last executing test programs: 13m16.216702763s ago: executing program 2 (id=26873): r0 = socket$inet(0xa, 0x801, 0x84) r1 = io_uring_setup(0x3b84, &(0x7f0000000140)={0x0, 0x1ab5, 0x100, 0x3, 0x131}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0], 0x1) 13m16.187313084s ago: executing program 2 (id=26874): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0xaa10, @loopback, 0x7}}, 0x7, 0xfff, 0x8, 0x7ff, 0xffe}, &(0x7f0000000040)=0x98) 13m16.12122675s ago: executing program 2 (id=26875): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 13m15.984950155s ago: executing program 2 (id=26876): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 13m15.967742747s ago: executing program 2 (id=26877): unshare(0x24020400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x7212c0, 0x0) preadv(r0, 0x0, 0x0, 0xffff7ffb, 0xa) 13m15.368848887s ago: executing program 2 (id=26882): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 13m14.9124207s ago: executing program 32 (id=26882): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 12m21.133834758s ago: executing program 1 (id=27880): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x12, r0, 0x0) 12m21.063715958s ago: executing program 1 (id=27882): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0xfffffffc, 0x4}, 0x10) write(r0, &(0x7f0000000180)="240000001e005f0214fffffffffffff8070000002100000000002100050009000d000000", 0x24) 12m20.982644146s ago: executing program 1 (id=27884): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003b40)=0x4000000) close(0x4) 12m20.870604829s ago: executing program 1 (id=27886): creat(&(0x7f0000000c40)='./file0\x00', 0x100) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) 12m20.813682601s ago: executing program 1 (id=27888): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 12m20.593080956s ago: executing program 1 (id=27890): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000a40)=0x10001, 0x4) 12m20.37794836s ago: executing program 33 (id=27890): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000a40)=0x10001, 0x4) 6.245049224s ago: executing program 3 (id=42082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x20040000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 6.141555646s ago: executing program 3 (id=42084): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 6.029816415s ago: executing program 3 (id=42089): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 5.805688924s ago: executing program 3 (id=42095): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) 5.711407968s ago: executing program 3 (id=42097): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de0e0203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="200804"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4.755390789s ago: executing program 0 (id=42119): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000140)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 4.705419951s ago: executing program 0 (id=42120): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x2, r0, 0x0, 0xfffffffffffffffd) 4.609094139s ago: executing program 0 (id=42123): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x1b, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) 4.546432055s ago: executing program 0 (id=42124): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0xfffffffe, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pause() 3.620039678s ago: executing program 0 (id=42140): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.720457706s ago: executing program 0 (id=42152): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f0000000300)="671f4f93cfa8caff4db5e70f45fcc858c605b74e6ce2eef88580ac8c7de8662d2ed62e58b20b57b8433e2d4f6b0f83b6a31f259bc0fd82f441") 2.59498961s ago: executing program 3 (id=42155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000400)=[{0x7ff, 0x4001, 0x0, 0x0}], 0x1}) 1.202421464s ago: executing program 4 (id=42177): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x108, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0x1c, 0x417]}, @CTA_SEQ_ADJ_ORIG={0x4}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xda}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1.098877936s ago: executing program 4 (id=42179): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfd87, 0x4) 1.062991417s ago: executing program 4 (id=42180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0x3}]}) 978.908128ms ago: executing program 5 (id=42182): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x50) 900.671839ms ago: executing program 5 (id=42184): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x120, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA={0xa}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xf784}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xe}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8914}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}, @filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff7f}}]}, @TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 825.031275ms ago: executing program 5 (id=42186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x8e}]}) 755.125132ms ago: executing program 4 (id=42187): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0x40085112, &(0x7f0000000180)=0x8) r1 = dup(r0) readv(r1, &(0x7f00000034c0)=[{&(0x7f0000000280)=""/4096, 0x4}, {0x0, 0x4}], 0x2) 745.933762ms ago: executing program 6 (id=42188): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './cgroup'}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/133, 0x85}], 0x1, 0x2, 0x0) 668.479299ms ago: executing program 6 (id=42189): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 664.254802ms ago: executing program 5 (id=42190): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_restrict_self(0xffffffffffffffff, 0x0) 589.950046ms ago: executing program 4 (id=42191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b, 0x0, 0x2}]}) 587.035215ms ago: executing program 6 (id=42192): unshare(0x22020600) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) 526.875633ms ago: executing program 6 (id=42193): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create(0x7) 169.041082ms ago: executing program 6 (id=42194): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 153.283714ms ago: executing program 5 (id=42195): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000380), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x2cc}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) 75.035413ms ago: executing program 5 (id=42196): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x109200, 0x25) fcntl$setlease(r0, 0x400, 0x0) 42.555148ms ago: executing program 6 (id=42197): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xe00, 0x0, 0x8, 0x85}, &(0x7f0000000080)=0x10) 0s ago: executing program 4 (id=42198): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): roduct: syz [ 1864.834693][T18378] usb 5-1: Manufacturer: syz [ 1864.841958][T18378] usb 5-1: SerialNumber: syz [ 1864.859388][T18378] usb 5-1: config 0 descriptor?? [ 1865.017337][T18376] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 1865.073680][T18378] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1865.085497][T18378] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1865.098068][T18378] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1865.108222][T18378] usb 5-1: media controller created [ 1865.121137][T18378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1865.186365][T18376] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 1865.200439][T18376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.210558][T18376] usb 6-1: Product: syz [ 1865.214945][T18376] usb 6-1: Manufacturer: syz [ 1865.220120][T18376] usb 6-1: SerialNumber: syz [ 1865.228089][T18376] usb 6-1: config 0 descriptor?? [ 1865.241062][T18376] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 1865.250712][T18376] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1865.258856][T18376] dvb-usb: bulk message failed: -22 (2/0) [ 1865.269491][T18376] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1865.283963][T18378] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1865.294394][T18376] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 error while loading driver (-19) [ 1865.346434][T18378] usb 5-1: USB disconnect, device number 64 [ 1865.454649][T18174] usb 6-1: USB disconnect, device number 115 [ 1865.822746][ T5934] netlink: 'syz.0.39631': attribute type 2 has an invalid length. [ 1865.845183][ T5934] : entered promiscuous mode [ 1865.856067][ T5934] netlink: 'syz.0.39631': attribute type 2 has an invalid length. [ 1865.864868][ T5934] : left promiscuous mode [ 1865.882795][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1865.882812][ T29] audit: type=1326 audit(1773785202.436:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1865.918709][ T29] audit: type=1326 audit(1773785202.436:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1865.944576][ T29] audit: type=1326 audit(1773785202.436:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1865.983523][ T29] audit: type=1326 audit(1773785202.436:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1866.012043][ T29] audit: type=1326 audit(1773785202.436:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1866.043999][ T5944] netlink: 'syz.5.39634': attribute type 10 has an invalid length. [ 1866.056130][ T5944] vxcan1: entered allmulticast mode [ 1866.061655][ T29] audit: type=1326 audit(1773785202.436:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1866.061698][ T29] audit: type=1326 audit(1773785202.436:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1866.061732][ T29] audit: type=1326 audit(1773785202.436:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5937 comm="syz.4.39632" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1866.138561][ T5944] team0: Device vxcan1 is of different type [ 1866.516311][ T29] audit: type=1326 audit(1773785203.066:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.39645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1866.542826][ T29] audit: type=1326 audit(1773785203.066:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.39645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1866.770157][ T5986] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1866.776062][ T5986] dvmrp1: linktype set to 768 [ 1867.375681][ T6012] netlink: 'syz.4.39660': attribute type 2 has an invalid length. [ 1867.488153][ T6022] netlink: 'syz.4.39663': attribute type 11 has an invalid length. [ 1868.202254][ T6093] netlink: 96 bytes leftover after parsing attributes in process `syz.5.39680'. [ 1869.087390][T18378] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1869.237430][T18378] usb 6-1: Using ep0 maxpacket: 16 [ 1869.244807][T18378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1869.255873][T18378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1869.268447][T18378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1869.279595][T18378] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1869.290354][T18378] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1869.305775][T18378] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1869.315638][T18378] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1869.325120][T18378] usb 6-1: Manufacturer: syz [ 1869.333101][T18378] usb 6-1: config 0 descriptor?? [ 1869.598153][T18378] rc_core: IR keymap rc-hauppauge not found [ 1869.604914][T18378] Registered IR keymap rc-empty [ 1869.612134][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.637430][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.659258][T18378] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1869.676072][T18378] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input230 [ 1869.700786][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.717077][T18174] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1869.743210][ T6160] netlink: 136 bytes leftover after parsing attributes in process `syz.6.39700'. [ 1869.748281][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.754578][ T6160] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1869.797935][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.837999][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.868002][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.878772][T18174] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1869.889604][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1869.899984][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.909216][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1869.909248][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1869.960214][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1869.968032][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1869.975664][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.006917][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.008415][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1870.033224][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1870.051052][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1870.059484][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.075994][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.089142][T18378] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1870.108920][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1870.119570][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.130625][T18378] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1870.130651][T18378] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1870.139210][T18378] usb 6-1: USB disconnect, device number 116 [ 1870.174069][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.218177][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1870.245823][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.278288][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.305960][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1870.333561][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.359144][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.377020][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1870.386316][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.398580][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.412346][T18174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1870.422249][T18174] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1870.434380][T18174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1870.443444][T18174] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1870.454310][T18174] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1870.487293][T18174] usb 5-1: Product: syz [ 1870.494727][T18174] usb 5-1: Manufacturer: syz [ 1870.500030][T18174] usb 5-1: SerialNumber: syz [ 1870.515594][T18174] usb 5-1: config 0 descriptor?? [ 1870.532924][T18174] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1870.903763][ C1] usb 5-1: yurex_control_callback - control failed: -71 [ 1870.906535][ T6242] Failed to get privilege flags for destination (handle=0x2:0x40) [ 1870.913200][T18174] usb 5-1: USB disconnect, device number 65 [ 1870.942592][T18174] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1871.330525][ T6268] netlink: 'syz.0.39722': attribute type 1 has an invalid length. [ 1871.900199][ T6294] vivid-006: disconnect [ 1871.915869][ T6291] vivid-006: reconnect [ 1872.289059][ T6314] IPv6: NLM_F_CREATE should be specified when creating new route [ 1873.221067][ T6374] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.39763'. [ 1873.745233][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39770'. [ 1873.889670][ T6401] netlink: 'syz.3.39774': attribute type 3 has an invalid length. [ 1873.898956][ T6401] netlink: 772 bytes leftover after parsing attributes in process `syz.3.39774'. [ 1873.910234][ T6401] netlink: 'syz.3.39774': attribute type 3 has an invalid length. [ 1873.920676][ T6401] netlink: 772 bytes leftover after parsing attributes in process `syz.3.39774'. [ 1874.291131][ T6419] netlink: 212 bytes leftover after parsing attributes in process `syz.3.39781'. [ 1874.459262][ T6430] netlink: 724 bytes leftover after parsing attributes in process `syz.3.39784'. [ 1874.901628][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39794'. [ 1875.186971][ T6461] netlink: 'syz.4.39788': attribute type 33 has an invalid length. [ 1875.374257][ T6467] netlink: 14 bytes leftover after parsing attributes in process `syz.4.39788'. [ 1875.384824][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 1875.384841][ T29] audit: type=1326 audit(1773785211.936:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.447512][ T29] audit: type=1326 audit(1773785211.936:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.472025][ T29] audit: type=1326 audit(1773785211.986:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.498273][ T29] audit: type=1326 audit(1773785211.986:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.522860][ T6461] netlink: 152 bytes leftover after parsing attributes in process `syz.4.39788'. [ 1875.538832][ T29] audit: type=1326 audit(1773785211.986:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.563880][ T29] audit: type=1326 audit(1773785211.986:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.588235][ T29] audit: type=1326 audit(1773785211.986:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.613472][ T29] audit: type=1326 audit(1773785212.006:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 1875.674785][ T29] audit: type=1326 audit(1773785212.006:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1875.711175][ T29] audit: type=1326 audit(1773785212.006:8881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6468 comm="syz.3.39800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1877.386839][T18174] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1877.618266][T18174] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1877.649293][T18174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.678975][T18174] usb 5-1: config 0 descriptor?? [ 1878.081310][T18174] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1878.298071][T18174] [drm:udl_init] *ERROR* Selecting channel failed [ 1878.339996][T18174] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1878.356742][T18174] [drm] Initialized udl on minor 2 [ 1878.363705][T18174] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1878.387258][T18174] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1878.397174][ T2751] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1878.411404][T18174] usb 5-1: USB disconnect, device number 66 [ 1878.429235][ T2751] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1878.449351][ T2751] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1878.467713][T18378] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1878.627824][T18378] usb 6-1: Using ep0 maxpacket: 32 [ 1878.634927][T18378] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1878.645797][T18378] usb 6-1: config 0 has no interface number 0 [ 1878.677743][T18378] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1878.713330][T18378] usb 6-1: config 0 interface 89 has no altsetting 0 [ 1878.725030][T18378] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1878.767761][T18378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.786078][T18378] usb 6-1: Product: syz [ 1878.806455][T18378] usb 6-1: Manufacturer: syz [ 1878.816930][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1878.825353][T18378] usb 6-1: SerialNumber: syz [ 1878.846617][T18378] usb 6-1: config 0 descriptor?? [ 1878.884740][T18378] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1878.916021][T18378] em28xx 6-1:0.89: Video interface 89 found: [ 1879.110138][ T6627] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.39838'. [ 1879.500396][T18378] em28xx 6-1:0.89: chip ID is em2750 [ 1879.764235][T18378] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1879.775188][T18378] em28xx 6-1:0.89: board has no eeprom [ 1879.837972][T18378] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 1879.845438][T18378] em28xx 6-1:0.89: analog set to bulk mode. [ 1879.857755][T18376] em28xx 6-1:0.89: Registering V4L2 extension [ 1879.873157][T18378] usb 6-1: USB disconnect, device number 117 [ 1879.888954][T18378] em28xx 6-1:0.89: Disconnecting em28xx [ 1879.915032][T18376] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 1879.930823][T18376] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 1879.940452][T18376] em28xx 6-1:0.89: No AC97 audio processor [ 1879.953319][T18376] usb 6-1: Decoder not found [ 1879.959502][T18376] em28xx 6-1:0.89: failed to create media graph [ 1879.966032][T18376] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 1879.975815][T18376] em28xx 6-1:0.89: Registering snapshot button... [ 1879.991914][T18376] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input231 [ 1880.011282][T18376] em28xx 6-1:0.89: Remote control support is not available for this card. [ 1880.021738][T18378] em28xx 6-1:0.89: Closing input extension [ 1880.032073][T18378] em28xx 6-1:0.89: Deregistering snapshot button [ 1880.085432][T18378] em28xx 6-1:0.89: Freeing device [ 1881.234685][ T6741] netlink: 11 bytes leftover after parsing attributes in process `syz.3.39875'. [ 1881.944931][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39886'. [ 1882.369647][T18174] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1882.408860][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.39895'. [ 1882.421014][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.39895'. [ 1882.540761][T18174] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1882.565198][T18174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.574713][T18174] usb 6-1: Product: syz [ 1882.580380][T18174] usb 6-1: Manufacturer: syz [ 1882.585459][T18174] usb 6-1: SerialNumber: syz [ 1882.784258][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.39904'. [ 1882.938370][T18376] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1883.097263][T18376] usb 5-1: Using ep0 maxpacket: 16 [ 1883.105990][T18376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.121463][T18376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.143575][T18376] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1883.158873][T18376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.172643][T18376] usb 5-1: config 0 descriptor?? [ 1883.420966][T18174] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1883.448102][T18174] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1883.460169][T18174] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1883.474336][T18174] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1883.500790][T18174] usb 6-1: USB disconnect, device number 118 [ 1883.801048][T18376] usb 5-1: string descriptor 0 read error: -71 [ 1883.845455][T18376] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 1883.854834][T18376] letsketch 0003:6161:4D15.0060: probe with driver letsketch failed with error -32 [ 1883.872916][T18376] usb 5-1: USB disconnect, device number 67 [ 1883.989109][ T6885] netlink: 40 bytes leftover after parsing attributes in process `syz.6.39929'. [ 1884.752004][ T6919] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 1885.311591][ T6943] kvm: kvm [6942]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1885.796588][ T6964] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1885.852373][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39949'. [ 1886.101187][ T6976] netlink: 136 bytes leftover after parsing attributes in process `syz.0.39954'. [ 1886.124298][ T6981] loop9: detected capacity change from 0 to 4 [ 1886.127733][ T6976] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1886.154822][ T6981] Dev loop9: unable to read RDB block 4 [ 1886.179408][ T6981] loop9: unable to read partition table [ 1886.185286][ T6981] loop9: partition table beyond EOD, truncated [ 1886.192197][ T6981] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1886.797092][ T2751] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1886.881746][ T7024] pim6reg: entered allmulticast mode [ 1886.891537][ T7023] pim6reg: left allmulticast mode [ 1886.966825][ T2751] usb 6-1: Using ep0 maxpacket: 16 [ 1886.981723][ T2751] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1886.999009][ T2751] usb 6-1: config 0 has no interface number 0 [ 1887.016137][ T2751] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.031262][ T2751] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.041606][ T2751] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1887.056959][ T2751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.068411][ T2751] usb 6-1: config 0 descriptor?? [ 1887.352522][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39973'. [ 1887.508602][ T2751] hid (null): unknown global tag 0xd [ 1887.652411][ T7060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.39978'. [ 1887.740906][T18376] usb 6-1: USB disconnect, device number 119 [ 1888.265793][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.39985'. [ 1889.448980][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.40006'. [ 1889.536907][ T2745] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1889.686915][ T2745] usb 6-1: Using ep0 maxpacket: 16 [ 1889.695029][ T2745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.716437][ T2745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.746785][ T2745] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1889.758706][ T2745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.772910][ T2745] usb 6-1: config 0 descriptor?? [ 1890.032123][ T7199] netlink: 'syz.4.40017': attribute type 10 has an invalid length. [ 1890.413454][ T2745] usb 6-1: string descriptor 0 read error: -71 [ 1890.440622][ T7207] netlink: 92 bytes leftover after parsing attributes in process `syz.4.40018'. [ 1890.456876][ T2745] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 1890.465779][ T2745] letsketch 0003:6161:4D15.0062: probe with driver letsketch failed with error -32 [ 1890.487970][ T2745] usb 6-1: USB disconnect, device number 120 [ 1891.186342][ T7252] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1891.195252][ T7252] dvmrp1: linktype set to 768 [ 1891.213146][ T7257] netlink: 'syz.5.40031': attribute type 2 has an invalid length. [ 1891.245871][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40025'. [ 1891.358284][T30204] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 1893.943470][ T7316] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1893.974511][ T7316] dvmrp1: linktype set to 768 [ 1893.998597][T30204] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 1894.520535][ T7359] sctp: [Deprecated]: syz.5.40065 (pid 7359) Use of int in maxseg socket option. [ 1894.520535][ T7359] Use struct sctp_assoc_value instead [ 1895.372120][T30204] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1895.382459][T30204] Bluetooth: hci1: Injecting HCI hardware error event [ 1895.400415][T26103] Bluetooth: hci1: hardware error 0x00 [ 1896.567503][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40099'. [ 1896.590154][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40099'. [ 1896.839927][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.5.40103'. [ 1897.448570][T26103] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1898.013081][T26103] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1898.028402][T26103] Bluetooth: hci0: Injecting HCI hardware error event [ 1898.043043][T26103] Bluetooth: hci0: hardware error 0x00 [ 1898.168383][T18174] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1898.336742][T18174] usb 6-1: Using ep0 maxpacket: 16 [ 1898.353768][T18174] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1898.376704][T18174] usb 6-1: config 0 has no interface number 0 [ 1898.397047][T18174] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1898.423169][T18174] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1898.462766][T18174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.496766][T18174] usb 6-1: Product: syz [ 1898.500982][T18174] usb 6-1: Manufacturer: syz [ 1898.505684][T18174] usb 6-1: SerialNumber: syz [ 1898.523816][T18174] usb 6-1: config 0 descriptor?? [ 1899.151906][T18174] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input232 [ 1899.356147][T18174] usb 6-1: USB disconnect, device number 121 [ 1899.666410][ T7611] netlink: 'syz.4.40139': attribute type 3 has an invalid length. [ 1899.675480][ T7611] netlink: 772 bytes leftover after parsing attributes in process `syz.4.40139'. [ 1899.691706][ T7611] netlink: 'syz.4.40139': attribute type 3 has an invalid length. [ 1899.710420][ T7611] netlink: 772 bytes leftover after parsing attributes in process `syz.4.40139'. [ 1900.088040][T26103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1900.617998][T18376] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1900.778955][T18376] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1900.803376][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1900.818391][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1900.833352][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1900.844156][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1900.861487][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1900.878758][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1900.890229][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1900.901262][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1900.921326][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1900.933197][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1900.950896][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1900.965827][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1900.978846][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1900.991114][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.003544][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1901.015606][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.026182][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.039319][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1901.050087][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.061645][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.083133][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1901.093041][T18376] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1901.118416][T18376] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1901.141275][T18376] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1901.158616][T18376] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1901.169626][T18376] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1901.182006][T18376] usb 6-1: Product: syz [ 1901.189713][T18376] usb 6-1: Manufacturer: syz [ 1901.195308][T18376] usb 6-1: SerialNumber: syz [ 1901.208847][T18376] usb 6-1: config 0 descriptor?? [ 1901.226046][T18376] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1901.563715][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 1901.579233][T18376] usb 6-1: USB disconnect, device number 122 [ 1901.601257][T18376] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1902.366822][T18174] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1902.526940][T18174] usb 5-1: Using ep0 maxpacket: 16 [ 1902.534159][T18174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.545987][T18174] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.556291][T18174] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1902.569909][T18174] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1902.579491][T18174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.594946][T18174] usb 5-1: config 0 descriptor?? [ 1903.013570][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.021035][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.029405][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.037647][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.045413][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.053598][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.063170][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.070838][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.079711][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.088942][T18174] apple 0003:05AC:027D.0063: unknown main item tag 0x0 [ 1903.101573][T18174] apple 0003:05AC:027D.0063: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 1903.356263][T18174] usb 5-1: USB disconnect, device number 68 [ 1903.961703][ T7774] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.40193'. [ 1905.636782][T18174] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1905.822669][T18174] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1905.843116][T18174] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1905.862669][T18174] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.899063][T18174] usb 5-1: config 220 has no interface number 2 [ 1905.906228][T18174] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1905.920398][T18174] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1905.937111][T18174] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1905.944343][T18174] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1905.955293][T18174] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1905.967849][T18174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.976068][T18174] usb 5-1: Product: syz [ 1905.989405][T18174] usb 5-1: Manufacturer: syz [ 1906.003162][T18174] usb 5-1: SerialNumber: syz [ 1906.279328][T18174] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1906.305736][T18174] uvcvideo 5-1:220.0: No valid video chain found. [ 1906.338626][T18174] usb 5-1: selecting invalid altsetting 0 [ 1906.384144][T18174] usb 5-1: selecting invalid altsetting 0 [ 1906.394922][T18174] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1906.427573][T18174] usb 5-1: USB disconnect, device number 69 [ 1907.715895][ T7948] could not allocate digest TFM handle _!5(iHP,omxę*71U"~ 2.