985.994335][T18817] IPv6: Can't replace route, no match found [ 986.343550][T18823] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3542'. [ 987.904375][ T784] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 988.104380][ T784] usb 4-1: Using ep0 maxpacket: 8 [ 988.112129][ T784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.142828][ T784] usb 4-1: config 0 has no interfaces? [ 988.163085][ T784] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 988.184189][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.227505][ T784] usb 4-1: config 0 descriptor?? [ 988.542590][ T9975] usb 4-1: USB disconnect, device number 12 [ 989.079588][T18853] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.3554'. [ 989.474905][T18857] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3557'. [ 991.144439][ T5084] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 991.164393][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 991.329563][ T5084] usb 4-1: Using ep0 maxpacket: 8 [ 991.336880][ T5084] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 991.345219][ T5084] usb 4-1: config 0 has no interface number 0 [ 991.351343][ T5084] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.362719][ T5084] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 991.372018][ T5084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.378054][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 991.391331][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.395518][ T5084] usb 4-1: config 0 descriptor?? [ 991.402852][ T9] usb 1-1: config 0 has no interfaces? [ 991.415765][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 991.423534][ T5084] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 991.425956][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 991.447708][ T9] usb 1-1: Product: syz [ 991.452039][ T9] usb 1-1: Manufacturer: syz [ 991.456950][ T9] usb 1-1: SerialNumber: syz [ 991.473383][ T9] usb 1-1: config 0 descriptor?? [ 992.093341][T18891] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3566'. [ 992.236115][ T5084] usb 1-1: USB disconnect, device number 36 [ 993.026062][ T9975] usb 4-1: USB disconnect, device number 13 [ 993.100273][ T9975] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 993.253919][T18897] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3569'. [ 993.567040][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.573926][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.764673][ T9975] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 995.938651][T18936] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3581'. [ 996.241375][ T9975] usb 3-1: Using ep0 maxpacket: 32 [ 996.256688][ T9975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.267142][ T9975] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 996.284065][ T9975] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 996.529990][ T9975] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 996.547902][ T9975] usb 3-1: Product: syz [ 996.552359][ T9975] usb 3-1: Manufacturer: syz [ 996.558512][ T9975] usb 3-1: SerialNumber: syz [ 996.615790][ T9975] usb 3-1: config 0 descriptor?? [ 997.405049][ T9] usb 3-1: USB disconnect, device number 22 [ 998.049504][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 998.082999][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 998.117908][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3585'. [ 999.167915][ T29] audit: type=1400 audit(1719833807.157:633): avc: denied { bind } for pid=18972 comm="syz.2.3592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1000.298378][T18989] input: syz1 as /devices/virtual/input/input12 [ 1002.193430][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1002.295173][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1003.059578][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1004.010548][ T9975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1004.224664][ T9975] usb 2-1: Using ep0 maxpacket: 32 [ 1004.239839][ T9975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.262714][ T9975] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.328641][ T9975] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1004.360364][ T9975] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1004.399055][ T9975] usb 2-1: Product: syz [ 1004.403269][ T9975] usb 2-1: Manufacturer: syz [ 1004.424438][ T9975] usb 2-1: SerialNumber: syz [ 1004.442922][ T9975] usb 2-1: config 0 descriptor?? [ 1004.817683][T19019] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3604'. [ 1005.172285][ T5134] usb 2-1: USB disconnect, device number 20 [ 1005.800369][T19026] netlink: 'syz.2.3606': attribute type 1 has an invalid length. [ 1005.814395][T19026] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1006.811221][T19039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3609'. [ 1006.854397][ T9975] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1007.079733][ T9975] usb 3-1: Using ep0 maxpacket: 8 [ 1007.087147][ T9975] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1007.110076][ T9975] usb 3-1: config 0 has no interface number 0 [ 1007.125837][ T9975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.309607][ T9975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.320057][ T9975] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1007.329244][ T9975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.342427][ T9975] usb 3-1: config 0 descriptor?? [ 1007.359482][ T9975] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1007.495311][T19052] input: syz1 as /devices/virtual/input/input13 [ 1008.016580][T19034] iowarrior 3-1:0.1: Error -90 while submitting URB [ 1008.411784][ T5096] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1008.483150][ T5096] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1008.700979][T17442] usb 3-1: USB disconnect, device number 23 [ 1008.726973][T17442] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1009.492214][T19066] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1009.527166][ T784] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1009.747356][ T784] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1009.774462][ T784] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1009.796933][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.839304][T19062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1009.847842][T19062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1010.230302][T17442] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1010.641431][ T784] usb 2-1: USB disconnect, device number 21 [ 1010.673527][T17442] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1010.687758][T17442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.717142][T17442] usb 3-1: config 0 descriptor?? [ 1010.778124][T19096] input: syz1 as /devices/virtual/input/input14 [ 1011.690374][T17442] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1011.724074][T17442] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1011.751096][T17442] [drm:udl_init] *ERROR* Selecting channel failed [ 1011.869197][T17442] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1011.917121][T17442] [drm] Initialized udl on minor 2 [ 1011.942928][T17442] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1011.966114][T17442] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1012.013354][ T9975] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1012.032058][T17442] usb 3-1: USB disconnect, device number 24 [ 1012.052456][ T9975] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1012.059190][ T5084] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1012.161965][T19112] syz.0.3633: attempt to access beyond end of device [ 1012.161965][T19112] md17: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1012.294892][ T5084] usb 4-1: Using ep0 maxpacket: 8 [ 1012.410978][ T5084] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.614821][ T5084] usb 4-1: config 0 has no interface number 0 [ 1012.638524][ T5084] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.691034][ T5084] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1012.760516][ T5084] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1012.807491][ T5084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.872902][ T5084] usb 4-1: config 0 descriptor?? [ 1012.925111][ T5084] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1013.413166][T19124] input: syz1 as /devices/virtual/input/input15 [ 1014.307793][ T5084] usb 4-1: USB disconnect, device number 14 [ 1014.343777][ T5084] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 1014.514651][ T784] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1014.749398][ T784] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1014.777256][ T784] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1014.814765][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.916548][T19131] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1014.924061][T19131] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1015.824120][T19147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1015.900373][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1016.081094][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1016.220766][ T2819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.221777][ T5134] usb 1-1: USB disconnect, device number 37 [ 1016.276932][T12028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1016.292515][T12028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1016.303585][T12028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1016.319576][T12028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1016.330045][T12028] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1016.343006][T12028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1016.642101][ T2819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.734565][ T784] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1016.782490][ T2819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.924404][ T784] usb 5-1: Using ep0 maxpacket: 8 [ 1016.953237][ T784] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1016.979630][ T784] usb 5-1: config 0 has no interface number 0 [ 1017.000144][ T784] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1017.012126][ T784] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1017.025509][ T784] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1017.039644][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.051991][ T784] usb 5-1: config 0 descriptor?? [ 1017.063982][ T784] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1017.163856][ T2819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.264795][T19170] iowarrior 5-1:0.1: Error -90 while submitting URB [ 1017.938913][ T784] usb 5-1: USB disconnect, device number 17 [ 1018.322471][ T784] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 1018.434777][T12028] Bluetooth: hci0: command tx timeout [ 1018.582846][T19165] chnl_net:caif_netlink_parms(): no params data found [ 1018.929407][ T2819] bridge_slave_1: left allmulticast mode [ 1018.948718][ T2819] bridge_slave_1: left promiscuous mode [ 1018.976077][ T2819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.004651][ T2819] bridge_slave_0: left allmulticast mode [ 1019.010527][ T2819] bridge_slave_0: left promiscuous mode [ 1019.063528][ T2819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.359757][T19210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1019.479103][T19208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1019.525643][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1020.148662][ T2819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.190362][ T2819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.299562][ T2819] bond0 (unregistering): Released all slaves [ 1020.524155][T12028] Bluetooth: hci0: command tx timeout [ 1020.680326][T19165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.694987][T19165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.702313][T19165] bridge_slave_0: entered allmulticast mode [ 1020.716170][T19165] bridge_slave_0: entered promiscuous