>~e>/y [ 1908.407481][ T2745] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1908.603819][ T2745] usb 6-1: Using ep0 maxpacket: 16 [ 1908.614420][ T2745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1908.626734][ T2745] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1908.636966][ T2745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.656556][ T2745] usb 6-1: config 0 descriptor?? [ 1909.174544][ T2745] mcp2221 0003:04D8:00DD.0064: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1909.428266][T18376] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1909.544014][T18378] usb 6-1: USB disconnect, device number 123 [ 1909.621207][T18376] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1909.644734][T18376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.679047][T18376] usb 5-1: config 0 descriptor?? [ 1909.692816][T18376] cp210x 5-1:0.0: cp210x converter detected [ 1910.180482][T18376] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1910.395724][T18376] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1910.414621][T18376] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 1910.429359][T18376] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1910.460680][T18376] usb 5-1: USB disconnect, device number 70 [ 1910.473065][T18376] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1910.485146][T18376] cp210x 5-1:0.0: device disconnected [ 1910.576911][ T2745] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1910.735123][ T2745] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1910.745072][ T2745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.764301][ T2745] usb 6-1: config 0 descriptor?? [ 1910.983123][ T2745] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1911.185809][ T2745] [drm:udl_init] *ERROR* Selecting channel failed [ 1911.219830][ T2745] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1911.237389][ T2745] [drm] Initialized udl on minor 2 [ 1911.252520][ T2745] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1911.272576][ T2745] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1911.284098][T18174] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1911.296261][ T2745] usb 6-1: USB disconnect, device number 124 [ 1911.300322][ T8113] netlink: 1 bytes leftover after parsing attributes in process `syz.0.40283'. [ 1911.310435][T18174] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1911.532466][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40277'. [ 1911.644964][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40277'. [ 1912.725834][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40303'. [ 1912.746016][ T8189] netlink: 'syz.0.40303': attribute type 30 has an invalid length. [ 1912.765435][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40303'. [ 1913.120445][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.40309'. [ 1913.158774][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.40309'. [ 1914.650116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.657220][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.791997][ T8323] program syz.3.40361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1916.944729][ T8402] bond0: entered promiscuous mode [ 1916.950659][ T8402] batadv0: entered promiscuous mode [ 1916.963676][ T8402] bond0: left promiscuous mode [ 1916.970906][ T8402] batadv0: left promiscuous mode [ 1917.550337][ T8446] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1917.598418][ T8446] bond0: (slave bond21): Enslaving as an active interface with an up link [ 1918.036575][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1918.036592][ T29] audit: type=1326 audit(1773785254.586:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.118536][ T29] audit: type=1326 audit(1773785254.626:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.156713][ T8501] netlink: 28 bytes leftover after parsing attributes in process `syz.5.40421'. [ 1918.168898][ T29] audit: type=1326 audit(1773785254.626:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.217643][ T29] audit: type=1326 audit(1773785254.626:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.252229][ T29] audit: type=1326 audit(1773785254.626:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.276524][ T29] audit: type=1326 audit(1773785254.626:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.314905][ T29] audit: type=1326 audit(1773785254.626:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.339016][ T29] audit: type=1326 audit(1773785254.626:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.411343][ T29] audit: type=1326 audit(1773785254.626:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1918.441730][ T29] audit: type=1326 audit(1773785254.626:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8421 comm="syz.6.40401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7fc00000 [ 1919.035242][ T8546] batadv0: entered promiscuous mode [ 1919.059747][ T8546] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1919.086124][ T8546] batadv0: left promiscuous mode [ 1919.858323][ T8594] kvm: kvm [8593]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 1919.937787][ T8600] bond0: entered promiscuous mode [ 1919.945094][ T8600] bond0: left promiscuous mode [ 1920.349953][ T8620] program syz.5.40462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1921.075076][ T8653] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1921.081810][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1921.094047][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 1921.327618][T18174] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1921.357732][T18376] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1921.519211][T18376] usb 6-1: config 0 has no interfaces? [ 1921.539989][T18376] usb 6-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1921.558319][T18376] usb 6-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1921.577951][T18376] usb 6-1: Manufacturer: syz [ 1921.591263][T18376] usb 6-1: config 0 descriptor?? [ 1921.820531][T18376] usb 6-1: USB disconnect, device number 125 [ 1921.829137][ T8655] vhci_hcd: connection closed [ 1921.830549][T28376] vhci_hcd vhci_hcd.5: stop threads [ 1921.842833][T28376] vhci_hcd vhci_hcd.5: release socket [ 1921.850298][T28376] vhci_hcd vhci_hcd.5: disconnect device [ 1921.887127][T18174] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1924.526546][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.40530'. [ 1924.930753][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40537'. [ 1926.076525][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.40563'. [ 1926.249020][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40565'. [ 1926.262624][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40565'. [ 1926.317838][T18376] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1926.467517][T18376] usb 5-1: Using ep0 maxpacket: 8 [ 1926.474758][T18376] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1926.484944][T18376] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1926.507265][T18376] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1926.518446][T18376] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1926.529808][T18376] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1926.546346][T18376] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1926.559401][T18376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.795627][T18376] usb 5-1: GET_CAPABILITIES returned 0 [ 1926.802623][T18376] usbtmc 5-1:16.0: can't read capabilities [ 1927.020959][T18376] usb 5-1: USB disconnect, device number 71 [ 1927.886897][ T2751] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1928.037519][ T2751] usb 6-1: Using ep0 maxpacket: 32 [ 1928.045322][ T2751] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 1928.056149][ T2751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.072757][ T2751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.085012][ T2751] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1928.117326][ T2751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.130896][ T2751] usb 6-1: config 0 descriptor?? [ 1928.222792][ T8994] syzkaller1: tun_chr_ioctl cmd 21731 [ 1928.571320][ T2751] logitech 0003:046D:C29C.0065: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1928.949504][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1928.949521][ T29] audit: type=1326 audit(1773785265.506:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1928.986981][ T2751] logitech 0003:046D:C29C.0065: no inputs found [ 1929.015410][ T2751] usb 6-1: USB disconnect, device number 126 [ 1929.045539][ T29] audit: type=1326 audit(1773785265.506:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.078463][ T29] audit: type=1326 audit(1773785265.536:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.150878][ T29] audit: type=1326 audit(1773785265.536:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.208069][ T29] audit: type=1326 audit(1773785265.536:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.230572][ T29] audit: type=1326 audit(1773785265.536:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.271293][ T29] audit: type=1326 audit(1773785265.536:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.304258][ T29] audit: type=1326 audit(1773785265.536:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.352838][ T29] audit: type=1326 audit(1773785265.536:8941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.380659][ T29] audit: type=1326 audit(1773785265.536:8942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.40608" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6f6c code=0x7ffc0000 [ 1929.787756][ T9073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.40623'. [ 1930.327759][T18376] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1930.488341][T18376] usb 5-1: Using ep0 maxpacket: 16 [ 1930.495137][T18376] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.508993][T18376] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.521812][T18376] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.533044][T18376] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1930.548779][T18376] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1930.555700][T18376] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1930.607952][T18376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.123084][T18376] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0066/input/input233 [ 1931.287146][T18376] kye 0003:0458:5010.0066: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 1931.319214][T18376] usb 5-1: USB disconnect, device number 72 [ 1931.410823][ T9148] fido_id[9148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1932.411892][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.40654'. [ 1932.449481][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.40654'. [ 1932.492747][ T9192] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1934.228431][ T9294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.40693'. [ 1934.238670][ T2751] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1934.374501][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1934.374516][ T29] audit: type=1326 audit(1773785270.916:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.408106][ T29] audit: type=1326 audit(1773785270.926:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.408526][ T2751] usb 6-1: Using ep0 maxpacket: 16 [ 1934.432761][ T29] audit: type=1326 audit(1773785270.926:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.441950][ T2751] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1934.460614][ T29] audit: type=1326 audit(1773785270.926:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.493798][ T2751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.506725][ T2751] usb 6-1: Product: syz [ 1934.510937][ T2751] usb 6-1: Manufacturer: syz [ 1934.516365][ T2751] usb 6-1: SerialNumber: syz [ 1934.544087][ T29] audit: type=1326 audit(1773785270.926:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.570755][ T29] audit: type=1326 audit(1773785270.926:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.595468][ T29] audit: type=1326 audit(1773785270.926:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.619766][ T29] audit: type=1326 audit(1773785270.966:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.644317][ T29] audit: type=1326 audit(1773785270.966:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.668371][ T29] audit: type=1326 audit(1773785270.986:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9301 comm="syz.3.40697" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1934.749743][ T2751] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1934.765263][ T2751] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1934.783300][ T2751] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1934.792365][ T2751] usb 6-1: media controller created [ 1934.829638][ T2751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1934.950436][ T2751] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1934.991652][ T2751] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1935.015447][ T2751] usb 6-1: USB disconnect, device number 127 [ 1936.187061][ T2745] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1936.348569][ T2745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.359731][ T2745] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.369657][ T2745] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1936.383647][ T2745] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1936.392941][ T2745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.403582][ T2745] usb 6-1: config 0 descriptor?? [ 1936.837493][ T2745] hid_parser_main: 27 callbacks suppressed [ 1936.837518][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.858289][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.865864][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.887016][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.896522][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.914393][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.922300][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.937295][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.955030][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1936.983856][ T2745] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 1937.036319][ T2745] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1937.137558][ T2745] usb 6-1: USB disconnect, device number 2 [ 1937.185884][ T9420] fido_id[9420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1937.976899][ T9456] sctp: [Deprecated]: syz.6.40740 (pid 9456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1937.976899][ T9456] Use struct sctp_sack_info instead [ 1939.068200][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.40770'. [ 1939.256492][ T9540] sctp: [Deprecated]: syz.4.40772 (pid 9540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1939.256492][ T9540] Use struct sctp_sack_info instead [ 1939.496016][ T9550] tap0: tun_chr_ioctl cmd 1074025677 [ 1939.504158][ T9550] tap0: linktype set to 804 [ 1941.345666][ T9642] tap0: tun_chr_ioctl cmd 1074025677 [ 1941.354657][ T9642] tap0: linktype set to 804 [ 1941.578407][ T9658] netlink: 'syz.4.40818': attribute type 33 has an invalid length. [ 1941.598237][ T9658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.40818'. [ 1941.723159][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1941.723177][ T29] audit: type=1800 audit(1773785278.276:8963): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.40820" name="SYSV00000000" dev="tmpfs" ino=10 res=0 errno=0 [ 1941.762228][ T9658] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1941.810788][T28376] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1941.824143][T28376] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 1941.844592][T28376] bond0: now running without any active interface! [ 1942.264966][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40833'. [ 