mode [ 1020.986569][ T5092] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1021.005978][T19165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.256701][ T5092] usb 2-1: Using ep0 maxpacket: 8 [ 1021.298465][T19165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.401405][ T5092] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1021.463182][T19165] bridge_slave_1: entered allmulticast mode [ 1021.596552][ T5092] usb 2-1: config 0 has no interface number 0 [ 1021.623223][T19165] bridge_slave_1: entered promiscuous mode [ 1021.639518][ T5092] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1021.742981][ T5092] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1021.807242][ T5092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.867270][ T5092] usb 2-1: config 0 descriptor?? [ 1021.890193][ T5092] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1022.103011][T19165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.186241][T19165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.281968][ T2819] hsr_slave_0: left promiscuous mode [ 1022.334786][ T2819] hsr_slave_1: left promiscuous mode [ 1022.342733][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.356436][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.376176][ T2819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.403485][ T2819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.484740][ T2819] veth1_macvtap: left promiscuous mode [ 1022.490440][ T2819] veth0_macvtap: left promiscuous mode [ 1022.519591][ T2819] veth1_vlan: left promiscuous mode [ 1022.544304][ T2819] veth0_vlan: left promiscuous mode [ 1022.591624][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1022.595517][T12028] Bluetooth: hci0: command tx timeout [ 1022.674782][T19285] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1022.722319][ T5136] usb 2-1: USB disconnect, device number 22 [ 1022.730017][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1022.761650][ T5136] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1022.784655][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1024.097629][ T2819] team0 (unregistering): Port device team_slave_1 removed [ 1024.141584][ T2819] team0 (unregistering): Port device team_slave_0 removed [ 1024.679405][T12028] Bluetooth: hci0: command tx timeout [ 1025.030017][T19165] team0: Port device team_slave_0 added [ 1025.070368][T19165] team0: Port device team_slave_1 added [ 1025.366511][T19165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.373484][T19165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.509395][T19165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.556206][T19165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.563191][T19165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.601020][ T5134] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1025.656288][T19165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.744430][T19323] kvm: user requested TSC rate below hardware speed [ 1025.796046][ T5134] usb 2-1: Using ep0 maxpacket: 8 [ 1025.813863][ T5134] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1025.832392][ T5134] usb 2-1: config 0 has no interface number 0 [ 1025.854916][T19165] hsr_slave_0: entered promiscuous mode [ 1025.861701][ T5134] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.878369][T19165] hsr_slave_1: entered promiscuous mode [ 1025.891580][ T5134] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1025.928204][ T5134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.955935][ T5134] usb 2-1: config 0 descriptor?? [ 1025.978133][ T5134] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1026.203372][ T2819] IPVS: stop unused estimator thread 0... [ 1026.841738][ T9975] usb 2-1: USB disconnect, device number 23 [ 1026.872276][ T9975] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1026.913848][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1027.006057][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1027.212798][T19352] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1027.556816][T19165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1027.589902][T19165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1027.623723][T19165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1027.670425][T19165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1028.132130][T19165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.232531][T19165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.301377][T17442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.308645][T17442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.378042][T17442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.385325][T17442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.734530][ T5092] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1028.911033][T19165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.939855][ T5092] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1028.960114][ T5092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.983545][ T5092] usb 2-1: config 0 descriptor?? [ 1029.005106][ T5134] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1029.057138][T19165] veth0_vlan: entered promiscuous mode [ 1029.118869][T19165] veth1_vlan: entered promiscuous mode [ 1029.215238][ T5134] usb 5-1: Using ep0 maxpacket: 8 [ 1029.218410][ T5092] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1029.247287][ T5134] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1029.254418][ T5092] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1029.266777][T19165] veth0_macvtap: entered promiscuous mode [ 1029.278383][ T5134] usb 5-1: config 0 has no interface number 0 [ 1029.283934][ T5092] [drm:udl_init] *ERROR* Selecting channel failed [ 1029.303328][T19165] veth1_macvtap: entered promiscuous mode [ 1029.323167][ T5134] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.339716][ T5092] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1029.345033][ T5134] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1029.386046][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.388701][ T5092] [drm] Initialized udl on minor 2 [ 1029.435877][ T5134] usb 5-1: config 0 descriptor?? [ 1029.450296][ T5092] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1029.452800][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.477038][ T5092] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1029.493100][ T5136] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1029.519946][ T5136] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1029.530552][ T5134] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1029.534690][ T5092] usb 2-1: USB disconnect, device number 24 [ 1029.541837][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.568814][ T5136] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1029.577726][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.628544][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.649668][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.667243][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.691541][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1029.726979][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.757376][T19165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.783539][T12028] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1029.829507][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.846121][T12028] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1029.854539][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.868102][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.893548][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.952127][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1029.982518][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.021365][T19165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.060415][T19165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.063041][T19437] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1030.077778][T19165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.167020][T19165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.203759][T19165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.271902][T19165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.330045][T17442] usb 5-1: USB disconnect, device number 18 [ 1030.347434][T17442] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 1030.367815][T19165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.954853][T19465] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3725'. [ 1030.998025][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.043364][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.200563][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.239238][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.794538][ T785] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1032.839281][T12028] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1032.847145][T12028] Bluetooth: Unexpected continuation frame (len 18) [ 1032.894777][ T5092] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1032.988252][ T785] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1033.025204][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.069434][ T785] usb 5-1: config 0 descriptor?? [ 1033.088291][ T5092] usb 1-1: Using ep0 maxpacket: 8 [ 1033.102904][ T5092] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1033.134495][ T5092] usb 1-1: config 0 has no interface number 0 [ 1033.160864][ T5092] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1033.203456][ T5092] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1033.225037][ T5092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.255274][ T5092] usb 1-1: config 0 descriptor?? [ 1033.266100][T19507] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1033.322237][ T5092] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1033.325789][ T785] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1033.356155][ T29] audit: type=1400 audit(1719833841.337:634): avc: denied { connect } for pid=19520 comm="syz.3.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1033.391948][ T785] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1033.421673][ T785] [drm:udl_init] *ERROR* Selecting channel failed [ 1033.499640][ T785] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 1033.532229][ T785] [drm] Initialized udl on minor 2 [ 1033.558501][ T785] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.598050][ T785] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.641488][ T5084] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.642435][ T5092] usb 1-1: USB disconnect, device number 38 [ 1033.670840][ T785] usb 5-1: USB disconnect, device number 19 [ 1033.688033][ T5084] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.751534][ T5092] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 1036.153588][T12028] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1036.219506][T12028] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1036.511523][T19565] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1037.102541][ T9975] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1037.546133][ T9975] usb 3-1: Using ep0 maxpacket: 8 [ 1037.563683][ T9975] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.311104][ T9975] usb 3-1: config 0 has no interface number 0 [ 1038.322809][ T9975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1038.335230][ T9975] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1038.344671][ T9975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.370263][ T9975] usb 3-1: config 0 descriptor?? [ 1038.395109][ T9975] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1038.706552][T19611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3761'. [ 1039.214451][ T5092] usb 3-1: USB disconnect, device number 25 [ 1039.250445][ T5092] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 1039.335357][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1039.391591][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1039.612074][T19621] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1042.494451][ T5092] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1042.734389][ T5092] usb 1-1: Using ep0 maxpacket: 8 [ 1042.751607][ T5092] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1042.774216][ T5092] usb 1-1: config 0 has no interface number 0 [ 1042.780609][ T5092] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1042.801675][ T5092] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1042.873637][ T5092] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.907709][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1042.938070][ T5092] usb 1-1: config 0 descriptor?? [ 1042.980401][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1043.011753][ T5092] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1043.799168][T19677] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1045.120687][ T784] usb 1-1: USB disconnect, device number 39 [ 1045.942262][ T784] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 1046.009763][ T29] audit: type=1400 audit(1719833853.997:635): avc: denied { connect } for pid=19700 comm="syz.3.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1047.951888][T12028] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1047.966138][T12028] Bluetooth: Unexpected continuation frame (len 18) [ 1048.193125][T19730] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1048.500029][T19741] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3806'. [ 1048.514719][ T9975] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1048.764624][ T9975] usb 2-1: Using ep0 maxpacket: 8 [ 1048.777307][T19747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1048.778918][ T9975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1048.800916][ T9975] usb 2-1: config 0 has no interface number 0 [ 1048.810040][ T9975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1048.821253][ T9975] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1048.842286][ T9975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.870163][ T9975] usb 2-1: config 0 descriptor?? [ 1048.885526][ T9975] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1049.800661][T19759] block nbd2: NBD_DISCONNECT [ 1050.291284][ T784] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1050.415106][ T9975] usb 2-1: USB disconnect, device number 25 [ 1050.479858][ T9975] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 1051.484417][ T784] usb 1-1: Using ep0 maxpacket: 16 [ 1051.493781][ T784] usb 1-1: config 0 has no interfaces? [ 1051.504936][ T784] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1051.514122][ T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.525145][ T29] audit: type=1400 audit(1719833859.507:636): avc: denied { mount } for pid=19768 comm="syz.3.3816" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1051.525385][ T784] usb 1-1: Product: syz [ 1051.551140][ T784] usb 1-1: Manufacturer: syz [ 1051.556171][ T784] usb 1-1: SerialNumber: syz [ 1051.585756][ T784] usb 1-1: config 0 descriptor?? [ 1051.762539][T19785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3820'. [ 1051.963307][T12028] Bluetooth: Unexpected start frame (len 0) [ 1052.060409][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1052.277960][T19799] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3822'. [ 1052.382940][T19789] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1052.394716][T19792] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1053.205836][ T5092] usb 1-1: USB disconnect, device number 40 [ 1054.920744][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.925390][ T5136] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1054.930767][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.973707][T19824] No such timeout policy "syz0" [ 1055.174868][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 1055.206946][ T5136] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1055.229584][ T5136] usb 5-1: config 0 has no interface number 0 [ 1055.261189][ T5136] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1055.291932][ T5136] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1055.303844][T19829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1055.352013][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.410078][ T5136] usb 5-1: config 0 descriptor?? [ 1055.463176][ T5136] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1055.887558][T19837] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1055.913522][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1055.982083][T12028] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1056.105870][T19841] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1056.339998][ T5084] usb 5-1: USB disconnect, device number 20 [ 1056.438293][ T5084] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 1056.528272][T19845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.746489][T19848] binder: 19846:19848 ioctl c0306201 200001c0 returned -14 [ 1056.763494][T19845] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1058.529616][T19866] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3846'. [ 1058.637237][T19871] No such timeout policy "syz0" [ 1059.036348][T19876] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3850'. [ 1059.446869][ T5136] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1059.774894][ T5136] usb 4-1: Using ep0 maxpacket: 8 [ 1059.782047][T19886] binder: 19885:19886 ioctl c0306201 200001c0 returned -14 [ 1059.880951][ T5136] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1059.904556][ T5136] usb 4-1: config 0 has no interface number 0 [ 1059.921258][ T5136] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1059.953043][ T5136] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1059.973259][ T29] audit: type=1804 audit(1719833867.957:637): pid=19891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3855" name="/root/syzkaller.Etwxgt/165/bus" dev="sda1" ino=2040 res=1 errno=0 [ 1059.996655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.027907][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.231868][ T5136] usb 4-1: config 0 descriptor?? [ 1061.040430][ T29] audit: type=1400 audit(1719833868.007:638): avc: denied { watch watch_reads } for pid=19895 comm="syz.0.3858" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1061.127614][T19900] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1061.148370][ T5136] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1061.174374][ T29] audit: type=1400 audit(1719833868.287:639): avc: denied { nlmsg_read } for pid=19895 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1061.217008][T19900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1061.633051][ T5084] usb 4-1: USB disconnect, device number 15 [ 1061.662646][ T5084] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 1062.870897][T19920] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3867'. [ 1063.133230][T19922] binder: 19921:19922 ioctl c0306201 200001c0 returned -14 [ 1063.624892][ T29] audit: type=1326 audit(1719833871.577:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19925 comm="syz.3.3869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x0 [ 1064.248057][T19909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.253565][ T29] audit: type=1804 audit(1719833872.237:641): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3871" name="/root/syzkaller.3Evf10/152/bus" dev="sda1" ino=2029 res=1 errno=0 [ 1064.434783][T19909] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1066.286053][ T29] audit: type=1326 audit(1719833874.267:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19965 comm="syz.3.3880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab11575b99 code=0x0 [ 1066.321681][T19964] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1066.852185][T19973] binder: 19971:19973 ioctl c0306201 200001c0 returned -14 [ 1067.099168][T19975] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1067.723411][ T29] audit: type=1804 audit(1719833875.707:643): pid=19985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.3884" name="/root/syzkaller.Etwxgt/171/bus" dev="sda1" ino=2052 res=1 errno=0 [ 1067.786923][T19984] No such timeout policy "syz0" [ 1068.964975][T19998] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3891'. [ 1069.249897][T20003] binder: 20002:20003 ioctl c0306201 200001c0 returned -14 [ 1069.522700][T20010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.645170][T20010] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1069.750693][T20015] netlink: 'syz.2.3893': attribute type 3 has an invalid length. [ 1069.758702][T20015] netlink: 'syz.2.3893': attribute type 1 has an invalid length. [ 1071.689009][T20036] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1071.755881][T20039] binder: 20038:20039 ioctl c0306201 200001c0 returned -14 [ 1073.449740][T20066] netlink: 'syz.1.3909': attribute type 3 has an invalid length. [ 1073.457741][T20066] netlink: 'syz.1.3909': attribute type 1 has an invalid length. [ 1073.548208][ T9975] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1073.938262][ T9975] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1073.988453][ T9975] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1074.054379][ T9975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.100474][T20059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1074.152107][T20059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1074.429752][ T29] audit: type=1400 audit(1719833882.407:644): avc: denied { write } for pid=20071 comm="syz.0.3914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1074.637773][T17442] usb 4-1: USB disconnect, device number 16 [ 1074.874698][ T9975] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1075.114559][ T9975] usb 3-1: Using ep0 maxpacket: 32 [ 1075.127612][ T9975] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1075.146684][T20092] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1075.166295][ T9975] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1075.186004][T20094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1075.189211][ T9975] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1075.226018][T20094] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1075.242240][ T9975] usb 3-1: Product: syz [ 1075.261561][ T9975] usb 3-1: Manufacturer: syz [ 1075.282482][ T9975] usb 3-1: SerialNumber: syz [ 1075.312864][ T9975] usb 3-1: config 0 descriptor?? [ 1075.336312][T20082] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1078.168372][T20118] netlink: 'syz.3.3926': attribute type 3 has an invalid length. [ 1078.176239][T20118] netlink: 'syz.3.3926': attribute type 1 has an invalid length. [ 1078.550936][ T5092] usb 3-1: USB disconnect, device number 26 [ 1079.402557][T20134] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3932'. [ 1080.356276][T20145] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1081.333540][T20153] Bluetooth: MGMT ver 1.22 [ 1081.391434][T20157] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1081.437415][T20157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3940'. [ 1082.118563][T20168] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.212133][T20168] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1082.898841][T20178] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1083.694417][T20188] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1083.726514][T20188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3951'. [ 1084.212509][ T9975] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1084.404470][ T9975] usb 5-1: Using ep0 maxpacket: 32 [ 1084.446520][ T9975] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1084.469911][ T9975] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1084.482960][ T9975] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1084.514539][ T9975] usb 5-1: Product: syz [ 1084.518750][ T9975] usb 5-1: Manufacturer: syz [ 1084.564466][ T9975] usb 5-1: SerialNumber: syz [ 1084.610951][ T9975] usb 5-1: config 0 descriptor?? [ 1084.627844][T20192] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1086.031168][T20219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3961'. [ 