1942.279023][ T9694] netlink: 173 bytes leftover after parsing attributes in process `syz.3.40833'. [ 1943.921951][ T29] audit: type=1800 audit(1773785280.476:8964): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.40864" name="file2" dev="tmpfs" ino=4016 res=0 errno=0 [ 1944.509079][ T29] audit: type=1800 audit(1773785281.056:8965): pid=9815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.40875" name="file2" dev="tmpfs" ino=16468 res=0 errno=0 [ 1944.555471][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.40876'. [ 1945.506011][ T9884] netlink: 'syz.0.40894': attribute type 10 has an invalid length. [ 1945.555505][ T9884] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1945.576449][ T9884] team0: Port device netdevsim0 added [ 1945.973931][ T9906] Context (ID=0x0) not attached to queue pair (handle=0x4df:0x80) [ 1946.110697][ T9914] netlink: 'syz.5.40907': attribute type 1 has an invalid length. [ 1946.137690][ T9914] netlink: 'syz.5.40907': attribute type 7 has an invalid length. [ 1946.153443][ T9914] netlink: 'syz.5.40907': attribute type 8 has an invalid length. [ 1946.172873][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.40907'. [ 1946.245161][ T9923] netlink: 16 bytes leftover after parsing attributes in process `syz.6.40910'. [ 1946.481737][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40928'. [ 1946.577455][T18174] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1946.664738][ T29] audit: type=1326 audit(1773785283.206:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.713517][ T29] audit: type=1326 audit(1773785283.216:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.760927][ T29] audit: type=1326 audit(1773785283.216:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.784379][T18174] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1946.806281][T18174] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1946.817320][T18174] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1946.826380][T18174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.835164][ T29] audit: type=1326 audit(1773785283.216:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.860641][ T29] audit: type=1326 audit(1773785283.216:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.885666][ T9927] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1946.904500][ T29] audit: type=1326 audit(1773785283.216:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.941882][T18174] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1946.954722][ T29] audit: type=1326 audit(1773785283.216:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1946.982660][ T29] audit: type=1326 audit(1773785283.216:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1947.012880][ T29] audit: type=1326 audit(1773785283.216:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1947.163879][T18174] usb 6-1: USB disconnect, device number 3 [ 1947.189535][ T29] audit: type=1326 audit(1773785283.216:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.3.40922" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 1947.339429][ T9997] netlink: 'syz.6.40925': attribute type 10 has an invalid length. [ 1947.564472][T10013] netlink: 'syz.6.40933': attribute type 11 has an invalid length. [ 1947.587877][T10013] netlink: 212332 bytes leftover after parsing attributes in process `syz.6.40933'. [ 1947.695412][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.6.40935'. [ 1948.327315][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.40950'. [ 1948.697374][ T2751] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1948.858089][ T2751] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1948.878780][ T2751] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1948.893628][ T2751] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1948.905794][ T2751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.917937][T10083] netlink: 'syz.3.40958': attribute type 10 has an invalid length. [ 1948.925295][T10065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1948.949161][T10083] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1948.978264][ T2751] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1949.005155][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.40959'. [ 1949.575994][T18174] usb 5-1: USB disconnect, device number 73 [ 1949.676985][ T2751] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1949.826876][ T2751] usb 6-1: Using ep0 maxpacket: 8 [ 1949.838156][ T2751] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1949.848352][ T2751] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1949.859079][ T2751] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1949.869514][ T2751] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1949.882979][ T2751] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1949.892494][ T2751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.111077][ T2751] usb 6-1: GET_CAPABILITIES returned 0 [ 1950.126797][ T2751] usbtmc 6-1:16.0: can't read capabilities [ 1950.325509][ T2751] usb 6-1: USB disconnect, device number 4 [ 1951.233323][ T29] audit: type=1326 audit(1773785287.776:8976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.5.40991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1951.282458][ T29] audit: type=1326 audit(1773785287.776:8977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.5.40991" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1951.538240][T10240] veth1_macvtap: left promiscuous mode [ 1951.546981][T10240] macsec0: entered promiscuous mode [ 1951.565446][T10240] veth1_macvtap: entered promiscuous mode [ 1951.571618][T10240] macsec0: left promiscuous mode [ 1951.679754][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.41003'. [ 1952.301891][T10281] pimreg: entered allmulticast mode [ 1952.331918][T10281] pimreg: left allmulticast mode [ 1952.371611][T10289] macsec0: left allmulticast mode [ 1952.380623][T10289] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1952.424076][T10289] macsec0: left promiscuous mode [ 1952.509743][T10289] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1955.140876][T10438] netlink: 'syz.4.41072': attribute type 2 has an invalid length. [ 1955.238001][T10438] netlink: 100 bytes leftover after parsing attributes in process `syz.4.41072'. [ 1956.022340][T10497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.41092'. [ 1956.187775][T18378] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1956.357419][T18378] usb 6-1: Using ep0 maxpacket: 8 [ 1956.364592][T18378] usb 6-1: config 0 has no interfaces? [ 1956.383088][T18378] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1956.393029][T18378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1956.402267][T18378] usb 6-1: Product: syz [ 1956.408400][T18378] usb 6-1: Manufacturer: syz [ 1956.413024][T18378] usb 6-1: SerialNumber: syz [ 1956.428859][T18378] usb 6-1: config 0 descriptor?? [ 1956.641784][ T2751] usb 6-1: USB disconnect, device number 5 [ 1957.884683][T10597] netlink: 'syz.6.41128': attribute type 2 has an invalid length. [ 1957.894176][T10597] netlink: 100 bytes leftover after parsing attributes in process `syz.6.41128'. [ 1961.554483][T10786] kvm: user requested TSC rate below hardware speed [ 1962.120501][T10816] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1962.559703][T10835] input: syz1 as /devices/virtual/input/input237 [ 1963.113239][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1963.113255][ T29] audit: type=1326 audit(1773785299.666:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.158991][ T29] audit: type=1326 audit(1773785299.696:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.184234][ T29] audit: type=1326 audit(1773785299.706:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.212186][ T29] audit: type=1326 audit(1773785299.706:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.236454][ T29] audit: type=1326 audit(1773785299.706:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.260136][ T29] audit: type=1326 audit(1773785299.706:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.314428][T10871] kvm: user requested TSC rate below hardware speed [ 1963.342821][ T29] audit: type=1326 audit(1773785299.706:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1963.365360][ T29] audit: type=1326 audit(1773785299.716:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10864 comm="syz.6.41223" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 1964.258227][T10919] bond2 (unregistering): Released all slaves [ 1964.809408][T11011] cgroup: fork rejected by pids controller in /syz6 [ 1965.590507][ T29] audit: type=1326 audit(1773785302.146:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.4.41262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1965.723153][ T1096] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1965.755586][ T29] audit: type=1326 audit(1773785302.306:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11028 comm="syz.4.41262" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5f6c code=0x7ffc0000 [ 1965.777995][ T1096] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.049327][ T1096] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1966.088863][ T1096] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.224410][T30204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1966.238637][T30204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1966.249786][T30204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1966.258576][T30204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1966.267541][T30204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1966.348706][ T1096] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1966.360590][ T1096] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.482338][ T1096] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 1966.507534][ T1096] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 1966.530012][ T1096] team0: Port device netdevsim0 removed [ 1966.547526][ T1096] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1966.578659][ T1096] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.093648][T11149] cgroup: fork rejected by pids controller in /syz5 [ 1967.970630][ T1096] .2442 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1967.980955][ T1096] bond_slave_0: left allmulticast mode [ 1967.998509][ T1096] .2442 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.009326][ T1096] bond_slave_1: left allmulticast mode [ 1968.028156][ T1096] .2442 (unregistering): (slave batadv0): Releasing backup interface [ 1968.038325][ T1096] batadv0: left allmulticast mode [ 1968.049070][ T1096] .2442 (unregistering): Released all slaves [ 1968.101379][ T1096] bond0 (unregistering): Released all slaves [ 1968.121764][ T1096] bond1 (unregistering): Released all slaves [ 1968.157091][T11060] chnl_net:caif_netlink_parms(): no params data found [ 1968.325567][ T1096] : left promiscuous mode [ 1968.330829][T30204] Bluetooth: hci0: command tx timeout [ 1968.473816][ T1096] : left promiscuous mode [ 1968.652760][T11060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.677597][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.684919][T11060] bridge_slave_0: entered allmulticast mode [ 1968.709464][T11060] bridge_slave_0: entered promiscuous mode [ 1968.728174][ T1096] tipc: Disabling bearer [ 1968.752377][ T1096] tipc: Disabling bearer [ 1968.766980][ T1096] tipc: Left network mode [ 1968.776041][T11060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.796841][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.804284][T11060] bridge_slave_1: entered allmulticast mode [ 1968.828437][T11060] bridge_slave_1: entered promiscuous mode [ 1968.948476][T11280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41292'. [ 1969.108567][T26103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1969.120871][T26103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1969.130357][T26103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1969.183570][T11060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.201439][T26103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1969.218038][T11060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.231077][T26103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1969.403392][T11060] team0: Port device team_slave_0 added [ 1969.453167][T11060] team0: Port device team_slave_1 added [ 1969.509791][T11329] cgroup: fork rejected by pids controller in /syz0 [ 1969.591033][T11060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1969.627368][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1969.673443][T11060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.712749][T11060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1969.728967][T11060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1969.758499][T11060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1970.032720][T11060] hsr_slave_0: entered promiscuous mode [ 1970.041584][T11060] hsr_slave_1: entered promiscuous mode [ 1970.050714][T11060] debugfs: 'hsr0' already exists in 'hsr' [ 1970.058083][T11060] Cannot create hsr debugfs directory [ 1970.245383][ T1096] hsr_slave_0: left promiscuous mode [ 1970.277806][ T1096] hsr_slave_1: left promiscuous mode [ 1970.284130][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.314032][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.326486][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.342659][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.389043][ T1096] veth1_to_hsr: left allmulticast mode [ 1970.403430][ T1096] veth1_to_hsr: left promiscuous mode [ 1970.412138][ T1096] veth1_macvtap: left promiscuous mode [ 1970.419135][T30204] Bluetooth: hci0: command tx timeout [ 1970.424946][ T1096] veth0_macvtap: left promiscuous mode [ 1970.432097][ T1096] veth1_vlan: left promiscuous mode [ 1970.439301][ T1096] veth0_vlan: left promiscuous mode [ 1970.756224][T26103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1970.770785][T26103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1970.788309][T26103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1970.796468][T26103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1970.808209][T26103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1971.022495][ T1096] team_slave_1 (unregistering): left promiscuous mode [ 1971.031589][ T1096] team_slave_1 (unregistering): left allmulticast mode [ 1971.039405][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1971.053181][ T1096] C (unregistering): left promiscuous mode [ 1971.059472][ T1096] C (unregistering): left allmulticast mode [ 1971.069351][ T1096] team0 (unregistering): Port device C removed [ 1971.287671][T30204] Bluetooth: hci1: command tx timeout [ 1971.614847][T11311] chnl_net:caif_netlink_parms(): no params data found [ 1971.833240][ T1096] IPVS: stop unused estimator thread 0... [ 1972.276548][T11311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.284302][T11311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.292221][T11311] bridge_slave_0: entered allmulticast mode [ 1972.302800][T11311] bridge_slave_0: entered promiscuous mode [ 1972.325789][T11311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.344236][T11311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.358056][T11311] bridge_slave_1: entered allmulticast mode [ 1972.371851][T11311] bridge_slave_1: entered promiscuous mode [ 1972.409916][T11447] chnl_net:caif_netlink_parms(): no params data found [ 1972.488357][T30204] Bluetooth: hci0: command tx timeout [ 1972.488785][T11311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1972.530516][T11311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1972.675952][T11311] team0: Port device team_slave_0 added [ 1972.685963][T11311] team0: Port device team_slave_1 added [ 1972.878739][T11311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1972.886316][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1972.898324][T30204] Bluetooth: hci3: command tx timeout [ 1972.927033][T11311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.955260][T11311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.970165][T11311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.001544][T11311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.035012][T11447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.042612][T11447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.053718][T11447] bridge_slave_0: entered allmulticast mode [ 1973.062115][T11447] bridge_slave_0: entered promiscuous mode [ 1973.119489][T11447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.133897][T11447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.142877][T11447] bridge_slave_1: entered allmulticast mode [ 1973.151461][T11447] bridge_slave_1: entered promiscuous mode [ 1973.274901][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1973.293387][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.354156][T11311] hsr_slave_0: entered promiscuous mode [ 1973.364768][T11311] hsr_slave_1: entered promiscuous mode [ 1973.372973][T30204] Bluetooth: hci1: command tx timeout [ 1973.379706][T11311] debugfs: 'hsr0' already exists in 'hsr' [ 1973.385550][T11311] Cannot create hsr debugfs directory [ 1973.473254][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1973.484693][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.524055][T11060] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1973.542165][T11447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1973.603903][T11060] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1973.621325][T11060] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1973.634203][T11447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1973.681972][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1973.692689][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.710443][T11060] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1973.855337][ T1096] team0: Port device netdevsim0 removed [ 1973.864324][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1973.875523][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.897281][T11447] team0: Port device team_slave_0 added [ 1973.905948][T11447] team0: Port device team_slave_1 added [ 1974.077993][T11447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1974.084979][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.130331][T11447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1974.249355][T11447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1974.256337][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.294204][T11447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1974.523444][T11447] hsr_slave_0: entered promiscuous mode [ 1974.533691][T11447] hsr_slave_1: entered promiscuous mode [ 1974.545570][T11447] debugfs: 'hsr0' already exists in 'hsr' [ 1974.576729][T30204] Bluetooth: hci0: command tx timeout [ 1974.579250][T11447] Cannot create hsr debugfs directory [ 1974.719234][T12047] IPv6: Can't replace route, no match found [ 1974.970586][T30204] Bluetooth: hci3: command tx timeout [ 1974.977057][T11311] bond0: (slave netdevsim0): Releasing backup interface [ 1975.060123][T11060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1975.254110][ T1096] bridge_slave_1: left allmulticast mode [ 1975.261506][ T1096] bridge_slave_1: left promiscuous mode [ 1975.273718][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.311675][ T1096] bridge_slave_0: left allmulticast mode [ 1975.318076][ T1096] bridge_slave_0: left promiscuous mode [ 1975.323987][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.345016][ T1096] bridge_slave_1: left allmulticast mode [ 1975.354810][ T1096] bridge_slave_1: left promiscuous mode [ 1975.371083][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.390306][ T1096] bridge_slave_0: left allmulticast mode [ 1975.396045][ T1096] bridge_slave_0: left promiscuous mode [ 1975.402310][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.423335][ T1096] batman_adv: batadv0: Interface deactivated: gretap2 [ 1975.446890][T30204] Bluetooth: hci1: command tx timeout [ 1975.717791][ T4736] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1975.784140][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.795878][ T1096] bond_slave_0: left promiscuous mode [ 1975.809307][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1975.823430][ T1096] bond_slave_1: left promiscuous mode [ 1975.831735][ T1096] bond0 (unregistering): Released all slaves [ 1975.850885][ T1096] bond1 (unregistering): Released all slaves [ 1975.870333][ T4736] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.937846][ T4736] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1975.957570][ T4736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.965652][ T4736] usb 5-1: Product: syz [ 1975.988023][ T4736] usb 5-1: Manufacturer: syz [ 1975.992849][ T4736] usb 5-1: SerialNumber: syz [ 1976.015414][ T4736] usb 5-1: config 0 descriptor?? [ 1976.039406][ T4736] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1976.092921][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.101691][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.258584][ T1096] batman_adv: batadv0: Removing interface: gretap2 [ 1976.402827][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1976.413984][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1976.423662][ T1096] bond0 (unregistering): Released all slaves [ 1976.435948][ T1096] bond1 (unregistering): Released all slaves [ 1976.493443][T11060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1976.589672][ T1096] tipc: Disabling bearer [ 1976.596288][ T1096] tipc: Left network mode [ 1976.626316][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.633503][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1976.660526][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.667971][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1976.859061][T11311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1977.001761][T11311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1977.051672][T30204] Bluetooth: hci3: command tx timeout [ 1977.128947][ T4736] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1977.136028][ T4736] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1977.167158][ T4736] usb 5-1: USB disconnect, device number 74 [ 1977.174858][T11311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1977.238482][T11311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1977.514131][T11060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1977.537174][T30204] Bluetooth: hci1: command tx timeout [ 1977.745543][T11060] veth0_vlan: entered promiscuous mode [ 1977.810755][ T1096] hsr_slave_0: left promiscuous mode [ 1977.818589][ T1096] hsr_slave_1: left promiscuous mode [ 1977.824744][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1977.832802][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1977.846206][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1977.854162][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1977.873749][ T1096] hsr_slave_0: left promiscuous mode [ 1977.880502][ T1096] hsr_slave_1: left promiscuous mode [ 1977.886617][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1977.895461][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1977.904330][ T1096] batman_adv: batadv0: Interface deactivated: macsec4 [ 1977.913514][ T1096] batman_adv: batadv0: Removing interface: macsec4 [ 1977.927499][ T1096] team_slave_0: left promiscuous mode [ 1977.933931][ T1096] team_slave_1: left promiscuous mode [ 1977.939933][ T1096] veth0_macvtap: left promiscuous mode [ 1977.945606][ T1096] veth1_vlan: left promiscuous mode [ 1977.951603][ T1096] veth0_vlan: left promiscuous mode [ 1978.224795][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1978.255461][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1978.719066][ T1096] team_slave_1 (unregistering): left allmulticast mode [ 1978.732003][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 1978.764525][ T1096] team_slave_0 (unregistering): left allmulticast mode [ 1978.772824][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 1978.934482][T12266] netlink: 'syz.4.41327': attribute type 30 has an invalid length. [ 1979.030124][T11060] veth1_vlan: entered promiscuous mode [ 1979.041371][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1979.054229][T11447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1979.092685][T11447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1979.136879][T30204] Bluetooth: hci3: command tx timeout [ 1979.177838][T11447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1979.231405][T11447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1979.260938][T11311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1979.363551][T23780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.370784][T23780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1979.419964][T23780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.427527][T23780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.510402][T11311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1979.585690][T11060] veth0_macvtap: entered promiscuous mode [ 1979.595931][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41332'. [ 1979.615367][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41332'. [ 1979.630711][T11060] veth1_macvtap: entered promiscuous mode [ 1979.729895][T11311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1979.758933][T11060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1979.811043][T11060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1979.906369][T11447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1979.933157][T11311] veth0_vlan: entered promiscuous mode [ 1979.948541][T23780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.966396][T23780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.986137][T23780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.047603][T11311] veth1_vlan: entered promiscuous mode [ 1980.055313][T23780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.081298][T11447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1980.121368][ T1096] IPVS: stop unused estimator thread 0... [ 1980.127210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.134356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.183887][ T1096] IPVS: stop unused estimator thread 0... [ 1980.233823][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.241007][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1980.353463][T11311] veth0_macvtap: entered promiscuous mode [ 1980.386548][T23780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.401971][T23780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.443535][T11311] veth1_macvtap: entered promiscuous mode [ 1980.475270][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.484003][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.529051][T11311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1980.555718][T11311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1980.591568][T11447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1980.611127][ T388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.650142][ T388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.665193][ T388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.688090][ T388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1980.822552][T11447] veth0_vlan: entered promiscuous mode [ 1980.859319][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.870764][T11447] veth1_vlan: entered promiscuous mode [ 1980.882399][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.929740][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.939481][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.983279][T11447] veth0_macvtap: entered promiscuous mode [ 1981.000874][T11447] veth1_macvtap: entered promiscuous mode [ 1981.031152][T11447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.056403][T11447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.077546][ T1096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.086352][ T1096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.139741][ T1096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.163067][ T1096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.184155][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41345'. [ 1981.350205][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.369482][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.443338][T23780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.453558][T23780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.468184][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1981.468201][ T29] audit: type=1326 audit(1773785318.016:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.524151][ T29] audit: type=1326 audit(1773785318.056:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.587951][ T29] audit: type=1326 audit(1773785318.056:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.656065][ T29] audit: type=1326 audit(1773785318.066:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.690383][ T29] audit: type=1326 audit(1773785318.066:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.753806][ T29] audit: type=1326 audit(1773785318.066:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7175cab code=0x7ffc0000 [ 1981.800636][ T29] audit: type=1326 audit(1773785318.066:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.863695][ T29] audit: type=1326 audit(1773785318.066:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.887135][ T29] audit: type=1326 audit(1773785318.076:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1981.912568][ T29] audit: type=1326 audit(1773785318.076:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12383 comm="syz.5.41350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1982.044904][T12409] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1982.305118][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.41364'. [ 1982.327771][T12426] netlink: 104 bytes leftover after parsing attributes in process `syz.6.41364'. [ 1982.359836][T12426] netlink: 104 bytes leftover after parsing attributes in process `syz.6.41364'. [ 1982.823372][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.41380'. [ 1982.835736][T12465] netlink: 104 bytes leftover after parsing attributes in process `syz.5.41380'. [ 1982.845605][T12465] netlink: 104 bytes leftover after parsing attributes in process `syz.5.41380'. [ 1982.978943][T12472] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1983.336547][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.344134][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.415958][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1983.431372][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1983.530263][T12481] geneve2: entered promiscuous mode [ 1983.537966][ T388] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.548081][ T388] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 53220 - 0 [ 1983.557979][ T388] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.568654][ T388] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 53220 - 0 [ 1983.579377][ T388] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.590049][ T388] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 53220 - 0 [ 1983.607775][ T388] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.617561][ T388] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 53220 - 0 [ 1984.657345][ T2745] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1984.836791][ T2745] usb 6-1: Using ep0 maxpacket: 32 [ 1984.844139][ T2745] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1984.853672][ T2745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 109, changing to 10 [ 1984.867985][ T2745] usb 6-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40 [ 1984.877699][ T2745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.885997][ T2745] usb 6-1: Product: syz [ 1984.890598][ T2745] usb 6-1: Manufacturer: syz [ 1984.895395][ T2745] usb 6-1: SerialNumber: syz [ 1985.119492][ T2745] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1985.126608][ T2745] usb 6-1: MIDIStreaming interface descriptor not found [ 1985.171151][ T2745] usb 6-1: USB disconnect, device number 6 [ 1985.757515][T12578] pim6reg1: tun_chr_ioctl cmd 2147767511 [ 1986.568633][ T2745] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1986.592136][T12631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41426'. [ 1986.759420][ T2745] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1986.782555][ T2745] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1986.816764][ T2745] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1986.917479][ T2745] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1986.937674][ T2745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.957712][ T2745] usb 5-1: Product: syz [ 1986.974619][ T2745] usb 5-1: Manufacturer: syz [ 1986.979751][ T2745] usb 5-1: SerialNumber: syz [ 1986.999019][ T2745] usb 5-1: config 0 descriptor?? [ 1987.005065][T12614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1987.038256][T12614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1987.189686][ T2745] usb 5-1: ucan: probing device on interface #0 [ 1987.720005][T12684] lo: left promiscuous mode [ 1987.753667][T12684] bridge_slave_0: left promiscuous mode [ 1987.784606][T12684] xfrm0: left promiscuous mode [ 1987.806752][T12684] xfrm0: left allmulticast mode [ 1987.819360][T12684] 0: left allmulticast mode [ 1987.829972][T12684] hsr_slave_0: left allmulticast mode [ 1987.841968][T12684] hsr_slave_1: left allmulticast mode [ 1987.849437][ T2745] ucan 5-1:0.0: probe with driver ucan failed with error -22 [ 1987.858949][T12684] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 1987.876478][T12684] bond1: left allmulticast mode [ 1987.893920][T12684] gretap1: left promiscuous mode [ 1987.908022][T12684] ip6tnl1: left promiscuous mode [ 1987.914530][T12684] ip6tnl4: left promiscuous mode [ 1987.921029][T12684] ip6tnl4: left allmulticast mode [ 1987.929866][T12684] bond8: left promiscuous mode [ 1987.935575][T12684] bond11: left allmulticast mode [ 1987.942353][T12684] ip6gre2: left allmulticast mode [ 1987.948318][T12684] ip6gre3: left allmulticast mode [ 1987.953997][T12684] vti0: left promiscuous mode [ 1987.959148][T12684] vti0: left allmulticast mode [ 1987.968403][T12684] bond18: left allmulticast mode [ 1987.973716][T12684] vlan0: left promiscuous mode [ 1987.979185][T12684] geneve1: left promiscuous mode [ 1987.985465][T12684] vlan0: left allmulticast mode [ 1987.990850][T12684] geneve1: left allmulticast mode [ 1987.996534][T12684] bond20: left allmulticast mode [ 1988.002370][T12684] macvtap0: left promiscuous mode [ 1988.008048][T12684] macvtap0: left allmulticast mode [ 1988.013629][T12684] ip6tnl8: left allmulticast mode [ 1988.019859][T12684] macsec0: left promiscuous mode [ 1988.030557][T12684] macsec1: left promiscuous mode [ 1988.035660][T12684] macsec1: left allmulticast mode [ 1988.067244][T12684] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1988.074628][T12684] macsec2: left promiscuous mode [ 1988.117141][T12685] geneve4: entered promiscuous mode [ 1988.126040][ T388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 44040 - 0 [ 1988.152720][ T6139] usb 5-1: USB disconnect, device number 75 [ 1988.155725][ T388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 44040 - 0 [ 1988.196146][ T388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 44040 - 0 [ 1988.226535][ T388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 44040 - 0 [ 1989.702564][T12782] pimreg: tun_chr_ioctl cmd 1074025673 [ 1989.912414][T12795] overlay: Unknown parameter 'f' [ 1990.406885][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.41496'. [ 1990.467940][T12831] kvm: kvm [12830]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 1990.913151][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.6.41506'. [ 1991.313881][T12877] netlink: 92 bytes leftover after parsing attributes in process `syz.0.41515'. [ 1991.350593][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.41515'. [ 1991.789046][T12900] hub 9-0:1.0: USB hub found [ 1991.801349][T12900] hub 9-0:1.0: 1 port detected [ 1992.272269][T12923] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1993.025291][T12951] loop9: detected capacity change from 0 to 7 [ 1993.034367][T12951] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1993.040347][T12951] loop9: partition table partially beyond EOD, truncated [ 1993.049347][T12951] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1993.103692][T31072] udevd[31072]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1994.052985][T13007] netlink: 'syz.4.41561': attribute type 1 has an invalid length. [ 1994.062084][T13007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1994.497645][T13039] kvm_intel: kvm [13038]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 1996.007021][ T2751] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1996.166876][ T2751] usb 6-1: Using ep0 maxpacket: 32 [ 1996.175987][ T2751] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1996.185206][ T2751] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1996.194369][ T2751] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1996.206724][ T2751] usb 6-1: config 1 has no interface number 0 [ 1996.212861][ T2751] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1996.225128][ T2751] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1996.238917][ T2751] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1996.248362][ T2751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.263918][ T2751] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1996.468662][ T2751] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1996.582746][T13161] netem: incorrect ge model size [ 1996.588978][T13161] netem: change failed [ 1996.889197][T18376] usb 6-1: USB disconnect, device number 7 [ 1996.904294][T18376] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1997.107151][T12343] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1997.259348][T12343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1997.270292][T12343] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1997.280840][T12343] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1997.290538][T12343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1997.300033][T12343] usb 5-1: SerialNumber: syz [ 1997.409056][T13205] IPv6: NLM_F_CREATE should be specified when creating new route [ 1997.537997][T12343] usb 5-1: 0:2 : does not exist [ 1997.592688][T12343] usb 5-1: USB disconnect, device number 76 [ 1997.645331][T31072] udevd[31072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1998.515550][T13284] netlink: 71 bytes leftover after parsing attributes in process `syz.0.41648'. [ 1998.607404][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41651'. [ 2000.313612][T13412] input: syz1 as /devices/virtual/input/input241 [ 2000.907265][T12343] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2001.079760][T12343] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2001.090018][T12343] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2001.099572][T12343] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.111979][T12343] usb 6-1: config 220 has no interface number 2 [ 2001.118998][T12343] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2001.139289][T12343] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2001.157247][T12343] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2001.164490][T12343] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2001.182616][T12343] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2001.192900][T12343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.207655][T12343] usb 6-1: Product: syz [ 2001.212699][T12343] usb 6-1: Manufacturer: syz [ 2001.218358][T12343] usb 6-1: SerialNumber: syz [ 2001.284216][T13478] loop5: detected capacity change from 0 to 7 [ 2001.403772][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.41711'. [ 2001.418278][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.6.41711'. [ 2001.442487][T12343] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2001.456195][T12343] uvcvideo 6-1:220.0: No valid video chain found. [ 2001.472780][T12343] usb 6-1: selecting invalid altsetting 0 [ 2001.522604][T26458] Dev loop5: unable to read RDB block 7 [ 2001.529731][T26458] loop5: unable to read partition table [ 2001.537775][T12343] usb 6-1: selecting invalid altsetting 0 [ 2001.544669][T12343] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2001.554255][T26458] loop5: partition table beyond EOD, truncated [ 2001.585312][T12343] usb 6-1: USB disconnect, device number 8 [ 2001.723038][T13502] netlink: 24 bytes leftover after parsing attributes in process `syz.6.41714'. [ 2001.799697][T13478] Dev loop5: unable to read RDB block 7 [ 2001.805703][T13478] loop5: unable to read partition table [ 2001.872236][T13478] loop5: partition table beyond EOD, truncated [ 2001.938817][T13478] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2002.277802][ T5193] Dev loop5: unable to read RDB block 7 [ 2002.283967][ T5193] loop5: unable to read partition table [ 2002.293962][ T5193] loop5: partition table beyond EOD, truncated [ 2002.697913][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.41729'. [ 2002.929415][T13573] netlink: 'syz.5.41735': attribute type 1 has an invalid length. [ 2002.941000][T13573] netlink: 'syz.5.41735': attribute type 2 has an invalid length. [ 2002.949743][T13573] netlink: 'syz.5.41735': attribute type 1 has an invalid length. [ 2002.958448][T13573] netlink: 'syz.5.41735': attribute type 3 has an invalid length. [ 2002.966307][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.41735'. [ 2002.996759][ T2745] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2003.156734][ T2745] usb 5-1: Using ep0 maxpacket: 8 [ 2003.164307][ T2745] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2003.175845][ T2745] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2003.185609][ T2745] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2003.206625][ T2745] usb 5-1: Product: syz [ 2003.215554][ T2745] usb 5-1: Manufacturer: syz [ 2003.220830][ T2745] usb 5-1: SerialNumber: syz [ 2003.441575][ T2745] usb 5-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 2003.452599][ T2745] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2003.461105][ T2745] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2003.653614][ T2745] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 2003.677169][ T2745] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 2003.699313][ T2745] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2003.723082][ T2745] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2003.738059][ T2745] usb 5-1: USB disconnect, device number 77 [ 2003.752077][ T2745] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2003.772288][ T2745] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2003.785291][ T2745] visor 5-1:1.0: device disconnected [ 2004.077067][T13650] openvswitch: netlink: EtherType 50a is less than min 600 [ 2004.385261][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41755'. [ 2004.648154][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 2004.648174][ T29] audit: type=1800 audit(1773785341.196:9023): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.41761" name="file1" dev="tmpfs" ino=40203 res=0 errno=0 [ 2005.123582][T13716] netlink: 48 bytes leftover after parsing attributes in process `syz.5.41773'. [ 2005.643965][T13748] dummy0: mtu less than device minimum [ 2006.420831][T13783] netlink: 3 bytes leftover after parsing attributes in process `syz.6.41797'. [ 2007.379303][T12343] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2007.537072][T12343] usb 6-1: Using ep0 maxpacket: 32 [ 2007.544165][T12343] usb 6-1: config 0 has no interfaces? [ 2007.550402][T12343] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2007.560114][T12343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.570749][T12343] usb 6-1: config 0 descriptor?? [ 2007.790835][T13843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.802021][T13843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.813907][T12343] usb 6-1: USB disconnect, device number 9 [ 2008.276766][ T2745] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2008.428788][ T2745] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 2008.437299][ T2745] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 2008.445651][ T2745] usb 6-1: config 1 has no interface number 0 [ 2008.452061][ T2745] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2008.468174][ T2745] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2008.479098][ T2745] usb 6-1: config 1 interface 7 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2008.496010][ T2745] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.c9 [ 2008.505403][ T2745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.513487][ T2745] usb 6-1: Product: syz [ 2008.517916][ T2745] usb 6-1: Manufacturer: syz [ 2008.522616][ T2745] usb 6-1: SerialNumber: syz [ 2008.524898][T13921] lo: left promiscuous mode [ 2008.740000][ T2745] ath6kl: Failed to submit usb control message: -71 [ 2008.751624][ T2745] ath6kl: unable to send the bmi data to the device: -71 [ 2008.758876][ T2745] ath6kl: Unable to send get target info: -71 [ 2008.766179][ T2745] ath6kl: Failed to init ath6kl core: -71 [ 2008.776222][ T2745] ath6kl_usb 6-1:1.7: probe with driver ath6kl_usb failed with error -71 [ 2008.790289][ T2745] usb 6-1: USB disconnect, device number 10 [ 2009.191841][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2009.212632][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2009.231509][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2009.254676][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2009.274750][T26103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2009.289754][T26103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2009.299869][T26103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2009.312634][T26103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2009.321967][T26103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2009.599683][T13953] chnl_net:caif_netlink_parms(): no params data found [ 2009.816508][T13953] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.850828][T13953] bridge0: port 1(bridge_slave_0) entered disabled state [ 2009.858754][T13953] bridge_slave_0: entered allmulticast mode [ 2009.866375][T13953] bridge_slave_0: entered promiscuous mode [ 2009.876118][T13953] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.886924][T13953] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.895145][T13953] bridge_slave_1: entered allmulticast mode [ 2009.903166][T13953] bridge_slave_1: entered promiscuous mode [ 2009.951782][T13953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2009.965753][T13953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2010.024794][T13953] team0: Port device team_slave_0 added [ 2010.036569][T13953] team0: Port device team_slave_1 added [ 2010.083247][T13953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2010.095081][T13953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2010.125601][T13953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2010.140631][T13953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2010.159813][T13953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2010.187142][T13953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2010.290008][T13953] hsr_slave_0: entered promiscuous mode [ 2010.298880][T13953] hsr_slave_1: entered promiscuous mode [ 2010.325233][T14167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.41857'. [ 2010.830243][T13953] bond0: (slave netdevsim0): Releasing backup interface [ 2011.003577][T13953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2011.016147][T13953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2011.033014][T13953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2011.054399][T13953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2011.096370][T14274] kvm: kvm [14273]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 2011.209471][T13953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.231120][T13953] 8021q: adding VLAN 0 to HW filter on device team0 [ 2011.251183][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.258362][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2011.275624][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.282923][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2011.367446][T26103] Bluetooth: hci4: command tx timeout [ 2011.409381][T13953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2011.529719][T13953] veth0_vlan: entered promiscuous mode [ 2011.563361][T13953] veth1_vlan: entered promiscuous mode [ 2011.613034][T13953] veth0_macvtap: entered promiscuous mode [ 2011.651449][T13953] veth1_macvtap: entered promiscuous mode [ 2011.700137][T13953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2011.733052][T13953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2011.791251][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.807208][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.837456][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.849524][T14312] netlink: 92 bytes leftover after parsing attributes in process `syz.3.41871'. [ 2011.862066][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2011.889597][T14312] netlink: 36 bytes leftover after parsing attributes in process `syz.3.41871'. [ 2012.028699][T14321] netlink: 'syz.5.41875': attribute type 1 has an invalid length. [ 2012.037888][T14321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2012.065490][T14320] pimreg: tun_chr_ioctl cmd 1074025673 [ 2012.096539][T28376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.113766][T28376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.161923][ T388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.170637][ T388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.163079][T14399] netem: incorrect ge model size [ 2013.171804][T14399] netem: change failed [ 2013.300166][T14411] loop5: detected capacity change from 0 to 7 [ 2013.308570][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.318374][ C0] buffer_io_error: 8 callbacks suppressed [ 2013.318393][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.334576][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.344342][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.353601][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.363289][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.371420][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.381195][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.398430][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.408158][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.420451][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.430113][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.438060][T18376] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 2013.449138][ T29] audit: type=1326 audit(1773785350.006:9024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14417 comm="syz.6.41910" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53f6c code=0x0 [ 2013.451838][T26103] Bluetooth: hci4: command tx timeout [ 2013.500629][T14416] loop5: detected capacity change from 7 to 0 [ 2013.507541][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2013.517184][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 2013.530359][T31072] ldm_validate_partition_table(): Disk read failed. [ 2013.547924][T31072] Dev loop5: unable to read RDB block 0 [ 2013.553522][T31072] loop5: unable to read partition table [ 2013.573754][T31072] loop5: partition table beyond EOD, truncated [ 2013.629662][T18376] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 220, setting to 64 [ 2013.650766][T18376] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2013.684718][T18376] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2013.702302][T18376] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2013.715423][T18376] usb 5-1: Product: syz [ 2013.721630][T18376] usb 5-1: Manufacturer: syz [ 2013.726353][T18376] usb 5-1: SerialNumber: syz [ 2013.749249][T18376] usb 5-1: config 0 descriptor?? [ 2013.765238][T14401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2013.823592][T18376] usb 5-1: selecting invalid altsetting 0 [ 2014.072170][T18376] usb 5-1: USB disconnect, device number 78 [ 2015.527532][T26103] Bluetooth: hci4: command tx timeout [ 2015.832189][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.41956'. [ 2015.856244][T14576] macvlan0: entered promiscuous mode [ 2015.861980][T14576] netlink: 'syz.5.41956': attribute type 2 has an invalid length. [ 2015.946611][T14580] input: syz0 as /devices/virtual/input/input243 [ 2016.572998][T14628] loop9: detected capacity change from 0 to 7 [ 2016.587950][T31072] Dev loop9: unable to read RDB block 7 [ 2016.594026][T31072] loop9: unable to read partition table [ 2016.601261][T31072] loop9: partition table beyond EOD, truncated [ 2016.609652][T14628] Dev loop9: unable to read RDB block 7 [ 2016.627254][T14628] loop9: unable to read partition table [ 2016.633310][T14628] loop9: partition table beyond EOD, truncated [ 2016.651668][T14628] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2016.672185][T14634] netlink: 'syz.6.41988': attribute type 1 has an invalid length. [ 2016.931910][T14650] erspan0: entered promiscuous mode [ 2017.408457][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41996'. [ 2017.616999][T26103] Bluetooth: hci4: command tx timeout [ 2018.813810][T14731] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 512 [ 2019.982884][T14786] team0: entered allmulticast mode [ 2020.006128][T14786] team_slave_0: entered allmulticast mode [ 2020.017511][T14786] team_slave_1: entered allmulticast mode [ 2020.063469][T14788] geneve2: entered allmulticast mode [ 2020.079320][T14786] team0: left allmulticast mode [ 2020.087001][T14786] team_slave_0: left allmulticast mode [ 2020.092663][T14786] team_slave_1: left allmulticast mode [ 2021.378470][T14869] netlink: 'syz.6.42064': attribute type 8 has an invalid length. [ 2021.702206][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42069'. [ 2023.141812][T14960] tipc: Started in network mode [ 2023.160063][T14960] tipc: Node identity ac14140f, cluster identity 4711 [ 2023.178687][T14960] tipc: New replicast peer: 255.255.255.255 [ 2023.196586][T14960] tipc: Enabled bearer , priority 20 [ 2023.208402][T14960] netlink: 'syz.6.42099': attribute type 4 has an invalid length. [ 2023.376534][T14977] batman_adv: batadv0: Adding interface: macvtap1 [ 2023.384582][T14977] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2023.412947][T14977] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 2023.502792][T14985] pimreg: tun_chr_ioctl cmd 1074025677 [ 2023.517918][T14985] pimreg: linktype set to 776 [ 2023.602929][T14993] netem: incorrect gi model size [ 2023.608860][T14993] netem: change failed [ 2024.110091][T15020] C: renamed from team_slave_0 [ 2024.117675][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42123'. [ 2024.132005][T15020] netlink: 'syz.5.42122': attribute type 4 has an invalid length. [ 2024.141029][T15020] netlink: 116 bytes leftover after parsing attributes in process `syz.5.42122'. [ 2024.151843][T15020] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 2024.307246][T18376] tipc: Node number set to 2886997007 [ 2025.786156][T15103] kvm: user requested TSC rate below hardware speed [ 2027.025677][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42171'. [ 2027.128326][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42173'. [ 2027.139946][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.42173'. [ 2027.194858][T15188] loop7: detected capacity change from 0 to 7 [ 2027.208170][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.217813][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.225898][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.235614][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.243764][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.253407][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.261727][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.271447][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.280524][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.290306][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.300872][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.310695][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.322367][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.332149][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.340403][T31072] ldm_validate_partition_table(): Disk read failed. [ 2027.348811][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.358752][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.368152][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.377910][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.388411][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2027.398130][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2027.411811][T31072] Dev loop7: unable to read RDB block 0 [ 2027.421218][T31072] loop7: unable to read partition table [ 2027.428156][T31072] loop7: partition table beyond EOD, truncated [ 2027.438176][T15188] ldm_validate_partition_table(): Disk read failed. [ 2027.445630][T15188] Dev loop7: unable to read RDB block 0 [ 2027.452096][T15188] loop7: unable to read partition table [ 2027.458497][T15188] loop7: partition table beyond EOD, truncated [ 2027.466096][T15188] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 2027.554291][T15200] netlink: 'syz.4.42177': attribute type 1 has an invalid length. [ 2027.564646][T15200] netlink: 'syz.4.42177': attribute type 2 has an invalid length. [ 2027.573578][T15200] netlink: 'syz.4.42177': attribute type 1 has an invalid length. [ 2027.707954][T15211] kvm: kvm [15210]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x3 [ 2028.673713][T15261] [ 2028.676082][T15261] ===================================================== [ 2028.683020][T15261] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2028.690551][T15261] syzkaller #0 Tainted: G L [ 2028.696599][T15261] ----------------------------------------------------- [ 2028.703516][T15261] syz.5.42196/15261 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2028.711320][T15261] ffff8880265a1d20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2028.719964][T15261] [ 2028.719964][T15261] and this task is already holding: [ 2028.727328][T15261] ffff88803188b7f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2028.736147][T15261] which would create a new lock dependency: [ 2028.742121][T15261] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 2028.749704][T15261] [ 2028.749704][T15261] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2028.759210][T15261] (&client->buffer_lock){..-.}-{3:3} [ 2028.759239][T15261] [ 2028.759239][T15261] ... which became SOFTIRQ-irq-safe at: [ 2028.772289][T15261] lock_acquire+0xf0/0x2e0 [ 2028.776793][T15261] _raw_spin_lock+0x2e/0x40 [ 2028.781390][T15261] evdev_pass_values+0xb9/0xbd0 [ 2028.786470][T15261] evdev_events+0x1e6/0x340 [ 2028.791060][T15261] input_pass_values+0x288/0x890 [ 2028.796240][T15261] input_event_dispose+0x3e5/0x6b0 [ 2028.801527][T15261] input_inject_event+0x1dd/0x340 [ 2028.806644][T15261] led_trigger_event+0x138/0x210 [ 2028.811745][T15261] kbd_bh+0x1f3/0x300 [ 2028.815815][T15261] tasklet_action_common+0x2da/0x4b0 [ 2028.821304][T15261] handle_softirqs+0x22a/0x870 [ 2028.826239][T15261] run_ksoftirqd+0x36/0x60 [ 2028.830748][T15261] smpboot_thread_fn+0x541/0xa50 [ 2028.835776][T15261] kthread+0x388/0x470 [ 2028.839927][T15261] ret_from_fork+0x51e/0xb90 [ 2028.844624][T15261] ret_from_fork_asm+0x1a/0x30 [ 2028.849494][T15261] [ 2028.849494][T15261] to a SOFTIRQ-irq-unsafe lock: [ 2028.856772][T15261] (tasklist_lock){.+.+}-{3:3} [ 2028.856805][T15261] [ 2028.856805][T15261] ... which became SOFTIRQ-irq-unsafe at: [ 2028.869557][T15261] ... [ 2028.869569][T15261] lock_acquire+0xf0/0x2e0 [ 2028.876836][T15261] _raw_read_lock+0x36/0x50 [ 2028.881443][T15261] __do_wait+0xde/0x740 [ 2028.885779][T15261] do_wait+0x1e7/0x540 [ 2028.890120][T15261] kernel_wait+0xd6/0x1c0 [ 2028.894718][T15261] call_usermodehelper_exec_work+0xbe/0x230 [ 2028.900746][T15261] process_scheduled_works+0xb6e/0x18c0 [ 2028.906393][T15261] worker_thread+0xa53/0xfc0 [ 2028.911187][T15261] kthread+0x388/0x470 [ 2028.915354][T15261] ret_from_fork+0x51e/0xb90 [ 2028.920118][T15261] ret_from_fork_asm+0x1a/0x30 [ 2028.924975][T15261] [ 2028.924975][T15261] other info that might help us debug this: [ 2028.924975][T15261] [ 2028.935285][T15261] Chain exists of: [ 2028.935285][T15261] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 2028.935285][T15261] [ 2028.948506][T15261] Possible interrupt unsafe locking scenario: [ 2028.948506][T15261] [ 2028.956914][T15261] CPU0 CPU1 [ 2028.962281][T15261] ---- ---- [ 2028.967811][T15261] lock(tasklist_lock); [ 2028.972054][T15261] local_irq_disable(); [ 2028.978855][T15261] lock(&client->buffer_lock); [ 2028.986243][T15261] lock(&new->fa_lock); [ 2028.993026][T15261] [ 2028.996567][T15261] lock(&client->buffer_lock); [ 2029.001677][T15261] [ 2029.001677][T15261] *** DEADLOCK *** [ 2029.001677][T15261] [ 2029.009903][T15261] 5 locks held by syz.5.42196/15261: [ 2029.015176][T15261] #0: ffff88803beb2420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2029.024330][T15261] #1: ffffffff8e9008b0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4de/0x1e80 [ 2029.033603][T15261] #2: ffff888020f6c648 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4e8/0x1e80 [ 2029.043086][T15261] #3: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2029.052240][T15261] #4: ffff88803188b7f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2029.061398][T15261] [ 2029.061398][T15261] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2029.071896][T15261] -> (&client->buffer_lock){..-.}-{3:3} { [ 2029.077714][T15261] IN-SOFTIRQ-W at: [ 2029.081881][T15261] lock_acquire+0xf0/0x2e0 [ 2029.088207][T15261] _raw_spin_lock+0x2e/0x40 [ 2029.094533][T15261] evdev_pass_values+0xb9/0xbd0 [ 2029.101641][T15261] evdev_events+0x1e6/0x340 [ 2029.107963][T15261] input_pass_values+0x288/0x890 [ 2029.114717][T15261] input_event_dispose+0x3e5/0x6b0 [ 2029.121834][T15261] input_inject_event+0x1dd/0x340 [ 2029.128695][T15261] led_trigger_event+0x138/0x210 [ 2029.135565][T15261] kbd_bh+0x1f3/0x300 [ 2029.141363][T15261] tasklet_action_common+0x2da/0x4b0 [ 2029.148474][T15261] handle_softirqs+0x22a/0x870 [ 2029.155503][T15261] run_ksoftirqd+0x36/0x60 [ 2029.161742][T15261] smpboot_thread_fn+0x541/0xa50 [ 2029.168510][T15261] kthread+0x388/0x470 [ 2029.174396][T15261] ret_from_fork+0x51e/0xb90 [ 2029.180807][T15261] ret_from_fork_asm+0x1a/0x30 [ 2029.187415][T15261] INITIAL USE at: [ 2029.191400][T15261] lock_acquire+0xf0/0x2e0 [ 2029.197541][T15261] _raw_spin_lock+0x2e/0x40 [ 2029.203771][T15261] evdev_pass_values+0xb9/0xbd0 [ 2029.210367][T15261] evdev_events+0x1e6/0x340 [ 2029.216851][T15261] input_pass_values+0x288/0x890 [ 2029.223543][T15261] input_event_dispose+0x330/0x6b0 [ 2029.230414][T15261] input_inject_event+0x1dd/0x340 [ 2029.237175][T15261] evdev_write+0x325/0x4c0 [ 2029.243328][T15261] vfs_write+0x29a/0xb90 [ 2029.249391][T15261] ksys_write+0x150/0x270 [ 2029.255549][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2029.262480][T15261] do_fast_syscall_32+0x33/0x70 [ 2029.269154][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.277391][T15261] } [ 2029.279965][T15261] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2029.288624][T15261] -> (&new->fa_lock){....}-{3:3} { [ 2029.293833][T15261] INITIAL USE at: [ 2029.297722][T15261] lock_acquire+0xf0/0x2e0 [ 2029.303698][T15261] _raw_write_lock_irq+0x3d/0x50 [ 2029.310375][T15261] fasync_remove_entry+0xf1/0x1c0 [ 2029.317089][T15261] __fput+0x8a5/0xa70 [ 2029.322721][T15261] task_work_run+0x1d9/0x270 [ 2029.328874][T15261] exit_to_user_mode_loop+0xed/0x480 [ 2029.335749][T15261] __do_fast_syscall_32+0x415/0x640 [ 2029.342528][T15261] do_fast_syscall_32+0x33/0x70 [ 2029.349035][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.356935][T15261] INITIAL READ USE at: [ 2029.361270][T15261] lock_acquire+0xf0/0x2e0 [ 2029.367685][T15261] _raw_read_lock_irqsave+0x48/0x60 [ 2029.374901][T15261] kill_fasync+0x199/0x4d0 [ 2029.381350][T15261] pipe_release+0x19c/0x330 [ 2029.387845][T15261] __fput+0x44f/0xa70 [ 2029.393820][T15261] task_work_run+0x1d9/0x270 [ 2029.400489][T15261] exit_to_user_mode_loop+0xed/0x480 [ 2029.407779][T15261] __do_fast_syscall_32+0x415/0x640 [ 2029.414966][T15261] do_fast_syscall_32+0x33/0x70 [ 2029.421801][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.430174][T15261] } [ 2029.432662][T15261] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2029.441777][T15261] ... acquired at: [ 2029.445566][T15261] _raw_read_lock_irqsave+0x48/0x60 [ 2029.450930][T15261] kill_fasync+0x199/0x4d0 [ 2029.455629][T15261] evdev_pass_values+0x627/0xbd0 [ 2029.460745][T15261] evdev_events+0x1e6/0x340 [ 2029.465424][T15261] input_pass_values+0x288/0x890 [ 2029.470528][T15261] input_event_dispose+0x330/0x6b0 [ 2029.475802][T15261] input_inject_event+0x1dd/0x340 [ 2029.480986][T15261] evdev_write+0x325/0x4c0 [ 2029.485612][T15261] vfs_write+0x29a/0xb90 [ 2029.490021][T15261] ksys_write+0x150/0x270 [ 2029.494526][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2029.499911][T15261] do_fast_syscall_32+0x33/0x70 [ 2029.504935][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.511425][T15261] [ 2029.513737][T15261] [ 2029.513737][T15261] the dependencies between the lock to be acquired [ 2029.513745][T15261] and SOFTIRQ-irq-unsafe lock: [ 2029.527343][T15261] -> (tasklist_lock){.+.