1086.033910][T20215] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1086.147904][T20221] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1086.191437][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1086.575230][T17442] usb 5-1: USB disconnect, device number 21 [ 1087.250447][T20238] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1088.719199][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1088.768455][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1088.808222][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1089.510628][T20269] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1090.635593][ T5136] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1091.035197][ T5136] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1091.057123][T20290] No such timeout policy "syz0" [ 1091.066520][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.081507][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.097800][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.108356][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.230386][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.239995][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.247463][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.260363][ T5136] usb 5-1: config 0 has no interfaces? [ 1091.292522][ T5136] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1091.304937][ T5136] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1091.323222][T20292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3984'. [ 1091.420069][ T5136] usb 5-1: Product: syz [ 1091.446241][ T5136] usb 5-1: Manufacturer: syz [ 1091.454222][ T5136] usb 5-1: SerialNumber: syz [ 1091.471166][ T5136] usb 5-1: config 0 descriptor?? [ 1091.802991][T17442] usb 5-1: USB disconnect, device number 22 [ 1092.255726][ T5136] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1092.455582][ T5136] usb 4-1: Using ep0 maxpacket: 32 [ 1092.477029][ T5136] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1092.521640][ T5136] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1092.540839][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1092.572145][ T5136] usb 4-1: Product: syz [ 1092.584568][ T5136] usb 4-1: Manufacturer: syz [ 1092.594463][ T29] audit: type=1400 audit(1719833900.577:645): avc: denied { read write } for pid=20298 comm="syz.4.3988" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1092.618303][ T5136] usb 4-1: SerialNumber: syz [ 1092.648267][ T5136] usb 4-1: config 0 descriptor?? [ 1092.667451][T20297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1092.684771][ T29] audit: type=1400 audit(1719833900.577:646): avc: denied { open } for pid=20298 comm="syz.4.3988" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1092.772858][ T29] audit: type=1400 audit(1719833900.607:647): avc: denied { map } for pid=20298 comm="syz.4.3988" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1092.834388][ T29] audit: type=1400 audit(1719833900.607:648): avc: denied { execute } for pid=20298 comm="syz.4.3988" path="/dev/nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1092.944759][ T29] audit: type=1400 audit(1719833900.807:649): avc: denied { ioctl } for pid=20298 comm="syz.4.3988" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1094.476997][ T5136] usb 4-1: USB disconnect, device number 17 [ 1096.236490][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1096.270596][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1096.326538][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1097.050967][T20354] 9pnet_fd: Insufficient options for proto=fd [ 1203.704286][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1203.711272][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14108/1:b..l P20356/1:b..l [ 1203.720988][ C0] rcu: (detected by 0, t=10502 jiffies, g=128785, q=264 ncpus=2) [ 1203.728788][ C0] task:syz.0.4001 state:R running task stack:27952 pid:20356 tgid:20337 ppid:16498 flags:0x00004000 [ 1203.741500][ C0] Call Trace: [ 1203.744772][ C0] [ 1203.747689][ C0] __schedule+0xf15/0x5d00 [ 1203.752101][ C0] ? hlock_class+0x4e/0x130 [ 1203.756601][ C0] ? __pfx___schedule+0x10/0x10 [ 1203.761446][ C0] ? find_held_lock+0x2d/0x110 [ 1203.766198][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 1203.771571][ C0] preempt_schedule_common+0x44/0xc0 [ 1203.776845][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1203.782048][ C0] _raw_spin_unlock+0x3e/0x50 [ 1203.786713][ C0] unmap_page_range+0xbc7/0x3f20 [ 1203.791640][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1203.797084][ C0] ? uprobe_munmap+0x20/0x570 [ 1203.801746][ C0] unmap_single_vma+0x194/0x2b0 [ 1203.806603][ C0] unmap_vmas+0x22f/0x490 [ 1203.810921][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1203.815760][ C0] ? __pfx_lock_release+0x10/0x10 [ 1203.820774][ C0] ? lru_add_drain_cpu+0x454/0x860 [ 1203.825876][ C0] exit_mmap+0x1b8/0xb20 [ 1203.830106][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1203.834860][ C0] __mmput+0x12a/0x4d0 [ 1203.838916][ C0] mmput+0x62/0x70 [ 1203.842620][ C0] do_exit+0x9b7/0x2ba0 [ 1203.846781][ C0] ? get_signal+0x8f2/0x2710 [ 1203.851355][ C0] ? __pfx_do_exit+0x10/0x10 [ 1203.855932][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1203.860951][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1203.866331][ C0] do_group_exit+0xd3/0x2a0 [ 1203.870823][ C0] get_signal+0x2616/0x2710 [ 1203.875314][ C0] ? __pfx_get_signal+0x10/0x10 [ 1203.880146][ C0] ? __pfx_do_futex+0x10/0x10 [ 1203.884828][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1203.890361][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1203.896521][ C0] syscall_exit_to_user_mode+0x14a/0x2a0 [ 1203.902228][ C0] do_syscall_64+0xda/0x250 [ 1203.906724][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.912609][ C0] RIP: 0033:0x7f9af2575b99 [ 1203.917035][ C0] RSP: 002b:00007f9af32f60f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1203.925434][ C0] RAX: fffffffffffffe00 RBX: 00007f9af2704080 RCX: 00007f9af2575b99 [ 1203.933386][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9af2704080 [ 1203.941339][ C0] RBP: 00007f9af2704078 R08: 00007f9af32f66c0 R09: 00007f9af32f66c0 [ 1203.949317][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9af2704084 [ 1203.957278][ C0] R13: 000000000000006e R14: 00007ffd39286df0 R15: 00007ffd39286ed8 [ 1203.965239][ C0] [ 1203.968242][ C0] task:syz-executor state:R running task stack:23744 pid:14108 tgid:14108 ppid:14074 flags:0x00004002 [ 1203.980059][ C0] Call Trace: [ 1203.983318][ C0] [ 1203.986235][ C0] __schedule+0xf15/0x5d00 [ 1203.990641][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1203.995393][ C0] ? mark_lock+0xb5/0xc60 [ 1203.999705][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1204.004455][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1204.009208][ C0] ? __pfx___schedule+0x10/0x10 [ 1204.014046][ C0] ? hlock_class+0x4e/0x130 [ 1204.018536][ C0] ? mark_held_locks+0x9f/0xe0 [ 1204.023286][ C0] preempt_schedule_irq+0x51/0x90 [ 1204.028319][ C0] irqentry_exit+0x36/0x90 [ 1204.032718][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1204.038682][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 1204.043972][ C0] Code: c1 05 9a ad 96 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 1204.063565][ C0] RSP: 0018:ffffc900036379b0 EFLAGS: 00000206 [ 1204.069639][ C0] RAX: dffffc0000000000 RBX: 1ffff920006c6f38 RCX: 00000000748d1e62 [ 1204.077594][ C0] RDX: 0000000000000001 RSI: ffffffff8b2cb1e0 RDI: ffffffff8b8ff7c0 [ 1204.085563][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff284ce58 [ 1204.093517][ C0] R10: ffffffff942672c7 R11: 0000000000000004 R12: 0000000000000000 [ 1204.101472][ C0] R13: 0000000000000000 R14: ffffffff8dbb1620 R15: 0000000000000000 [ 1204.109432][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1204.114452][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 1204.119892][ C0] ? ext4_da_release_space+0x25/0x570 [ 1204.125249][ C0] ext4_get_group_desc+0x148/0x570 [ 1204.130348][ C0] ? ext4_get_group_desc+0x142/0x570 [ 1204.135616][ C0] ext4_read_inode_bitmap+0x4f/0x1680 [ 1204.140972][ C0] ? fscrypt_put_encryption_info+0x38/0x80 [ 1204.146765][ C0] ext4_free_inode+0x5a1/0x1470 [ 1204.151602][ C0] ? __pfx_ext4_free_inode+0x10/0x10 [ 1204.156873][ C0] ? __ext4_journal_start_sb+0x358/0x660 [ 1204.162490][ C0] ? __ext4_journal_start_sb+0x206/0x660 [ 1204.168111][ C0] ext4_evict_inode+0xcd1/0x17d0 [ 1204.173039][ C0] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1204.178399][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1204.183754][ C0] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1204.189112][ C0] evict+0x2ed/0x6c0 [ 1204.192996][ C0] iput.part.0+0x5a8/0x7f0 [ 1204.197399][ C0] ? __pfx_ext4_drop_inode+0x10/0x10 [ 1204.202668][ C0] iput+0x5c/0x80 [ 1204.206290][ C0] vfs_rmdir+0x487/0x690 [ 1204.210518][ C0] do_rmdir+0x3a2/0x410 [ 1204.214660][ C0] ? __pfx_do_rmdir+0x10/0x10 [ 1204.219323][ C0] ? strncpy_from_user+0x213/0x300 [ 1204.224418][ C0] __x64_sys_unlinkat+0xf3/0x130 [ 1204.229342][ C0] do_syscall_64+0xcd/0x250 [ 1204.233838][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.239719][ C0] RIP: 0033:0x7fab11575217 [ 1204.244112][ C0] RSP: 002b:00007ffc01a73ad8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 1204.252523][ C0] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fab11575217 [ 1204.260478][ C0] RDX: 0000000000000200 RSI: 00007ffc01a74c40 RDI: 00000000ffffff9c [ 1204.268457][ C0] RBP: 00007fab115e364a R08: 0000000000000000 R09: 0000000000000000 [ 1204.276414][ C0] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc01a74c40 [ 1204.284390][ C0] R13: 00007fab115e364a R14: 000000000010bf90 R15: 00007ffc01a74c80 [ 1204.292449][ C0] [ 1204.295451][ C0] rcu: rcu_preempt kthread starved for 10514 jiffies! g128785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1204.306732][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1204.316683][ C0] rcu: RCU grace-period kthread stack dump: [ 1204.322548][ C0] task:rcu_preempt state:R running task stack:27680 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1204.334261][ C0] Call Trace: [ 1204.337552][ C0] [ 1204.340466][ C0] __schedule+0xf15/0x5d00 [ 1204.344869][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1204.350060][ C0] ? __pfx___schedule+0x10/0x10 [ 1204.354902][ C0] ? schedule+0x298/0x350 [ 1204.359217][ C0] ? __pfx_lock_release+0x10/0x10 [ 1204.364231][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1204.369175][ C0] ? lock_acquire+0x1b1/0x560 [ 1204.373868][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 1204.379317][ C0] schedule+0xe7/0x350 [ 1204.383368][ C0] schedule_timeout+0x136/0x2a0 [ 1204.388206][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1204.393567][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1204.398859][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1204.404647][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 1204.410100][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1204.414871][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1204.420143][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1204.425348][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1204.431136][ C0] rcu_gp_kthread+0x271/0x380 [ 1204.435799][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.440980][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1204.446167][ C0] ? __kthread_parkme+0x148/0x220 [ 1204.451197][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1204.456421][ C0] kthread+0x2c1/0x3a0 [ 1204.460487][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1204.465674][ C0] ? __pfx_kthread+0x10/0x10 [ 1204.470253][ C0] ret_from_fork+0x45/0x80 [ 1204.474663][ C0] ? __pfx_kthread+0x10/0x10 [ 1204.479241][ C0] ret_from_fork_asm+0x1a/0x30 [ 1204.483993][ C0] [ 1204.486996][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1204.493308][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1204.498507][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20