+}-{3:3} { [ 2029.532560][T15261] HARDIRQ-ON-R at: [ 2029.536631][T15261] lock_acquire+0xf0/0x2e0 [ 2029.542865][T15261] _raw_read_lock+0x36/0x50 [ 2029.549353][T15261] __do_wait+0xde/0x740 [ 2029.555324][T15261] do_wait+0x1e7/0x540 [ 2029.561207][T15261] kernel_wait+0xd6/0x1c0 [ 2029.567351][T15261] call_usermodehelper_exec_work+0xbe/0x230 [ 2029.575062][T15261] process_scheduled_works+0xb6e/0x18c0 [ 2029.582499][T15261] worker_thread+0xa53/0xfc0 [ 2029.588914][T15261] kthread+0x388/0x470 [ 2029.594800][T15261] ret_from_fork+0x51e/0xb90 [ 2029.601233][T15261] ret_from_fork_asm+0x1a/0x30 [ 2029.607821][T15261] SOFTIRQ-ON-R at: [ 2029.611875][T15261] lock_acquire+0xf0/0x2e0 [ 2029.618135][T15261] _raw_read_lock+0x36/0x50 [ 2029.624467][T15261] __do_wait+0xde/0x740 [ 2029.630443][T15261] do_wait+0x1e7/0x540 [ 2029.636323][T15261] kernel_wait+0xd6/0x1c0 [ 2029.642466][T15261] call_usermodehelper_exec_work+0xbe/0x230 [ 2029.650198][T15261] process_scheduled_works+0xb6e/0x18c0 [ 2029.658082][T15261] worker_thread+0xa53/0xfc0 [ 2029.664578][T15261] kthread+0x388/0x470 [ 2029.670462][T15261] ret_from_fork+0x51e/0xb90 [ 2029.676877][T15261] ret_from_fork_asm+0x1a/0x30 [ 2029.683484][T15261] INITIAL USE at: [ 2029.687495][T15261] lock_acquire+0xf0/0x2e0 [ 2029.693749][T15261] _raw_write_lock_irq+0x3d/0x50 [ 2029.700418][T15261] copy_process+0x247a/0x3cd0 [ 2029.706834][T15261] kernel_clone+0x248/0x8e0 [ 2029.713077][T15261] user_mode_thread+0x110/0x180 [ 2029.719833][T15261] rest_init+0x23/0x300 [ 2029.725721][T15261] start_kernel+0x385/0x3d0 [ 2029.731996][T15261] x86_64_start_reservations+0x24/0x30 [ 2029.739426][T15261] x86_64_start_kernel+0x143/0x1c0 [ 2029.746318][T15261] common_startup_64+0x13e/0x147 [ 2029.753093][T15261] INITIAL READ USE at: [ 2029.757508][T15261] lock_acquire+0xf0/0x2e0 [ 2029.764106][T15261] _raw_read_lock+0x36/0x50 [ 2029.770780][T15261] __do_wait+0xde/0x740 [ 2029.777117][T15261] do_wait+0x1e7/0x540 [ 2029.783365][T15261] kernel_wait+0xd6/0x1c0 [ 2029.789961][T15261] call_usermodehelper_exec_work+0xbe/0x230 [ 2029.798640][T15261] process_scheduled_works+0xb6e/0x18c0 [ 2029.807004][T15261] worker_thread+0xa53/0xfc0 [ 2029.813761][T15261] kthread+0x388/0x470 [ 2029.820077][T15261] ret_from_fork+0x51e/0xb90 [ 2029.826839][T15261] ret_from_fork_asm+0x1a/0x30 [ 2029.834005][T15261] } [ 2029.836613][T15261] ... key at: [] tasklist_lock+0x18/0x40 [ 2029.844914][T15261] ... acquired at: [ 2029.848807][T15261] _raw_read_lock+0x36/0x50 [ 2029.853498][T15261] send_sigurg+0x12b/0x420 [ 2029.858093][T15261] sk_send_sigurg+0x6c/0x2e0 [ 2029.862970][T15261] queue_oob+0x42c/0x4f0 [ 2029.867591][T15261] unix_stream_sendmsg+0xcb1/0xe80 [ 2029.873068][T15261] ____sys_sendmsg+0x972/0x9f0 [ 2029.878095][T15261] ___sys_sendmsg+0x2a5/0x360 [ 2029.883112][T15261] __sys_sendmsg+0x183/0x260 [ 2029.887951][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2029.893401][T15261] do_fast_syscall_32+0x33/0x70 [ 2029.898416][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.904927][T15261] [ 2029.907240][T15261] -> (&f_owner->lock){....}-{3:3} { [ 2029.912452][T15261] INITIAL USE at: [ 2029.916349][T15261] lock_acquire+0xf0/0x2e0 [ 2029.922505][T15261] _raw_write_lock_irq+0x3d/0x50 [ 2029.929060][T15261] __f_setown+0x67/0x370 [ 2029.934965][T15261] f_setown+0x23a/0x300 [ 2029.940762][T15261] do_fcntl+0x6cd/0x1a20 [ 2029.946722][T15261] do_compat_fcntl64+0x51e/0x7e0 [ 2029.953308][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2029.960063][T15261] do_fast_syscall_32+0x33/0x70 [ 2029.966497][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2029.974394][T15261] INITIAL READ USE at: [ 2029.978713][T15261] lock_acquire+0xf0/0x2e0 [ 2029.985118][T15261] _raw_read_lock_irqsave+0x48/0x60 [ 2029.992316][T15261] send_sigurg+0x55/0x420 [ 2029.998643][T15261] sk_send_sigurg+0x6c/0x2e0 [ 2030.005507][T15261] queue_oob+0x42c/0x4f0 [ 2030.011742][T15261] unix_stream_sendmsg+0xcb1/0xe80 [ 2030.018852][T15261] ____sys_sendmsg+0x972/0x9f0 [ 2030.025648][T15261] ___sys_sendmsg+0x2a5/0x360 [ 2030.032332][T15261] __sys_sendmsg+0x183/0x260 [ 2030.038925][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2030.046115][T15261] do_fast_syscall_32+0x33/0x70 [ 2030.052956][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2030.061397][T15261] } [ 2030.063889][T15261] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2030.072841][T15261] ... acquired at: [ 2030.076635][T15261] _raw_read_lock_irqsave+0x48/0x60 [ 2030.082010][T15261] send_sigio+0x38/0x370 [ 2030.086499][T15261] kill_fasync+0x24d/0x4d0 [ 2030.091083][T15261] lease_break_callback+0x26/0x30 [ 2030.096274][T15261] __break_lease+0x81c/0x1e80 [ 2030.101119][T15261] do_dentry_open+0x1010/0x14e0 [ 2030.106141][T15261] vfs_open+0x3b/0x340 [ 2030.110482][T15261] path_openat+0x2e08/0x3860 [ 2030.115233][T15261] do_file_open+0x23e/0x4a0 [ 2030.119929][T15261] do_sys_openat2+0x113/0x200 [ 2030.124846][T15261] __ia32_compat_sys_open+0x117/0x140 [ 2030.130498][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2030.135881][T15261] do_fast_syscall_32+0x33/0x70 [ 2030.140981][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2030.147477][T15261] [ 2030.149793][T15261] [ 2030.149793][T15261] stack backtrace: [ 2030.155971][T15261] CPU: 1 UID: 0 PID: 15261 Comm: syz.5.42196 Tainted: G L syzkaller #0 PREEMPT(full) [ 2030.155991][T15261] Tainted: [L]=SOFTLOCKUP [ 2030.155996][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2030.156005][T15261] Call Trace: [ 2030.156014][T15261] [ 2030.156022][T15261] dump_stack_lvl+0xe8/0x150 [ 2030.156043][T15261] __lock_acquire+0x2a94/0x2cf0 [ 2030.156066][T15261] lock_acquire+0xf0/0x2e0 [ 2030.156080][T15261] ? send_sigio+0x38/0x370 [ 2030.156095][T15261] ? lock_acquire+0xf0/0x2e0 [ 2030.156110][T15261] _raw_read_lock_irqsave+0x48/0x60 [ 2030.156123][T15261] ? send_sigio+0x38/0x370 [ 2030.156141][T15261] send_sigio+0x38/0x370 [ 2030.156155][T15261] kill_fasync+0x24d/0x4d0 [ 2030.156168][T15261] ? kill_fasync+0x53/0x4d0 [ 2030.156181][T15261] lease_break_callback+0x26/0x30 [ 2030.156194][T15261] __break_lease+0x81c/0x1e80 [ 2030.156216][T15261] ? __pfx___break_lease+0x10/0x10 [ 2030.156234][T15261] ? __pfx_apparmor_file_open+0x10/0x10 [ 2030.156251][T15261] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 2030.156267][T15261] do_dentry_open+0x1010/0x14e0 [ 2030.156287][T15261] vfs_open+0x3b/0x340 [ 2030.156302][T15261] ? path_openat+0x2df0/0x3860 [ 2030.156315][T15261] path_openat+0x2e08/0x3860 [ 2030.156333][T15261] ? __pfx_stack_trace_save+0x10/0x10 [ 2030.156347][T15261] ? stack_depot_save_flags+0x33/0x810 [ 2030.156486][T15261] ? __pfx_path_openat+0x10/0x10 [ 2030.156498][T15261] ? __ia32_compat_sys_open+0x117/0x140 [ 2030.156514][T15261] ? __do_fast_syscall_32+0x20d/0x640 [ 2030.156528][T15261] ? do_fast_syscall_32+0x33/0x70 [ 2030.156542][T15261] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2030.156560][T15261] ? __lock_acquire+0x6b5/0x2cf0 [ 2030.156576][T15261] do_file_open+0x23e/0x4a0 [ 2030.156591][T15261] ? __pfx_do_file_open+0x10/0x10 [ 2030.156609][T15261] ? _raw_spin_unlock+0x28/0x50 [ 2030.156626][T15261] ? alloc_fd+0x64b/0x6c0 [ 2030.156645][T15261] do_sys_openat2+0x113/0x200 [ 2030.156662][T15261] ? __se_sys_futex_time32+0x3ab/0x440 [ 2030.156680][T15261] ? __pfx_do_sys_openat2+0x10/0x10 [ 2030.156700][T15261] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 2030.156719][T15261] ? rcu_is_watching+0x15/0xb0 [ 2030.156742][T15261] __ia32_compat_sys_open+0x117/0x140 [ 2030.156765][T15261] __do_fast_syscall_32+0x20d/0x640 [ 2030.156782][T15261] ? lockdep_hardirqs_on+0x7a/0x110 [ 2030.156799][T15261] ? do_fast_syscall_32+0x33/0x70 [ 2030.156816][T15261] ? irqentry_exit+0x10e/0x620 [ 2030.156840][T15261] ? trace_irq_disable+0x3b/0x150 [ 2030.156865][T15261] do_fast_syscall_32+0x33/0x70 [ 2030.156883][T15261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2030.156902][T15261] RIP: 0023:0xf703ef6c [ 2030.156918][T15261] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2030.156933][T15261] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 2030.156952][T15261] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000109200 [ 2030.156964][T15261] RDX: 0000000000000025 RSI: 0000000000000000 RDI: 0000000000000000 [ 2030.156975][T15261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2030.156985][T15261] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2030.156996][T15261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2030.157012][T15261] [ 2031.130242][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53220 - 0 [ 2031.304267][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53220 - 0 [ 2031.418413][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53220 - 0 [ 2031.521894][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53220 - 0 [ 2031.603385][ T59] bridge_slave_1: left allmulticast mode [ 2031.611981][ T59] bridge_slave_1: left promiscuous mode [ 2031.618695][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.628634][ T59] bridge_slave_0: left allmulticast mode [ 2031.634421][ T59] bridge_slave_0: left promiscuous mode [ 2031.640143][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.761451][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2031.771869][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2031.781606][ T59] bond0 (unregistering): Released all slaves [ 2032.014225][ T59] hsr_slave_0: left promiscuous mode [ 2032.020839][ T59] hsr_slave_1: left promiscuous mode [ 2032.027917][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2032.035711][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2032.108298][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2032.123474][ T59] team0 (unregistering): Port device C removed [ 2032.513539][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.550207][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.603716][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.652501][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.752626][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.824721][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.882128][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2032.946382][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.073920][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.119578][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.158748][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.233693][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2033.356006][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.368286][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 44040 - 0 [ 2033.448243][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.460477][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 44040 - 0 [ 2033.510316][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.522260][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 44040 - 0 [ 2033.578137][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2033.589036][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 44040 - 0 [ 2033.679725][ T59] bridge_slave_1: left allmulticast mode [ 2033.685571][ T59] bridge_slave_1: left promiscuous mode [ 2033.693383][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.702089][ T59] bridge_slave_0: left allmulticast mode [ 2033.710007][ T59] bridge_slave_0: left promiscuous mode [ 2033.715705][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.725087][ T59] bridge_slave_1: left allmulticast mode [ 2033.731508][ T59] bridge_slave_1: left promiscuous mode [ 2033.737519][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.745978][ T59] bridge_slave_0: left allmulticast mode [ 2033.751931][ T59] bridge_slave_0: left promiscuous mode [ 2033.759124][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.768732][ T59] bridge_slave_1: left allmulticast mode [ 2033.774934][ T59] bridge_slave_1: left promiscuous mode [ 2033.780760][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 2033.789587][ T59] bridge_slave_0: left allmulticast mode [ 2033.795254][ T59] bridge_slave_0: left promiscuous mode [ 2033.801848][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 2033.900026][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2033.910959][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2033.920790][ T59] bond0 (unregistering): Released all slaves [ 2033.967592][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2033.978097][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2033.988240][ T59] bond0 (unregistering): Released all slaves [ 2034.063571][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2034.073922][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2034.083923][ T59] bond0 (unregistering): Released all slaves [ 2034.273235][ T59] tipc: Disabling bearer [ 2034.601073][ T59] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2034.609978][ T59] tipc: Resetting bearer [ 2034.616263][ T59] bond0 (unregistering): (slave bond21): Releasing backup interface [ 2034.625509][ T59] bond0 (unregistering): Released all slaves [ 2034.633924][ T59] bond1 (unregistering): Released all slaves [ 2034.644463][ T59] bond2 (unregistering): Released all slaves [ 2034.654323][ T59] bond3 (unregistering): Released all slaves [ 2034.663588][ T59] bond4 (unregistering): Released all slaves [ 2034.673356][ T59] bond5 (unregistering): Released all slaves [ 2034.684153][ T59] bond6 (unregistering): Released all slaves [ 2034.694078][ T59] bond7 (unregistering): Released all slaves [ 2034.703492][ T59] bond8 (unregistering): Released all slaves [ 2034.713673][ T59] bond9 (unregistering): Released all slaves [ 2034.724499][ T59] bond10 (unregistering): Released all slaves [ 2034.736103][ T59] bond11 (unregistering): Released all slaves [ 2034.749750][ T59] bond12 (unregistering): Released all slaves [ 2034.759457][ T59] bond13 (unregistering): Released all slaves [ 2034.768564][ T59] bond14 (unregistering): Released all slaves [ 2034.778309][ T59] bond15 (unregistering): Released all slaves [ 2034.787637][ T59] bond16 (unregistering): Released all slaves [ 2034.796610][ T59] bond17 (unregistering): Released all slaves [ 2034.805547][ T59] bond18 (unregistering): Released all slaves [ 2034.814726][ T59] bond19 (unregistering): Released all slaves [ 2034.831603][ T59] bond20 (unregistering): Released all slaves [ 2034.840446][ T59] bond21 (unregistering): Released all slaves [ 2035.015282][ T59] : left promiscuous mode [ 2035.095172][ T59] : left promiscuous mode [ 2035.144011][ T59] tipc: Disabling bearer [ 2035.168500][ T59] tipc: Left network mode [ 2035.173255][ T59] tipc: Disabling bearer [ 2035.179016][ T59] tipc: Left network mode [ 2035.410359][ T59] batman_adv: batadv0: Removing interface: macvtap1 [ 2036.158761][ T59] hsr_slave_0: left promiscuous mode [ 2036.164711][ T59] hsr_slave_1: left promiscuous mode [ 2036.174811][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.183906][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.193060][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.201400][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.212792][ T59] hsr_slave_0: left promiscuous mode [ 2036.219878][ T59] hsr_slave_1: left promiscuous mode [ 2036.225963][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.234392][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.242976][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.251252][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.263101][ T59] hsr_slave_0: left promiscuous mode [ 2036.272068][ T59] hsr_slave_1: left promiscuous mode [ 2036.279703][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2036.287655][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2036.295716][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2036.303617][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.313058][ T59] hsr_slave_0: left promiscuous mode [ 2036.319376][ T59] hsr_slave_1: left promiscuous mode [ 2036.331743][ T59] veth1_macvtap: left promiscuous mode [ 2036.337617][ T59] veth0_macvtap: left promiscuous mode [ 2036.343121][ T59] veth1_vlan: left promiscuous mode [ 2036.348979][ T59] veth0_vlan: left promiscuous mode [ 2036.354842][ T59] veth1_macvtap: left promiscuous mode [ 2036.360481][ T59] veth0_macvtap: left promiscuous mode [ 2036.365993][ T59] veth1_vlan: left promiscuous mode [ 2036.371310][ T59] veth0_vlan: left promiscuous mode [ 2036.377667][ T59] veth1_macvtap: left promiscuous mode [ 2036.383246][ T59] veth0_macvtap: left promiscuous mode [ 2036.389703][ T59] veth1_vlan: left promiscuous mode [ 2036.394995][ T59] veth0_vlan: left promiscuous mode [ 2036.554123][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2036.569396][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2036.666205][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2036.682986][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2036.787599][ T59] team0 (unregistering): Port device team_slave_1 removed [ 2036.805271][ T59] team0 (unregistering): Port device team_slave_0 removed [ 2037.268586][ T59] pimreg (unregistering): left allmulticast mode [ 2037.530165][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.536525][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.425848][ T59] IPVS: stop unused estimator thread 0...